Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
File:                     sK0iZDwtl71x-LY0-40dT58B9Kc.mft (raw, json)
Hash identifier:          gKWIV0bsrGEDRfLHmCTImuLT4ko1Stqi/J0IOjm6jWc=
Subject key identifier:   CC:7A:07:9B:5D:B4:7D:59:75:3F:92:45:4F:99:76:AE:2A:26:42:D6
Authority key identifier: B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7
Certificate issuer:       /CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7
Certificate serial:       01962E2AD5199940EC29F58E650514B7A164
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
Manifest number:          0F48
Signing time:             Sun 13 Apr 2025 08:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:21 +0000
Files and hashes:         1: 89qbXuP3JJGKzWaNZO3dqnt1pdw.roa (hash: obr33L2CB/OVnTXprqPZCOQ9LeK6vQA821ilRu8qFT0=)
                          2: sK0iZDwtl71x-LY0-40dT58B9Kc.crl (hash: f8kSvRQ2eBzS334OZKqS7wBA4Pf8v5JYkxPcXFrKd0U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d5:19:99:40:ec:29:f5:8e:65:05:14:b7:a1:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7
        Validity
            Not Before: Apr 13 08:01:21 2025 GMT
            Not After : Apr 14 08:01:21 2025 GMT
        Subject: CN=cc7a079b5db47d59753f92454f9976ae2a2642d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5a:a0:37:07:5c:b4:d0:a4:ea:96:b6:06:79:
                    c4:70:4d:d3:fd:75:d4:70:ea:9f:a0:0b:9d:74:1e:
                    54:b9:29:4d:e9:ca:06:17:65:58:bc:3a:ff:3a:67:
                    d1:ae:14:cf:ea:c1:a9:9f:64:99:07:d4:85:a8:2d:
                    64:d8:61:82:fc:33:50:38:d4:d9:9e:18:4c:5e:c4:
                    73:6e:be:0d:88:d8:c2:94:f9:a1:6c:6a:4d:3b:7f:
                    c8:00:11:07:47:65:05:30:3d:a4:a1:09:38:23:f5:
                    f4:88:e8:ed:89:f6:69:fe:5f:80:3a:ca:49:75:8a:
                    05:0f:51:1b:70:1e:7e:93:cd:96:96:ec:ac:66:f7:
                    07:4e:1c:23:5c:b9:b9:ff:c9:91:6e:4d:ec:30:30:
                    18:c1:08:28:84:ea:9e:96:2b:f0:1e:3f:66:55:ed:
                    6f:8d:e1:a0:16:fe:59:a5:f2:55:db:ad:1c:7d:c8:
                    12:20:cb:a3:a0:e5:c8:a9:c9:c8:db:fd:4b:3c:9e:
                    ef:d0:2c:14:05:4b:03:cb:3b:a3:d2:d7:43:b0:b4:
                    33:eb:8f:50:d4:a7:9a:61:9a:a8:35:37:1d:49:fb:
                    c2:8e:5b:73:b1:6d:a4:84:04:ef:7d:da:d4:26:e7:
                    a4:a3:93:63:14:97:9e:92:13:dc:b5:c2:3b:07:ab:
                    05:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7A:07:9B:5D:B4:7D:59:75:3F:92:45:4F:99:76:AE:2A:26:42:D6
            X509v3 Authority Key Identifier:
                keyid:B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:46:c5:fb:d3:9c:e0:98:cf:7a:35:28:9e:3b:03:7b:a0:75:
         8b:49:06:26:84:3d:a5:43:e8:89:2c:fb:77:d7:cc:81:41:ed:
         70:dc:75:83:f2:af:5f:39:88:f3:50:f0:60:e6:09:6e:9d:2a:
         f8:01:50:dc:a5:8d:1b:1d:f9:a4:23:48:b9:f2:d2:71:53:ee:
         6a:8a:d4:a3:8a:b8:36:a6:5c:60:27:0b:d9:ac:52:fa:f1:a7:
         23:00:75:86:d4:66:17:d9:34:47:7d:c6:1a:3e:8a:2d:e3:37:
         23:ed:ee:d0:50:59:f2:93:50:84:84:b5:91:2c:a0:91:ac:44:
         a1:fa:96:52:c0:0d:0c:7d:c5:36:b9:97:9b:f4:13:0f:85:de:
         ad:03:50:fd:c3:9b:86:80:b1:e8:aa:8f:60:71:9f:65:8e:3f:
         e3:72:88:e5:3e:49:17:0c:c1:9e:6b:b0:97:21:fa:ac:59:93:
         fe:63:61:45:52:d8:c1:c2:e9:be:a9:3c:09:cf:c1:4e:06:72:
         6f:41:65:c7:c2:91:68:18:4b:04:0e:0e:27:5d:aa:41:f2:89:
         1c:1c:76:1c:d8:dc:b5:df:9c:5b:4d:73:7b:7b:8a:eb:d2:db:
         93:f3:83:31:f7:b3:ae:dd:b2:a0:07:01:9d:bb:47:f8:4b:d1:
         70:8f:17:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----