Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
File:                     she1rEZ0EuJJxE4nOcKJ67BM0zc.mft (raw, json)
Hash identifier:          WDFKeFjfBtilYH8MpwwIGmtJilOdmBvfoSjTlvc5egI=
Subject key identifier:   EA:31:41:E5:31:FF:67:5C:F9:99:34:10:72:4D:1E:ED:BB:F1:10:D3
Authority key identifier: B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
Certificate issuer:       /CN=b217b5ac467412e249c44e2739c289ebb04cd337
Certificate serial:       01962E61CE3AC631DCA54B3C1FEF345F243B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
Manifest number:          0892
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: Ftnb9Ud8kWttM5-w7OSz4uHafco.roa (hash: 2d7vx7DexYl0/ojCB78Rdwk/rdaUo+im6ReM1HOn2aE=)
                          2: she1rEZ0EuJJxE4nOcKJ67BM0zc.crl (hash: sxSY2eAL3IXIGL7elPt4KDhmhd+WQWn/RGVlXjKIrUE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ce:3a:c6:31:dc:a5:4b:3c:1f:ef:34:5f:24:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b217b5ac467412e249c44e2739c289ebb04cd337
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=ea3141e531ff675cf9993410724d1eedbbf110d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:da:5e:ac:e0:bc:e3:28:12:69:99:8e:5e:f0:
                    ba:a9:74:b5:d2:fc:cf:38:f6:0c:96:30:92:a5:71:
                    ac:04:d0:c4:22:2e:c8:e5:69:16:72:d1:fe:20:6b:
                    bf:be:28:0f:c7:9f:b4:5d:fe:61:b3:21:b7:d7:6c:
                    0c:9c:7c:5e:a7:e3:2b:fd:b5:1e:d8:dd:26:da:ba:
                    fd:8b:b2:9c:01:ce:72:fa:00:7e:ac:1d:23:e4:03:
                    ad:46:43:c0:bd:80:50:5b:41:97:0d:b1:be:f7:31:
                    23:ea:94:d3:3b:46:ad:be:41:26:12:41:c4:44:22:
                    58:23:d1:8e:5c:0b:43:cf:a5:fd:68:40:9f:a5:e8:
                    e9:00:4d:6e:e4:43:bf:e4:30:87:be:78:77:22:1d:
                    67:b9:21:6f:a4:53:5c:fc:0b:8d:43:1c:09:83:0d:
                    2e:41:2a:d3:6c:07:9b:d1:f0:34:ec:b7:a1:52:06:
                    2c:02:51:0c:8c:ce:0b:4f:1c:b7:00:fe:61:0c:ef:
                    14:06:f2:59:be:74:6f:01:72:7c:02:88:b4:d2:0e:
                    79:af:b4:fc:c4:68:fc:19:b9:f0:3f:5a:be:46:e7:
                    38:95:af:c6:b7:35:b2:27:df:56:f0:f0:f1:d3:22:
                    98:3b:dd:f2:6b:65:17:56:59:6b:58:69:61:ed:8f:
                    83:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:31:41:E5:31:FF:67:5C:F9:99:34:10:72:4D:1E:ED:BB:F1:10:D3
            X509v3 Authority Key Identifier:
                keyid:B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:5c:8f:c6:c9:dd:3d:d4:45:14:be:c4:24:57:2c:c3:2c:14:
         06:1a:f2:42:bb:98:a1:5d:d6:84:47:6b:90:f3:bf:bf:cc:d0:
         1e:e5:bd:77:fe:e4:11:53:07:52:34:1e:ff:a8:60:52:a9:ca:
         bb:94:eb:b4:24:9a:8c:ba:c7:cc:0d:76:e6:94:fa:da:9e:d2:
         ed:b0:78:34:61:04:4c:9f:a9:2d:6c:96:b4:b8:71:b1:77:5b:
         6e:f8:ba:f1:65:f0:72:90:61:64:39:8a:78:bd:7a:38:ff:3d:
         b1:84:d2:09:88:3d:62:3c:c5:6e:05:bc:99:6d:06:c7:ec:82:
         ee:ac:1c:22:c8:1f:2e:3e:c8:b4:7f:f4:da:a9:90:89:24:3f:
         aa:e8:8f:bc:c6:88:6c:21:75:b2:f8:c5:8c:1a:9a:66:3f:6f:
         b7:29:16:ba:d5:ac:92:d0:5d:d1:1d:31:a2:8c:fd:6e:a3:54:
         79:ee:ee:fb:21:24:e1:c4:e8:6d:10:b3:fa:55:62:46:6c:d6:
         21:2f:10:aa:2d:ce:bf:81:92:94:b4:5f:97:ba:da:b9:af:49:
         64:30:5b:b4:6b:41:8f:8c:82:f7:71:9a:64:b7:5f:71:70:ff:
         02:e6:8a:4e:f9:5a:14:5f:f4:27:9b:bb:c8:da:42:8c:71:af:
         21:e0:40:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----