Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
File:                     swQMf0UcYU1-66gsMqOY6H3juMk.mft (raw, json)
Hash identifier:          OJMAPBUfRk2tuEe79m2p45vFL/cpaYkVHgakGeMZqdU=
Subject key identifier:   F5:6E:C3:8F:FA:62:26:95:67:A7:F3:84:D7:01:99:37:EA:E1:2B:5F
Authority key identifier: B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9
Certificate issuer:       /CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9
Certificate serial:       01962F74C5553AE6C43980894EAE1EFA2EDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
Manifest number:          0BBA
Signing time:             Sun 13 Apr 2025 14:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:43 +0000
Files and hashes:         1: kBpD5JAAu1rNn-aQ8UlFSwDRnx0.roa (hash: T699Qvy1WSC5sYOSIYHzGm20cDSkufPAzYmiL43UtM4=)
                          2: swQMf0UcYU1-66gsMqOY6H3juMk.crl (hash: WG2W+L/rocarIyaehdU/eEJvRFChe1FePLQXWeLidBA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c5:55:3a:e6:c4:39:80:89:4e:ae:1e:fa:2e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9
        Validity
            Not Before: Apr 13 14:01:43 2025 GMT
            Not After : Apr 14 14:01:43 2025 GMT
        Subject: CN=f56ec38ffa62269567a7f384d7019937eae12b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ca:a8:fa:87:59:2c:3d:26:d3:52:cb:15:0f:
                    6a:c7:9e:e3:5e:fb:14:ee:85:09:c4:1e:77:b5:1c:
                    6d:8c:44:7a:be:c9:83:31:57:80:ba:58:70:d1:9b:
                    7f:c3:e4:45:52:3e:6a:88:80:98:e2:d9:fd:fb:7e:
                    9f:ca:a6:ae:63:56:b4:92:04:1c:91:be:86:ba:bf:
                    e7:2c:b1:37:00:e0:00:65:1e:ba:de:42:57:4c:0f:
                    f9:c5:cb:63:c1:ba:48:78:4a:c4:f3:ce:13:14:78:
                    68:3c:08:04:9a:3c:a7:94:ef:50:ed:7b:40:39:14:
                    15:b4:4a:08:68:8b:36:bd:18:83:04:b7:38:a0:cc:
                    0a:eb:ce:78:0a:c4:0e:41:5d:b0:52:4e:51:a6:fe:
                    24:c6:ce:87:7a:ba:72:01:7a:2d:1c:25:5a:44:a8:
                    c8:06:87:9d:29:64:87:e1:0f:98:18:84:05:92:b5:
                    a1:85:8d:f7:07:c5:53:8b:51:53:8e:eb:8d:c1:de:
                    21:58:f2:92:7b:51:fc:91:07:10:78:78:76:15:40:
                    d8:f4:c7:cb:34:41:e4:e8:76:17:b1:90:97:20:a4:
                    17:a8:e8:74:58:f5:4a:37:ff:d0:6f:f3:82:0a:8e:
                    c8:59:98:52:e8:e2:c6:75:8d:25:ce:69:65:3b:d5:
                    35:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6E:C3:8F:FA:62:26:95:67:A7:F3:84:D7:01:99:37:EA:E1:2B:5F
            X509v3 Authority Key Identifier:
                keyid:B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ae:52:d7:a6:4c:81:ac:8e:e4:7a:dd:3a:37:74:01:fb:b8:
         f2:14:9d:d4:02:e1:3b:83:17:69:3a:3b:22:c8:e0:a1:20:5f:
         ac:bc:87:ff:5c:1f:c8:b0:7f:7f:ef:10:85:5b:b7:32:35:a5:
         c7:49:11:4b:a7:cf:c5:5a:cd:cd:c6:7e:79:15:e8:b9:4d:9d:
         63:fe:c3:ca:e6:fd:1e:8b:36:33:3e:13:39:10:ae:61:ac:c6:
         d1:e3:b6:09:95:36:99:24:37:6f:62:c6:5d:0d:ea:d6:17:dd:
         41:af:84:32:7b:6c:d4:5c:4b:af:03:d2:42:2d:94:74:b5:1d:
         ca:e4:d4:e8:25:8a:2d:2d:bb:66:0c:fd:40:65:b3:66:9b:e1:
         5a:22:92:47:60:a5:9a:0e:ea:99:14:00:28:30:21:b1:b9:b2:
         12:30:c0:0d:69:38:6c:ea:b7:f9:fb:33:a2:0c:71:64:5c:a2:
         b8:e4:bf:2a:38:64:43:f0:dd:30:c8:0b:ec:5b:01:a0:bd:09:
         b4:ec:c0:9f:dd:97:80:9c:88:9a:1e:98:14:fb:ba:3f:4a:09:
         62:72:d7:cc:23:04:36:4d:1d:a7:30:98:f5:d5:fe:a7:6d:ca:
         53:61:27:06:b1:55:70:03:8c:35:71:2b:19:f8:a9:4f:49:31:
         75:29:b7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----