Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
File:                     siZANRqyGg3HqqFfq1sRCXdxSjw.mft (raw, json)
Hash identifier:          uvAXg3ErU5BykcN0Op9byDyPhH1iZL5Xa5KNaNSBpCU=
Subject key identifier:   80:CE:BE:A2:52:CE:E6:BF:9A:8F:D8:E6:75:FC:9E:C1:9E:F3:EC:FF
Authority key identifier: B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
Certificate issuer:       /CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
Certificate serial:       01962E617BA666461714B6679B97328FA926
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
Manifest number:          0402
Signing time:             Sun 13 Apr 2025 09:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:02 +0000
Files and hashes:         1: 1-j6fBxJdZjlJHBF2ibCNebRhqEM.roa (hash: uIMEk9ImImh0LKeroj/KniV/ALKfCS7zdFrx5Ghb2Ho=)
                          2: 4fc8oS9l6XipIztCEOKX5rStKEs.roa (hash: QJlqsQqRFXjTlCtGRezlM1Uj5b/+zIGZvP1ClcUSG6U=)
                          3: iC_8dMVxXZ00UyStzCwzLDNTo54.roa (hash: XW49T+GyZoj1zoB/seC/GjDOMUSaP8XJ+XDar1fKOFQ=)
                          4: siZANRqyGg3HqqFfq1sRCXdxSjw.crl (hash: kN3mf6GG3eZxWUMz1d80AhApzoLkAGMqmDsp5xuXcuE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7b:a6:66:46:17:14:b6:67:9b:97:32:8f:a9:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
        Validity
            Not Before: Apr 13 09:01:02 2025 GMT
            Not After : Apr 14 09:01:02 2025 GMT
        Subject: CN=80cebea252cee6bf9a8fd8e675fc9ec19ef3ecff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0d:97:07:10:93:b1:78:26:0e:fd:5a:d3:ef:
                    53:9c:85:6a:52:30:c7:18:92:f1:32:3d:4c:cf:e3:
                    5c:fd:23:0a:8f:c5:21:9c:81:d6:d2:ce:fa:52:bb:
                    bb:53:15:8a:7e:50:bf:96:1a:f0:38:2a:9b:0f:34:
                    6c:0b:24:17:f7:1e:5e:e1:63:3c:db:cd:69:3e:fa:
                    01:b8:a9:e5:b5:76:f8:35:3f:33:f8:a0:64:91:8e:
                    8b:78:c3:c2:38:19:59:96:23:08:77:25:4b:c4:63:
                    7d:02:8d:05:0a:16:1c:60:98:ba:9b:0d:3f:a9:36:
                    46:55:10:05:2f:d9:cb:74:8f:98:57:42:1c:4c:88:
                    66:07:a3:ce:f3:d7:b2:d7:ec:71:7c:33:70:9a:8e:
                    47:c6:45:b8:3a:5b:c9:71:0f:66:6d:ec:e4:a3:32:
                    79:71:b5:c6:f5:e4:26:18:cc:be:18:a0:21:a7:42:
                    02:ed:2a:2e:a3:48:88:3f:b2:c2:a9:73:c0:16:36:
                    0c:36:5b:0e:02:84:99:8b:fe:73:44:49:f9:34:9a:
                    6a:0e:6f:b7:04:b1:e8:b3:d3:f9:1c:e1:98:f0:84:
                    2a:1f:06:ff:ac:77:13:ed:64:e8:85:e3:33:8e:fb:
                    fa:7d:1c:09:c1:fb:82:9f:f7:d4:0c:0d:da:36:90:
                    25:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CE:BE:A2:52:CE:E6:BF:9A:8F:D8:E6:75:FC:9E:C1:9E:F3:EC:FF
            X509v3 Authority Key Identifier:
                keyid:B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:a5:2f:38:f0:ae:fa:ad:00:1d:76:92:93:6d:80:b8:4c:36:
         5a:28:c8:79:39:49:d4:4a:ef:fc:84:a2:00:0b:95:5b:d2:e0:
         3e:9a:62:5c:db:8c:df:0c:e1:0b:b1:ff:50:ef:2d:43:26:65:
         0d:df:64:21:d8:b4:a2:10:f4:66:a4:d8:d2:34:a4:52:6c:3c:
         e6:a9:65:40:e2:98:0f:56:0d:9b:56:8d:34:17:7a:4b:4c:53:
         8f:67:64:3d:4f:36:3d:45:97:6f:b3:d0:7f:16:3c:d6:3c:47:
         84:dd:ea:c0:33:15:c2:d7:0e:41:e8:3d:69:fa:f2:6a:a3:df:
         b3:48:f7:2c:2f:09:bd:9c:fa:9c:c5:4b:64:0f:40:d1:dd:41:
         df:2b:d6:97:55:12:81:87:d0:d9:51:2e:af:7d:29:a9:10:9a:
         9d:a8:f5:84:e4:b9:45:2d:75:17:f7:59:72:0f:b3:2e:1a:a9:
         32:51:56:9e:71:5a:9f:cf:ce:7c:5d:b0:80:a9:70:39:39:fe:
         fd:a9:f0:a7:6e:4c:74:d5:f4:58:54:2f:96:5c:40:e3:3a:e5:
         81:e4:12:06:88:52:cc:4e:27:2e:72:ca:8c:d8:fa:c5:c0:c0:
         d3:ee:ba:1a:4c:be:1b:dc:a0:d1:4e:dd:4e:a3:63:87:6f:be:
         17:4f:58:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----