Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
File:                     sbIBNjzMVWvsiHAladjTgaDolWY.mft (raw, json)
Hash identifier:          wOV2FrN+7zn5pCFRO7gyzFlFtkrfCWBzZ0DV5AQgOck=
Subject key identifier:   C3:40:C4:D0:8D:E9:6C:3C:92:2B:A4:90:F2:D1:A1:D4:0F:82:94:7B
Authority key identifier: B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66
Certificate issuer:       /CN=b1b201363ccc556bec88702569d8d381a0e89566
Certificate serial:       01962E98FA71634F76529918DF24BE05E6C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
Manifest number:          0B65
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: lqeFydVXrdHwpq6mWSJTL5OgZAY.roa (hash: YaK2y/qIg0D8N7eA9vbxZ0CRyImPi+H1Zg28ZURYmRg=)
                          2: sbIBNjzMVWvsiHAladjTgaDolWY.crl (hash: ix8DXj4Zrw2uQgfIBcpKqCMRVrvXBgIwoLCuTFK2RtI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fa:71:63:4f:76:52:99:18:df:24:be:05:e6:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1b201363ccc556bec88702569d8d381a0e89566
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=c340c4d08de96c3c922ba490f2d1a1d40f82947b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0e:f8:55:06:1b:7b:b0:8e:da:79:18:f9:be:
                    e6:33:10:9f:d1:e1:bf:5a:af:f8:e3:04:0c:22:7f:
                    46:43:16:2e:69:70:e9:48:8c:a6:cf:2e:e0:31:74:
                    56:c1:79:f7:b4:18:60:0d:d8:b2:87:0e:95:ab:6f:
                    76:f3:1a:bb:2f:e8:4d:7b:72:3f:05:cf:ce:73:b6:
                    40:2c:02:c8:5a:d6:90:8b:28:9a:a4:e2:dc:e6:7f:
                    54:e3:58:d7:54:c9:c9:46:df:4b:51:b4:84:f1:a1:
                    a9:35:11:2f:f1:6e:e3:91:a5:fb:5c:a3:f1:ad:62:
                    c8:93:d2:74:4e:32:83:a0:d9:c4:98:1e:39:ac:d8:
                    de:56:45:3e:89:2e:a9:93:d5:b6:2d:8f:8b:b0:36:
                    68:2b:00:ca:61:cc:24:ba:b0:15:2f:67:f1:cf:9e:
                    85:20:d2:7c:8a:66:5a:c8:b3:80:1f:50:00:55:15:
                    ea:45:c9:96:55:89:2d:1c:7e:49:ea:13:6b:e5:fb:
                    89:bf:02:f0:76:70:9f:7f:20:02:4d:12:ed:4d:9c:
                    72:1f:c8:9a:4d:23:a6:08:0c:8e:44:ce:44:44:16:
                    5e:53:b2:5c:c4:86:76:82:23:84:b9:99:04:12:a2:
                    1d:52:bb:d3:19:b9:37:08:b1:2e:88:ad:97:78:a6:
                    1e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:40:C4:D0:8D:E9:6C:3C:92:2B:A4:90:F2:D1:A1:D4:0F:82:94:7B
            X509v3 Authority Key Identifier:
                keyid:B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:24:b5:9d:56:c6:46:8b:1c:ee:1f:92:fe:88:b6:e9:df:78:
         63:fa:8a:bc:33:54:84:aa:59:c4:d3:18:8c:47:46:6a:50:3e:
         87:29:94:4b:94:b4:9c:9f:5b:74:6a:fb:e9:71:19:9b:9b:5f:
         74:98:db:17:8d:27:66:aa:8d:3e:d7:bf:ef:56:9a:c5:61:61:
         be:e6:9f:51:52:d4:bc:c4:e2:2b:9c:15:07:4f:d2:cc:eb:e1:
         9f:d3:3b:95:3f:d7:95:2c:e0:06:c4:28:8b:61:bd:14:0c:8a:
         4f:46:a8:e1:8f:a6:34:43:f9:03:51:1d:09:c1:11:91:e7:a3:
         9f:35:dc:b1:ad:ff:24:25:fe:0a:61:45:08:20:5e:ff:f1:38:
         e9:10:6f:80:6c:4f:f6:3b:f1:00:ef:e4:1c:77:12:e3:8e:41:
         0b:ba:3f:ae:ae:98:6a:04:e7:15:b5:1e:82:9b:46:03:6c:be:
         0a:69:6c:f0:c8:2a:36:a2:2f:eb:7a:78:25:95:9b:4e:ee:71:
         ff:11:4a:29:13:24:5d:37:c2:18:c4:ad:a5:f1:c4:14:8b:ff:
         56:d1:e3:73:d0:66:79:19:d1:fd:91:7c:e3:0a:80:ad:3b:da:
         25:1b:c1:a1:87:54:31:d9:1f:0f:74:d8:da:d9:13:fd:d8:80:
         d8:7f:38:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----