Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
File:                     sSQfEp2_xKFlH-zboDEI_NLMHfI.mft (raw, json)
Hash identifier:          J+lGfqDfQkhM1JhWKDbHr9OFhlL5tjQRbOcM/JIX/Kk=
Subject key identifier:   53:A1:B3:3A:55:23:C8:B2:4D:07:44:CB:2C:45:55:74:B0:5A:9F:69
Authority key identifier: B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
Certificate issuer:       /CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Certificate serial:       01962F3DD9D5E8F3EC5FCC97A9C15DAD92CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
Manifest number:          0892
Signing time:             Sun 13 Apr 2025 13:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:44 +0000
Files and hashes:         1: sSQfEp2_xKFlH-zboDEI_NLMHfI.crl (hash: XJBnskvJei27A3uzjzxIf5XpEcwm9bx1fj6xIzaoXLc=)
                          2: trnbESznlOsXSmOq-zTLOlE0nzc.roa (hash: fOmXOdcOD5V/jRJlsSdgNbz1rZ873FVRanr34sBtxks=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d9:d5:e8:f3:ec:5f:cc:97:a9:c1:5d:ad:92:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
        Validity
            Not Before: Apr 13 13:01:44 2025 GMT
            Not After : Apr 14 13:01:44 2025 GMT
        Subject: CN=53a1b33a5523c8b24d0744cb2c455574b05a9f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fc:31:88:de:d1:bd:69:eb:0c:c5:a9:6c:5d:
                    9c:93:c9:23:64:e4:0c:2c:94:7f:0b:24:49:6b:b3:
                    97:d1:55:82:cc:f4:5e:99:01:37:1e:96:e6:0c:bd:
                    39:22:0c:62:f1:55:90:98:2d:b5:f9:cf:80:c2:3b:
                    e2:9d:7a:b7:0e:1b:6a:03:0d:20:db:91:e4:28:dd:
                    62:d2:9c:ac:4b:3b:6c:78:69:34:7e:10:7f:40:72:
                    7d:e9:20:c0:b3:e8:59:6f:1a:68:02:25:6f:ad:47:
                    8e:e6:7a:09:fc:f1:83:1f:60:1d:c5:18:1d:bb:17:
                    fe:d3:5d:49:c0:0f:c9:df:46:fc:86:37:67:f0:7a:
                    f2:ad:4d:f9:c3:22:73:3f:5b:84:ac:cd:99:67:1a:
                    9e:71:19:90:07:4d:c7:f4:74:f0:5a:fc:d1:64:79:
                    c5:69:08:f5:8f:5a:c3:8b:2a:82:ab:4d:2a:46:0f:
                    4f:6f:ef:03:2b:a8:1d:8c:49:69:d3:26:d9:61:a6:
                    3c:52:23:ae:03:06:c6:7a:9a:69:13:2e:ca:8e:46:
                    e9:d0:1f:94:73:56:39:e6:28:7b:ee:40:f5:90:fb:
                    96:ec:23:5f:76:40:0b:0b:9b:97:9b:cc:53:8c:ad:
                    78:27:dd:ab:40:a9:2c:df:c8:87:16:34:e7:63:93:
                    87:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A1:B3:3A:55:23:C8:B2:4D:07:44:CB:2C:45:55:74:B0:5A:9F:69
            X509v3 Authority Key Identifier:
                keyid:B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:27:fb:83:0e:55:c2:7a:95:b3:99:76:b8:19:82:5c:b2:7d:
         e5:30:a2:7b:33:b1:e5:6f:33:c9:0c:85:6a:93:06:fa:2a:95:
         c3:70:60:c0:b1:79:01:08:6c:60:16:d0:bb:ec:b0:a3:ab:8b:
         62:d1:37:aa:18:28:44:0f:f0:94:79:49:41:b3:93:9e:78:0a:
         db:6d:2b:41:7d:12:93:90:2c:61:c1:53:6e:f9:5b:ea:81:e9:
         24:9d:f3:f0:88:57:eb:c7:80:77:b7:07:f7:05:7e:5e:7f:09:
         e1:c4:b3:b4:b7:84:b0:16:58:33:76:32:bd:9c:a3:7d:2e:b7:
         e4:d0:e5:7b:d1:49:45:6b:15:16:c5:2b:5d:ca:51:8c:f4:e6:
         39:cd:62:dd:a1:ab:0b:57:2a:0e:27:4e:65:58:f7:5e:7d:fd:
         ee:18:94:ae:e5:ec:5d:86:82:0e:0a:f9:47:47:35:ee:83:5c:
         7f:02:95:16:ed:00:3b:03:cf:1d:d8:39:a4:3d:4d:71:8a:75:
         40:d2:e6:a6:64:31:8c:dd:8b:02:29:01:69:a9:df:37:ee:05:
         82:c1:da:aa:fe:1a:d4:a4:0a:7b:eb:dc:19:32:68:6b:6b:0b:
         ab:37:b5:a2:90:a0:97:6f:42:e7:30:d1:6e:ce:71:59:c1:ed:
         aa:5d:29:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----