Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
File:                     sffQCUrcmNmwMnIOgePbWqdYHHQ.mft (raw, json)
Hash identifier:          ZDGNpUcAotSw2SEa19R62UZ/z3kDBRMVC83sp6HkqU0=
Subject key identifier:   33:FE:91:EC:4D:6D:9D:CD:26:5B:E9:6E:BB:08:24:C5:3D:D9:3E:9E
Authority key identifier: B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74
Certificate issuer:       /CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74
Certificate serial:       01962DF42F464EBE96CBE2655AA31CB946AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
Manifest number:          0A71
Signing time:             Sun 13 Apr 2025 07:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:39 +0000
Files and hashes:         1: sffQCUrcmNmwMnIOgePbWqdYHHQ.crl (hash: kQE/SfDIIuJWmX4ZRtZ6HsVzXNI3ofjz0LTJZgz0/+E=)
                          2: tkngR5wwQ6qh3iGid8LqkeZO0Sg.roa (hash: XAoboSbFoG6N+OZ4mfDqaXa/N9sFsWbZUGbRzqL5oH0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2f:46:4e:be:96:cb:e2:65:5a:a3:1c:b9:46:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74
        Validity
            Not Before: Apr 13 07:01:39 2025 GMT
            Not After : Apr 14 07:01:39 2025 GMT
        Subject: CN=33fe91ec4d6d9dcd265be96ebb0824c53dd93e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1a:00:da:6e:de:ab:48:80:d7:a7:5e:8f:fa:
                    b1:1f:21:77:e1:a0:da:b9:56:60:6e:6d:0b:2a:b1:
                    0a:72:42:85:2a:25:fb:dd:72:7a:31:66:0d:42:3a:
                    2b:35:2a:67:a0:a0:ae:10:18:52:08:59:8b:c7:52:
                    3c:b6:21:b4:d6:17:65:ab:c2:cc:df:10:1f:42:bd:
                    45:e6:f1:cf:31:f5:ba:59:1b:52:e9:3f:2c:cd:24:
                    68:26:c3:4c:5a:84:81:06:b5:b5:b6:fc:01:3e:d9:
                    84:6d:00:84:d5:65:94:28:8b:4f:d7:30:a0:e9:2f:
                    68:91:6c:1e:61:bc:1f:1a:df:b9:67:52:29:0b:11:
                    ce:04:6e:65:f0:cf:9f:ae:17:1c:27:42:c3:b2:16:
                    1c:45:5a:fb:18:e1:6f:6a:fe:d6:f2:b9:0c:47:ae:
                    b5:58:f9:9d:f7:51:f5:13:30:ed:9b:5f:b4:50:6e:
                    db:4d:6b:d3:7e:d8:35:dc:dc:31:9a:27:45:69:56:
                    11:e4:92:a4:bc:8e:24:cd:cb:f0:3f:48:8d:ee:9c:
                    3d:23:a7:75:7b:04:2b:5e:10:fc:33:27:69:e2:df:
                    9f:8a:54:48:3b:ef:15:85:58:ab:79:80:cb:d1:b5:
                    ce:e8:4a:85:f6:d0:de:8f:11:b0:aa:f0:a3:96:ed:
                    2a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FE:91:EC:4D:6D:9D:CD:26:5B:E9:6E:BB:08:24:C5:3D:D9:3E:9E
            X509v3 Authority Key Identifier:
                keyid:B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:18:87:bc:35:a5:26:54:33:a3:bb:b3:68:c8:06:f8:86:09:
         e4:cf:06:1d:ae:88:1f:09:ba:b8:35:ce:cc:ed:e2:a2:7b:96:
         50:b7:3b:73:30:cd:05:46:d8:a3:a3:b0:8c:0d:89:22:74:75:
         b3:c5:e5:3c:e2:e8:60:4f:7a:b7:9f:5d:bc:99:63:4c:c5:73:
         1c:df:ae:31:f3:79:d8:a7:9e:2a:ff:6b:bf:6b:4e:1d:35:2c:
         74:7a:9f:7d:6c:e1:d7:7f:94:b3:92:6a:63:89:1c:a1:63:98:
         39:bd:b5:ed:d9:6a:4c:63:98:b5:1b:78:dc:83:24:ff:e5:3a:
         ab:5c:9d:c1:ce:35:04:32:c1:79:4f:3b:f6:5c:35:74:20:b1:
         99:23:6e:f9:a6:50:b9:6a:08:e9:3d:2a:c1:81:fc:83:1f:00:
         62:80:31:3a:cb:f3:1c:9b:d8:63:78:73:54:4e:31:e5:99:2a:
         d8:10:90:0b:fd:0d:52:82:5a:bd:bf:a8:87:f5:73:ec:d1:c0:
         81:e6:3e:2b:2c:39:bd:64:21:67:e9:bd:18:9a:06:66:b9:17:
         7e:ec:01:e0:d3:69:97:df:bb:f8:8f:1b:93:a1:89:6b:17:c1:
         5a:d3:d8:db:b5:a7:36:55:4d:ad:75:e3:c6:9e:97:89:a8:a9:
         5c:24:8a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----