Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
File:                     sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json)
Hash identifier:          o+QAHQ5ySL53csKq2t2LgA/xL6K5kHGgEIUO8fZ8P8E=
Subject key identifier:   F2:6D:A2:F9:D7:66:22:67:EE:12:1B:C1:0F:7C:C2:65:4F:43:6E:CB
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Certificate issuer:       /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial:       01962F063C855386CBAEDC78A075B8CCAE8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
Manifest number:          10EB
Signing time:             Sun 13 Apr 2025 12:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:00:59 +0000
Files and hashes:         1: 0Masll6bbXJowlWVdStYbs2tx6E.roa (hash: Rro7robf4OQi2SafD/+wvUIv6rGO8rIKSIcGQQxuDhQ=)
                          2: GbtphNgjK0vdnL4zh4ndNFpMq98.roa (hash: u7HLBqxJEFs0R6rzUwZQDioPq2mneZLMKiZ7WWFYBQg=)
                          3: HIdYT19grrvIrsLvbv9c-RyNoYM.roa (hash: gMWRLPsAhHALB5C0CyTnC2YpfuJ8OqfVcPAvIC+/69E=)
                          4: OUt5ZB5ErN_qim9RPT1gdy6_fsA.roa (hash: jUTt0o3pm+pyLvb6Ukj+eNNJ2nE69gsAdM4+2ox59R8=)
                          5: R_OlpiLM8AchN0LvgG-brNSPeok.roa (hash: Ha2jaeCRdAo3cD1S+TwOcwXV50R2/YikiY9fj+5QfSk=)
                          6: T-i1HnnAiZlugAgaa37LNPgeYyA.roa (hash: JZrI/oiF2iHcbj3PFgspIgoRlLncbc7mtmuIlUx+R6U=)
                          7: Ud1-qg4EKtzsyzWQNEDC3VcBphk.roa (hash: tG3V/2PvCU18KU7wZhF4EU3GKrtt9KLBzuF/XDqtx0A=)
                          8: euxOi9Xp3n7AyiSfCEP-xOv9hDo.roa (hash: hqClLQ+yTS1bqIE58Fj5bi8zXosgwwjJT2D8au7VfQ0=)
                          9: oTdRqWCGB_YZL-zzysNmCsUI8OU.roa (hash: Z3CxIW13t+FC0u78Ynw/b8NpKjP4IiiiZzM5isLuBQ4=)
                          10: opjBwsfQwaZJKVugJJ6MF-vgLQw.roa (hash: MNlxdTCVbR2yhgEH9HVAaomJahjdfDcmr5j99PJZjnc=)
                          11: piqnuODF7lhN690__V-7lYt7O9g.roa (hash: bJ0by5gF5+d/INxTw0HKrWzPPNlfAOi7lGQ6bR/NpSU=)
                          12: qjtTNxOEgSr0b6Weeb9JJHyFnhM.roa (hash: Eb0gxKs3qeMLVvYaIgIGm1oY4DsjaHktiucw1gfNHns=)
                          13: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: HgPmjuZ69v8r7SiGAQjsrV0zvuC/82EJBAd+XWZ8tNY=)
                          14: saFbFhTUuPzFfFtMaOygiXjsdjQ.roa (hash: TDWnbYHUGSQ6GnqoY3kIyLDGpSZVRvMCUWL7dARQ87Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3c:85:53:86:cb:ae:dc:78:a0:75:b8:cc:ae:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
        Validity
            Not Before: Apr 13 12:00:59 2025 GMT
            Not After : Apr 14 12:00:59 2025 GMT
        Subject: CN=f26da2f9d7662267ee121bc10f7cc2654f436ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:99:d2:50:63:cc:d1:59:5b:33:62:82:14:26:
                    71:6a:71:f8:d3:60:40:c5:ef:63:78:f5:73:fa:c5:
                    f8:a7:a5:1b:0b:10:8b:f0:9c:a2:53:41:61:24:82:
                    2b:5e:49:64:c0:be:07:8f:d5:60:55:7e:11:f6:db:
                    db:9b:24:2e:78:c1:7f:33:02:43:98:1d:14:d6:a2:
                    f9:a4:7b:0e:3c:06:ec:6f:38:c4:69:c0:bb:1a:a2:
                    68:c8:69:76:60:d5:a2:b5:42:03:b5:88:15:6a:18:
                    5c:74:cd:66:ce:81:f0:fc:47:f4:a6:d3:32:dc:87:
                    ce:96:1d:28:a5:99:fc:22:12:9f:9c:65:f8:d1:13:
                    d7:95:9a:dc:77:75:ba:6a:41:09:01:d4:c7:88:ca:
                    57:97:f5:d2:d7:d2:a0:67:05:95:bf:fd:6d:1e:05:
                    cf:ba:72:4d:bc:dd:49:ee:6d:da:4e:c9:1b:5f:de:
                    98:2b:2b:2c:6d:62:fc:66:0d:4a:ac:bb:d2:9c:8b:
                    77:c9:cc:c8:6e:b2:dc:9f:91:8f:54:65:9b:33:d0:
                    5f:67:d1:13:27:11:c2:4c:51:68:1b:25:78:6f:30:
                    75:6a:ed:4f:07:1a:d6:61:81:53:d3:a4:99:83:8e:
                    61:24:32:1f:98:b4:18:50:23:3a:30:5e:47:6e:9f:
                    32:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6D:A2:F9:D7:66:22:67:EE:12:1B:C1:0F:7C:C2:65:4F:43:6E:CB
            X509v3 Authority Key Identifier:
                keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ae:47:41:90:5e:4a:ea:2b:7e:3e:07:34:50:e0:dc:58:63:
         30:c3:16:c3:95:09:61:56:c6:8f:67:59:ab:ac:ad:62:14:9b:
         a6:f6:6e:03:1e:a3:cc:9f:0f:c0:4e:ad:8f:e2:91:fb:25:2f:
         18:3c:9f:e4:da:aa:e2:b2:0e:e4:1e:0e:95:33:c3:17:ce:d9:
         95:a3:0f:a8:c4:47:7a:f6:c6:90:bd:0b:a3:c3:4e:e8:16:f3:
         5c:ae:17:34:c8:6b:93:d4:10:ec:d4:f2:42:44:aa:42:ea:36:
         93:0d:af:cc:75:ba:07:a5:d3:b7:31:87:48:d4:1f:44:c1:a6:
         f5:f5:19:0b:e5:28:eb:b7:70:7b:73:97:66:ba:c3:79:cd:68:
         1f:b6:ed:63:c0:d2:33:77:17:a4:ae:fc:03:5f:33:20:72:51:
         f7:d9:d7:22:e4:b0:64:f3:2d:04:a7:4d:43:8d:ea:4b:20:12:
         09:15:45:64:ba:f8:18:25:56:ef:c2:8d:82:41:92:84:d0:9c:
         20:39:ce:f7:f4:d5:e0:ab:7e:23:49:fd:07:50:6d:fc:e3:5d:
         3d:a9:f3:3a:d0:db:b6:f7:b9:db:6c:27:e8:a5:aa:76:9f:19:
         fc:2e:ee:03:e9:32:4f:f3:db:46:b4:8a:4a:71:b5:56:b6:de:
         72:97:10:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----