Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
File:                     sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft (raw, json)
Hash identifier:          /SzrsZKzozgUcZ86x0mg4bCkhSzsvisQVUNcYLF2B+A=
Subject key identifier:   1A:1E:E8:72:21:D4:D6:89:44:3C:4B:15:99:EE:A6:15:1D:84:8D:63
Authority key identifier: B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
Certificate issuer:       /CN=b0d62d1666c5c4d192183531584afd72bed08485
Certificate serial:       01962F0694FF8E5E902408385D52A5529B05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: QXyQtT8qy7cZkdePrzNkoMkFsLI.roa (hash: p4NnT1oNWa0lNXGn9ql046BScEcNjINqPaeSDpvSus0=)
                          2: sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl (hash: WSvUGxGoqOjMgVR3VdWTrqAtFNuym9jGWpVj8WoGTuQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:94:ff:8e:5e:90:24:08:38:5d:52:a5:52:9b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0d62d1666c5c4d192183531584afd72bed08485
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=1a1ee87221d4d689443c4b1599eea6151d848d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e0:b4:b5:6d:99:6e:ef:4d:10:d4:64:a3:67:
                    41:20:1e:19:55:ef:89:6e:2b:22:a1:cb:1d:c6:6f:
                    3b:14:d9:35:cb:49:83:f8:75:e6:0a:37:90:c4:6b:
                    8a:3d:39:96:fa:87:67:b3:3a:73:ac:07:61:61:6f:
                    fa:6e:c6:5d:ec:da:b3:cd:b6:ad:40:4d:4c:f5:be:
                    d3:60:ba:63:23:fa:46:e3:33:a5:1b:00:a1:fe:6c:
                    a3:3d:bb:09:54:fb:fd:6e:62:64:3b:14:f6:6f:66:
                    2b:c1:5c:9d:b4:ab:81:5b:23:9d:b0:c8:fd:0a:43:
                    17:3b:19:a4:4b:a9:39:4b:0a:2a:a7:88:d7:1d:ae:
                    95:40:86:41:ed:31:98:ec:0a:59:54:59:db:70:52:
                    1d:6f:fe:8e:ec:b0:d0:e9:85:07:b5:0a:ce:fe:3d:
                    35:c1:17:01:08:af:04:80:e9:10:e8:10:89:73:b4:
                    18:6d:ae:9a:01:ae:2e:e2:52:67:3b:30:a5:4a:88:
                    44:3b:d9:8c:f4:0e:a6:78:b0:d5:54:3b:b6:8b:76:
                    ca:b1:7d:ec:72:61:c8:38:b8:43:89:22:fb:26:c3:
                    1a:94:8a:7e:f9:38:ac:31:2b:5c:19:c8:ef:c6:73:
                    f7:ce:7c:ff:16:a9:ba:bc:24:8d:7e:da:f6:42:87:
                    c9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1E:E8:72:21:D4:D6:89:44:3C:4B:15:99:EE:A6:15:1D:84:8D:63
            X509v3 Authority Key Identifier:
                keyid:B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:83:25:03:ba:9b:a4:9a:90:88:1d:17:0b:49:c8:12:5b:35:
         a2:ae:33:c6:db:88:62:e9:d3:6a:ff:74:a9:73:25:f7:18:b5:
         fd:34:59:ea:56:dd:ee:c7:3d:96:f2:b0:e9:39:48:a7:9b:da:
         27:1a:6d:c3:5d:14:2b:50:b7:ed:52:1e:92:3f:f3:a4:65:8e:
         c3:53:0f:ad:5a:db:2a:4a:e0:e9:3d:ff:aa:51:e7:0e:8b:f4:
         20:f8:a7:d8:b8:29:47:8d:ee:4c:51:d8:a4:5f:d4:89:41:20:
         e6:45:be:78:a5:ba:40:77:5d:03:4c:cc:ac:55:fa:28:b3:7e:
         04:07:1f:6d:a4:ff:2b:79:60:95:e1:ec:17:a2:24:1d:b0:a7:
         98:3e:ed:ea:ed:f7:8f:28:3e:17:01:ad:d7:54:06:00:a7:93:
         84:83:00:d6:50:fd:b1:1f:77:05:cb:b8:70:55:8f:5d:29:50:
         d4:74:1a:00:c1:22:09:93:dc:b1:35:cd:b5:d4:00:28:1e:d6:
         dc:22:39:f0:d8:d7:a4:fe:ee:68:09:17:ff:6f:13:ba:be:01:
         d2:26:ec:e1:21:c4:a8:b9:05:65:27:57:26:33:1a:9d:3b:7e:
         db:6a:81:1a:7a:62:ba:0e:5b:88:f2:4f:aa:6f:b3:43:5d:18:
         46:ae:a2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----