Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
File:                     Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft (raw, json)
Hash identifier:          agWlwjx6ys81x3abo7CUFP1pYWGdutoGF2bJ03Cg2U4=
Subject key identifier:   E5:0F:C0:C1:C7:DC:48:D6:1B:86:43:55:AB:3F:33:A6:0A:BA:83:5E
Authority key identifier: 49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
Certificate issuer:       /CN=49bf32abf77f412c210f409822d1398ec3beda9b
Certificate serial:       01962E2B14554199A31D394560F86E4C1221
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: 5syV7PgPBQbiBbuoFj10-aiKKG0.roa (hash: lK1gem+kZrAq5cKIs+CpHdM5BUtwnIwQ62pWDxE9JKs=)
                          2: Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl (hash: SiOx0Du1QWSeR2PNqzseQ8IXWetUP82IOfxgXcEihbI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:14:55:41:99:a3:1d:39:45:60:f8:6e:4c:12:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bf32abf77f412c210f409822d1398ec3beda9b
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=e50fc0c1c7dc48d61b864355ab3f33a60aba835e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5a:d3:43:1e:4d:32:4e:37:5b:ff:60:f0:3d:
                    9a:c7:31:90:77:58:17:26:80:70:d0:23:88:d8:11:
                    39:0c:e1:75:d8:aa:67:ab:cd:aa:e2:31:7e:b7:cc:
                    f3:f6:85:18:fb:d9:35:c6:14:1a:01:97:14:5f:fb:
                    26:00:23:75:bb:56:2c:a7:4a:dc:db:7e:67:e9:fa:
                    2d:e2:83:ab:7e:8b:52:0f:65:91:6f:7e:54:6a:7c:
                    01:f1:fd:68:45:93:17:27:e3:25:47:e2:fa:34:3e:
                    3a:8d:34:0b:d8:8c:40:b2:57:dc:1e:21:2b:82:7e:
                    2b:94:fd:e1:6b:fc:3a:d5:5e:65:61:54:41:26:3e:
                    f0:e7:76:78:3a:6b:01:69:25:93:c0:be:4f:e0:e4:
                    c2:ed:e5:b0:37:77:e7:f4:36:39:d7:15:5f:fc:63:
                    1e:2e:c1:f1:5e:05:98:95:7d:15:05:18:db:fc:6f:
                    3a:d8:65:24:1c:a8:f1:16:be:e1:4b:e7:16:d1:ee:
                    30:d6:20:7d:45:3b:2d:f0:00:16:e7:12:61:7a:34:
                    be:a1:19:b4:46:56:24:f5:fb:5e:a5:8e:67:05:ac:
                    99:74:bd:8f:fb:4e:ff:90:5a:ab:c6:e0:7b:04:b4:
                    2c:09:72:26:20:89:37:55:07:f9:f4:82:31:19:1f:
                    68:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0F:C0:C1:C7:DC:48:D6:1B:86:43:55:AB:3F:33:A6:0A:BA:83:5E
            X509v3 Authority Key Identifier:
                keyid:49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:bf:6a:bb:4b:9a:f5:ed:81:d5:ba:d5:f8:02:8e:f4:eb:7c:
         3a:57:6d:13:8d:b4:ab:23:f1:08:f3:d9:9f:50:e7:ca:f4:a9:
         9a:c2:cf:01:fb:9a:b6:37:14:72:10:02:90:91:1d:55:5f:73:
         b9:41:c3:ce:7a:75:78:67:62:1c:6b:99:4d:ca:85:66:c2:46:
         54:68:0a:cc:45:e6:39:db:34:65:8c:74:a6:5f:33:8f:d8:2b:
         1a:86:40:fc:9d:13:7d:f6:cc:ac:d6:d4:fd:31:ea:e2:15:1e:
         2c:a1:53:93:09:f8:df:b4:d0:45:c2:ed:ed:b7:59:2f:9f:26:
         c1:96:ff:03:46:1b:24:e7:f3:ad:e0:99:3f:7b:69:17:bc:a4:
         fb:e4:84:fc:81:90:a2:90:c8:6e:cf:50:de:4a:29:3c:a6:63:
         d3:7e:a0:63:eb:c6:22:b4:da:e7:6b:12:8c:ec:e7:a8:62:1a:
         4e:de:67:53:bb:19:ba:a8:65:4e:33:07:7a:ad:75:ab:d0:ff:
         58:77:77:ab:48:58:b7:f6:30:18:cd:f2:13:d7:d9:cd:d9:be:
         73:38:2f:b4:40:ae:3f:73:6f:3e:83:71:e5:ff:b5:ad:0b:1a:
         30:85:82:cb:17:ab:eb:6c:fb:a1:90:7f:bd:40:62:fb:f0:4f:
         fd:1a:b9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----