Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
File:                     sKEzNsOO66EMusnCjK8e_PRKyGM.mft (raw, json)
Hash identifier:          rSZEwtamYjl83NJ1LL84PuzQLW/BGRHla9Y/V0GWB2A=
Subject key identifier:   D7:B9:35:48:15:7E:04:47:F1:AB:9F:AC:54:D7:BD:F6:91:2B:5B:DC
Authority key identifier: B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
Certificate issuer:       /CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Certificate serial:       01962DF41C69C3B2A833CAC6736E67830B66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
Manifest number:          07B3
Signing time:             Sun 13 Apr 2025 07:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:34 +0000
Files and hashes:         1: sKEzNsOO66EMusnCjK8e_PRKyGM.crl (hash: 8yVeFhQACJijeawkffZSqxd0VhrAWn1JOaot91MMu8o=)
                          2: y3LlHCcHKFo-BQ_p86jxyc013sQ.roa (hash: 70W6ragDKntXJcQVl89iuaUr+4h8ye/EbsXthKhbWqg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1c:69:c3:b2:a8:33:ca:c6:73:6e:67:83:0b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
        Validity
            Not Before: Apr 13 07:01:34 2025 GMT
            Not After : Apr 14 07:01:34 2025 GMT
        Subject: CN=d7b93548157e0447f1ab9fac54d7bdf6912b5bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:cb:ad:6f:13:ae:1a:5f:a3:fa:80:c5:8d:ad:
                    00:19:ed:65:ba:b6:0d:04:3e:52:0a:5c:13:74:c6:
                    f9:70:89:80:1e:ff:9e:fa:21:d5:99:82:60:44:24:
                    33:06:d8:28:8a:b4:82:67:f6:11:e3:92:28:4d:69:
                    50:3a:ff:cd:f8:48:60:c5:28:4f:fd:05:72:9e:b2:
                    39:7c:63:b1:58:1f:6a:da:a1:fb:c1:0c:03:5d:89:
                    fd:e2:44:0b:31:40:38:d7:17:70:8a:17:60:33:14:
                    28:e9:19:79:1a:32:63:b7:a0:c1:2f:f0:8d:7c:84:
                    f0:fa:84:a6:95:96:a6:49:5c:12:90:e3:86:d8:6b:
                    7f:d2:99:05:33:4f:c4:7a:e4:74:cb:60:db:79:e4:
                    5d:be:ad:1b:77:76:ff:a8:5b:59:73:2a:d1:f4:33:
                    f8:a7:55:e4:32:37:81:0a:a9:5d:b6:f2:4e:0f:f3:
                    36:15:46:11:d3:43:04:ab:bd:bc:f7:17:ed:03:39:
                    d4:4a:41:19:6c:24:b0:af:97:d6:be:41:02:a5:31:
                    c6:5e:36:e7:80:fe:00:1b:16:2a:a8:3a:13:71:8f:
                    ba:35:f3:4f:53:eb:fa:ee:7b:4a:35:65:15:5e:f8:
                    53:8d:23:d8:cd:85:ff:f0:49:2a:58:31:77:77:91:
                    b9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B9:35:48:15:7E:04:47:F1:AB:9F:AC:54:D7:BD:F6:91:2B:5B:DC
            X509v3 Authority Key Identifier:
                keyid:B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:d9:8b:b8:74:50:3a:94:56:78:3b:3e:75:50:d0:6f:df:91:
         ab:13:16:be:ee:06:e1:5c:90:1c:60:58:0f:67:94:d3:63:3a:
         41:f6:27:fd:b7:00:ee:6d:5e:78:5a:5d:90:22:e7:5f:fe:28:
         7b:1f:38:af:c8:f5:79:d8:91:80:53:91:1e:ca:8f:67:78:dc:
         af:0f:8a:d3:88:4c:b4:3f:20:22:5e:cb:c3:4b:d5:00:10:1a:
         82:80:49:b5:0e:f4:31:61:c8:dd:f5:f2:24:0a:59:d4:30:89:
         48:e2:2b:19:84:0a:6b:6f:94:14:78:2f:21:2d:37:67:80:ae:
         86:d4:04:92:cb:07:0f:69:f1:a1:88:e6:d1:6a:4b:04:2f:4b:
         64:83:48:4a:00:0b:b3:89:b4:9d:b1:d3:a2:4f:f3:a4:fa:c7:
         39:a5:5c:5b:c9:2e:7c:8c:64:4a:95:cd:13:95:98:65:23:e7:
         13:e5:2a:e2:14:6e:77:d2:5f:6d:76:92:fd:df:b0:79:dc:5e:
         76:fd:49:25:5e:6e:2f:12:d0:15:aa:89:cb:9b:16:af:62:57:
         70:7c:b0:f3:2a:95:a2:2d:5f:ac:00:4d:8e:95:51:25:00:04:
         d0:55:92:e1:a0:65:be:80:cc:a3:22:57:0c:ac:cb:5b:58:fa:
         10:88:c6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----