Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
File:                     SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft (raw, json)
Hash identifier:          sIIvzVtcs/hU7XJrpmE/nUWBBq4YTbwsXjpIj1X8AbU=
Subject key identifier:   DB:D0:C3:3B:DD:9D:C8:BA:76:51:EF:45:1A:31:A6:CD:8D:C1:94:AC
Authority key identifier: 48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
Certificate issuer:       /CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Certificate serial:       01962F06D4952EE9ABB5913FAEAC6A95BBDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
Manifest number:          0AB2
Signing time:             Sun 13 Apr 2025 12:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:38 +0000
Files and hashes:         1: SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl (hash: DT6N1bq8S8c+vTeNGG32hOI4h929slmcENw+w2oZfcg=)
                          2: Y-7q9kMx7K8cMciXy89it_JnTm4.roa (hash: wJcOhSoBOyFBrlWVrA3BCNeS+YWlGnk/CzTU7ZurV5o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d4:95:2e:e9:ab:b5:91:3f:ae:ac:6a:95:bb:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4813b9c5fe8315807d7856cd230003aa16741c0d
        Validity
            Not Before: Apr 13 12:01:38 2025 GMT
            Not After : Apr 14 12:01:38 2025 GMT
        Subject: CN=dbd0c33bdd9dc8ba7651ef451a31a6cd8dc194ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:56:90:b6:e4:54:6e:39:55:2f:ce:2e:3e:fe:
                    69:b8:87:c0:8e:b6:5f:45:ec:d1:c5:fa:c7:01:47:
                    30:21:04:9b:d4:02:d4:da:e7:3f:2b:63:9d:82:40:
                    30:82:5c:f6:dd:d8:92:b6:11:3f:d5:c1:09:b9:e9:
                    4a:18:98:ad:12:1b:8f:85:84:40:4c:a6:b9:24:94:
                    bf:98:3c:cb:05:eb:4d:0f:9b:33:91:c7:40:6f:7a:
                    20:b5:90:0c:ae:80:b3:16:55:db:95:fc:27:68:8a:
                    d6:39:53:58:7e:20:d0:2f:99:8f:67:70:a9:2d:e4:
                    ed:84:cf:d4:f3:fc:7c:9b:53:96:e1:94:a1:a8:2a:
                    58:2a:80:ae:9e:8c:cb:7c:b4:89:2e:27:27:59:08:
                    e1:1f:09:02:fc:03:0b:7f:05:06:cb:79:59:21:39:
                    59:02:7b:e1:65:3c:de:ef:f2:25:2d:59:8d:5f:d0:
                    26:e5:92:6f:aa:5f:ea:4c:ae:d3:8c:5c:d7:cf:71:
                    4d:95:df:48:4b:09:c6:00:21:4d:28:ad:84:b6:90:
                    36:af:99:89:27:23:4c:28:4f:d2:4f:f4:b7:ef:fb:
                    54:27:80:3d:9a:b9:5e:af:61:b2:3c:8e:35:4d:05:
                    f1:d7:32:09:89:6b:66:34:e6:06:8b:92:c6:f4:dd:
                    cd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D0:C3:3B:DD:9D:C8:BA:76:51:EF:45:1A:31:A6:CD:8D:C1:94:AC
            X509v3 Authority Key Identifier:
                keyid:48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:d3:18:7b:c0:5b:3a:f0:95:fc:3e:a5:b0:96:3c:c0:6e:e2:
         ff:06:ca:ce:33:99:a1:9b:84:5b:19:6a:a6:fc:38:6d:55:82:
         cc:55:e5:05:b6:af:69:3b:00:4b:20:28:67:6a:fa:b1:d3:fb:
         6e:ba:86:a9:4a:fc:fc:e5:d6:f6:b8:01:8d:6c:24:1d:f0:a3:
         e9:a5:ca:f7:29:56:54:49:f5:f2:13:f3:12:d6:41:73:97:35:
         ea:bf:b8:1e:e3:9f:d2:77:70:c4:45:e1:70:a4:09:28:ac:9d:
         be:3d:d2:af:fa:1d:f7:31:3a:fb:ed:d8:d9:40:09:1d:57:87:
         da:20:03:38:5b:ef:97:df:c5:d2:6d:7f:e0:e4:44:9a:73:9e:
         36:01:c2:a1:23:56:b0:51:6c:67:90:b3:40:96:31:01:06:08:
         fd:ca:09:c3:59:dc:b5:49:1b:67:63:de:cf:ec:5d:84:37:5c:
         5b:fb:f0:f0:79:ec:c7:2e:ee:4e:e3:7a:83:27:b0:c1:18:e5:
         fd:fe:e3:62:0d:73:35:91:66:fc:c5:34:e8:0e:76:b6:6c:13:
         32:97:3b:16:cd:d6:2d:13:62:55:48:bf:4d:ec:59:e5:b7:91:
         e6:6f:b0:a1:9a:95:12:15:25:f5:7e:4a:36:e4:ab:96:51:e5:
         e2:5c:0a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----