Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
File:                     SqvRp2WuXL4dyT2vAk06R-cqyRg.mft (raw, json)
Hash identifier:          KPpsCqh32w/z9cKqKH8JtQQqQhA2U72WtOwdsClBp7I=
Subject key identifier:   60:D1:05:B0:D4:EB:10:F8:0B:7C:79:4C:05:2F:DB:D9:14:D5:DD:BE
Authority key identifier: 4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18
Certificate issuer:       /CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
Certificate serial:       01962E2ACB3E2826D825F7AD57BE19F67E00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
Manifest number:          0EA5
Signing time:             Sun 13 Apr 2025 08:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:18 +0000
Files and hashes:         1: SqvRp2WuXL4dyT2vAk06R-cqyRg.crl (hash: NimHbkn2kmSfxIDUrsdXHC56PVvABhAE93pfhWatrvA=)
                          2: tmx5LjQV62XIOiTTxX3EbhTuW90.roa (hash: ONvGVTfcwoaLd5CXPlp64qPMMnmfgrXhtwa7DXeFCYE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:cb:3e:28:26:d8:25:f7:ad:57:be:19:f6:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
        Validity
            Not Before: Apr 13 08:01:18 2025 GMT
            Not After : Apr 14 08:01:18 2025 GMT
        Subject: CN=60d105b0d4eb10f80b7c794c052fdbd914d5ddbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:de:bb:de:22:88:4e:cd:9a:bd:c0:1e:05:dd:
                    9a:e5:8e:c8:0f:6a:8a:b1:15:73:a7:83:8b:d2:38:
                    a1:2a:3d:3c:fb:ac:22:d6:4c:73:68:27:8a:10:38:
                    fd:de:6b:c9:42:4e:47:62:2f:ec:c3:1d:d3:29:98:
                    45:1b:b4:43:c5:88:cf:46:f9:0b:d5:be:6d:f2:d3:
                    3d:07:9c:c4:fb:45:68:04:5a:d2:79:f2:36:bd:fd:
                    56:24:98:12:6a:35:70:3f:00:4f:89:6c:f9:9e:ea:
                    d2:18:01:5e:36:53:d6:ed:d6:3b:93:e9:58:dc:65:
                    69:ae:aa:c3:29:6e:9e:b6:bf:53:84:a4:2a:c6:87:
                    77:d0:ea:c2:1f:9d:d9:9c:b7:d4:e8:a9:29:3e:e1:
                    d9:76:4f:f7:d5:ff:2e:b9:7f:f2:3e:18:8f:97:52:
                    ae:33:29:2f:da:7c:55:9b:6b:92:52:a3:73:3a:95:
                    a0:bd:e6:df:55:16:45:93:07:11:23:b1:06:89:fa:
                    05:6d:62:d6:b5:c9:73:ee:d4:1a:f8:f1:67:5f:b4:
                    93:78:c3:24:aa:44:41:f5:a3:ad:28:d1:40:46:0f:
                    ac:65:d8:16:ea:3e:21:57:4e:38:3a:ae:13:7b:e7:
                    62:1d:0a:9c:13:05:2a:1f:87:7f:26:db:bf:53:69:
                    25:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D1:05:B0:D4:EB:10:F8:0B:7C:79:4C:05:2F:DB:D9:14:D5:DD:BE
            X509v3 Authority Key Identifier:
                keyid:4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:48:a4:b4:bc:80:d4:df:ae:12:17:78:9f:22:12:fc:ac:4c:
         04:07:0e:ab:57:13:63:45:57:ce:7a:8c:90:ed:95:ec:46:47:
         74:ef:7e:bb:75:b7:70:1a:79:b9:ed:31:98:46:f2:ce:f9:a7:
         72:84:d6:57:dc:30:69:30:a5:ad:9e:cc:cb:30:a6:70:32:d9:
         66:24:0d:dd:eb:3b:7f:95:cd:e9:c5:ba:56:8c:98:33:0c:88:
         62:f4:9d:8f:c1:7d:e0:17:df:7d:f6:a5:53:e3:15:81:41:d0:
         51:c0:42:0b:46:2a:1b:34:12:07:6f:e4:0a:f6:08:5b:b1:15:
         87:45:9b:e0:d7:ce:0d:d3:44:a7:b0:ce:3e:07:59:54:7f:ce:
         62:92:8e:93:89:a2:73:3a:e2:2f:57:a2:eb:cd:96:74:93:69:
         9f:83:ac:3c:a6:68:0b:4b:8c:16:2e:e7:9a:57:5a:f0:af:0e:
         7d:c5:db:cd:a6:9e:4a:1d:c2:41:8e:a3:67:88:2b:14:32:33:
         d0:d9:0f:1b:24:29:6a:64:76:4b:08:5e:a1:3e:f8:8c:5d:87:
         6d:a5:4e:d6:15:f9:2d:4b:d5:4e:39:d6:54:17:06:ad:e3:1a:
         c5:fe:26:2a:3e:60:25:72:b1:e7:8e:cb:88:23:5c:d9:c1:0f:
         19:9d:2c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----