Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
File:                     B__SkDh900rAeQxrnX7pn-23gUk.mft (raw, json)
Hash identifier:          PSOt2zxmpED8HWga6nhmlo98+YQv4ZhYc5XqDnskTzo=
Subject key identifier:   F2:DD:18:68:AE:F7:EB:68:6B:16:6F:A3:2B:4F:4A:A6:7E:A6:36:AE
Authority key identifier: 07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49
Certificate issuer:       /CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
Certificate serial:       01962FAB246FAA4DF57A3A697F0B4D5EB7F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
Manifest number:          0346
Signing time:             Sun 13 Apr 2025 15:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:07 +0000
Files and hashes:         1: B__SkDh900rAeQxrnX7pn-23gUk.crl (hash: 2ZDuo/pPzZD64sWiXQStD7fWADbCJDeTJ5MZR7BmTN8=)
                          2: jvHRud-0bfVZE35uo3ytxWpEsiQ.roa (hash: /JbTDkFvtTl5SlOmgYIpMzTAuGjpF4dmP37OC1pKU5o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:24:6f:aa:4d:f5:7a:3a:69:7f:0b:4d:5e:b7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
        Validity
            Not Before: Apr 13 15:01:07 2025 GMT
            Not After : Apr 14 15:01:07 2025 GMT
        Subject: CN=f2dd1868aef7eb686b166fa32b4f4aa67ea636ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a0:13:f8:06:b2:98:6f:5d:5c:02:0a:cc:58:
                    03:60:df:08:6a:2e:5c:aa:f0:9e:bc:e5:22:40:ca:
                    9f:32:d1:bd:fe:10:13:79:7e:3b:ec:ad:d0:1d:50:
                    02:39:85:b2:68:b4:b5:79:4f:ba:94:5b:b8:ee:33:
                    d9:67:75:3f:ff:16:de:49:f8:8b:fb:8b:3d:29:e4:
                    ee:5a:dc:1f:c7:92:f0:dd:29:f9:cb:e5:f6:49:e2:
                    fb:79:85:22:9f:2e:b6:80:95:21:6b:7f:1b:87:6c:
                    7c:be:9b:98:f8:0c:16:d7:67:30:3b:5b:92:46:ec:
                    4f:b4:d8:f4:3d:4f:c3:d3:f2:63:c3:0d:34:11:fe:
                    69:b2:6f:f7:b0:98:0a:78:b3:72:57:aa:ad:14:fa:
                    ed:53:12:6a:cf:09:b6:92:e3:08:7b:1b:2e:01:e5:
                    a7:13:eb:bf:51:86:31:61:88:51:80:30:0d:e3:7d:
                    59:65:10:67:be:27:0e:82:0c:12:66:e0:8c:83:e8:
                    f0:51:8d:3b:3b:5f:48:ed:41:39:ba:4a:e0:99:39:
                    0a:b1:e6:56:5c:8b:9e:00:85:85:84:52:e1:bb:4f:
                    2a:09:8d:a1:7c:87:7a:3c:c9:7a:56:52:bb:ef:7e:
                    1b:cd:97:62:d6:64:93:7d:83:6f:d6:92:93:f8:1f:
                    11:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DD:18:68:AE:F7:EB:68:6B:16:6F:A3:2B:4F:4A:A6:7E:A6:36:AE
            X509v3 Authority Key Identifier:
                keyid:07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:29:09:86:9c:05:ee:7f:86:80:ff:0e:c8:b5:d0:67:b6:d3:
         dc:5a:1f:c6:10:5f:d2:52:7d:06:eb:a6:76:b0:0d:25:36:a6:
         43:6a:3e:1d:b3:9a:50:c4:bc:a9:96:30:41:5e:2e:70:ff:66:
         f0:c5:42:9e:f0:22:ce:28:fb:c7:e4:51:53:d5:f5:e1:45:87:
         9f:7e:db:b2:e7:e0:b8:ad:a3:fe:df:08:40:ee:c9:e1:a6:a4:
         10:ef:3d:9a:64:94:19:3a:dc:88:12:93:23:1a:44:72:b5:9a:
         af:0f:a4:22:d2:d5:33:f3:10:7a:ba:94:77:4e:b9:13:a0:89:
         82:c1:ca:88:a6:21:92:c2:29:b4:c6:ed:62:22:25:6c:03:49:
         54:e6:ff:2d:ae:e0:71:cb:c1:4c:77:77:06:75:b3:06:75:2e:
         37:8b:5c:f7:26:4f:8b:a7:c2:f4:38:cd:c1:35:0d:83:9c:a2:
         39:4f:23:57:94:bf:13:51:60:f4:f7:86:12:f1:ae:01:7c:95:
         8f:22:72:f9:db:28:12:88:ac:ea:09:0c:f7:99:35:e9:52:74:
         78:f5:eb:d9:72:48:39:59:36:7e:2e:75:57:d7:25:88:d5:32:
         36:48:8d:3e:6d:6c:1a:cd:8d:dd:a5:ce:01:4c:53:e1:3c:6f:
         e4:97:5d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----