Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
File:                     sA4l9V67rLBp8QOssIZnA4Nc_M0.mft (raw, json)
Hash identifier:          IyZLwDsVtgD/9uSzr3H8nG3gk5eayRA4Z+BgTLk+zkE=
Subject key identifier:   25:58:A5:24:55:CB:8E:37:9A:67:9E:18:16:B5:B6:87:DD:66:24:12
Authority key identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
Certificate issuer:       /CN=b00e25f55ebbacb069f103acb0866703835cfccd
Certificate serial:       01962ECF7911056F23CEABF3190AF7D9C18E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
Manifest number:          10F6
Signing time:             Sun 13 Apr 2025 11:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:11 +0000
Files and hashes:         1: IQVuYRD39w1eDGvQI5n6qd53zJ0.roa (hash: YMuLKblQhuUFH21p6Ke9CEB5Y7GrJ0BpmU+txXFqoC4=)
                          2: sA4l9V67rLBp8QOssIZnA4Nc_M0.crl (hash: hXi2w7LyeKRM5gRAlPqXCjFL6OOhNtMm6/vLOAjrxg8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:79:11:05:6f:23:ce:ab:f3:19:0a:f7:d9:c1:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b00e25f55ebbacb069f103acb0866703835cfccd
        Validity
            Not Before: Apr 13 11:01:11 2025 GMT
            Not After : Apr 14 11:01:11 2025 GMT
        Subject: CN=2558a52455cb8e379a679e1816b5b687dd662412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:28:c6:f9:05:bc:a5:17:c6:7c:3b:6d:b2:fe:
                    7a:63:81:ce:b2:13:92:ce:4b:e2:af:6d:fe:ac:94:
                    61:7c:da:af:9f:2d:bf:78:de:1a:5a:f1:69:6f:e6:
                    ed:6f:ce:b0:b6:b0:95:28:cb:c5:6a:7d:18:9a:41:
                    14:42:53:60:4e:e7:5d:24:ad:c3:52:f2:ff:29:f6:
                    da:69:f0:4c:bd:c8:74:58:f5:a8:6f:e9:48:34:06:
                    93:fb:9d:27:e9:12:ac:30:51:90:98:5f:2f:d9:53:
                    c7:8b:a7:27:71:22:c4:4f:33:82:fa:ab:37:ca:69:
                    ae:eb:ac:e4:51:35:f1:75:c5:29:e4:a3:62:0b:c0:
                    e5:63:f1:49:5c:e1:f8:77:39:62:b0:06:87:ae:e1:
                    07:d8:19:df:e5:3a:9c:5c:80:98:63:b3:78:05:53:
                    66:ad:18:a9:fb:a1:de:e8:80:6a:ce:69:0f:b4:6e:
                    ec:a0:64:b5:fb:59:b4:e7:f0:7e:11:ee:6b:13:3d:
                    e0:03:0b:ba:26:6b:13:4f:c1:43:a5:1a:58:62:2a:
                    58:6f:79:3f:be:e3:af:24:2f:0d:72:5f:0d:32:bf:
                    a0:fa:18:e9:23:46:1c:9c:3a:86:07:f8:75:8f:b0:
                    0e:f2:57:28:7d:86:2e:97:65:0a:89:84:4f:03:16:
                    85:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:58:A5:24:55:CB:8E:37:9A:67:9E:18:16:B5:B6:87:DD:66:24:12
            X509v3 Authority Key Identifier:
                keyid:B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:76:c8:9c:19:db:58:49:53:43:de:e4:7a:2f:2d:fe:ce:4f:
         d1:cf:ae:23:ba:28:5c:4a:6a:d1:48:c9:60:bc:7b:f1:86:d2:
         6f:c6:a4:c9:5e:8f:ce:85:ed:78:67:f9:8d:6e:24:8b:13:c7:
         a3:e2:58:f5:74:34:44:17:85:8d:cd:39:53:83:85:bd:d8:79:
         f6:62:b1:b2:8f:30:03:14:50:db:90:78:89:34:7b:74:0d:e3:
         a6:f8:84:43:e4:04:ca:8d:82:a6:8f:d1:c1:77:a6:30:4a:b3:
         0d:6b:78:88:f1:7a:28:b8:ef:fd:9e:0e:9d:16:21:6e:ef:d1:
         b6:8a:a0:fb:cb:89:b0:dc:ef:2b:5c:35:44:57:b0:1d:0b:b5:
         6b:a6:6a:41:f9:56:eb:5a:4f:a2:1f:9b:73:25:9e:f3:57:5b:
         89:48:de:68:58:1d:32:ee:63:29:aa:30:2b:50:ee:b6:44:e4:
         ba:55:60:01:7b:9d:74:a9:a7:81:a3:f6:fa:a1:f6:fb:98:5f:
         55:04:25:f7:1d:92:60:43:a5:ad:fb:c8:89:10:07:d3:ea:3f:
         fb:a7:91:08:68:f2:9b:a7:1a:ca:3a:59:4a:fe:63:af:43:36:
         ce:7e:89:9e:dd:60:f5:4d:f4:83:19:d5:9b:28:c8:78:33:e3:
         7e:87:97:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----