Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
File:                     skdjJsizNc1GFWo9VpBcbp0NhbU.mft (raw, json)
Hash identifier:          oKr9Dh4+No9SCd75INiiIxPI2Az3fJEPaSOlnu2SvGA=
Subject key identifier:   15:68:FD:0C:8B:17:26:C9:A9:02:78:64:B1:2B:E9:5A:E1:2A:79:0B
Authority key identifier: B2:47:63:26:C8:B3:35:CD:46:15:6A:3D:56:90:5C:6E:9D:0D:85:B5
Certificate issuer:       /CN=b2476326c8b335cd46156a3d56905c6e9d0d85b5
Certificate serial:       01962F3D52466DCC19B08A9B54F573616C9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skdjJsizNc1GFWo9VpBcbp0NhbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
Manifest number:          03E4
Signing time:             Sun 13 Apr 2025 13:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:09 +0000
Files and hashes:         1: skdjJsizNc1GFWo9VpBcbp0NhbU.crl (hash: I1cg0vHiv2HVd1diVdfJsEGC7avUUdX/uysphR+yGMs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:52:46:6d:cc:19:b0:8a:9b:54:f5:73:61:6c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2476326c8b335cd46156a3d56905c6e9d0d85b5
        Validity
            Not Before: Apr 13 13:01:09 2025 GMT
            Not After : Apr 14 13:01:09 2025 GMT
        Subject: CN=1568fd0c8b1726c9a9027864b12be95ae12a790b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c0:38:b1:d8:63:9b:24:96:86:56:75:17:cd:
                    81:ce:0e:d1:47:3e:2b:ca:2d:a5:7a:61:87:d0:01:
                    ba:88:20:35:8d:ed:01:2e:12:76:72:26:06:d0:8e:
                    a7:5f:3d:48:b9:ef:2a:d3:88:2f:65:76:22:b4:5f:
                    af:10:58:cb:72:9b:8d:4a:96:89:fe:81:8b:a9:a7:
                    6c:ea:96:bf:9b:0a:51:92:09:3f:4f:d9:21:6f:4e:
                    ee:db:49:a0:b6:f2:1a:f7:ac:b1:f2:7c:6a:b7:80:
                    db:49:18:9b:2d:6d:e4:02:ad:32:a1:20:09:70:7a:
                    4a:44:92:ff:ae:25:83:93:92:7d:f7:ff:b9:20:c9:
                    22:87:91:cf:30:21:49:43:e4:95:8b:29:83:0d:6a:
                    8b:02:de:b7:1a:9a:80:89:ec:64:47:43:e6:dd:b4:
                    12:f5:fa:2b:9d:4e:5c:a7:40:8a:47:dc:a4:e3:9c:
                    52:77:a8:1b:59:68:77:a2:05:38:0a:4c:a6:3a:2b:
                    f0:87:81:84:b7:be:53:3c:9e:04:3c:ab:b9:3a:25:
                    25:42:0d:9d:cd:1f:ac:30:bb:1b:9c:f0:50:4d:6c:
                    b4:26:dc:2a:7e:7b:70:f3:eb:c1:0b:61:fe:2a:75:
                    d1:f0:27:42:fc:b8:33:cb:44:3e:4f:0d:de:e6:d4:
                    54:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:68:FD:0C:8B:17:26:C9:A9:02:78:64:B1:2B:E9:5A:E1:2A:79:0B
            X509v3 Authority Key Identifier:
                keyid:B2:47:63:26:C8:B3:35:CD:46:15:6A:3D:56:90:5C:6E:9D:0D:85:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skdjJsizNc1GFWo9VpBcbp0NhbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:61:4a:0c:73:36:0d:b9:fc:ca:4c:b4:00:8c:27:a3:de:51:
         88:48:fa:0e:ef:60:c8:4d:da:b4:21:28:af:97:93:dd:ac:2f:
         3f:42:49:44:70:18:8f:68:bc:f3:69:65:9a:66:76:93:44:1a:
         dd:e3:33:58:d0:e7:2d:79:3b:27:75:13:e8:67:68:cb:23:64:
         d0:12:31:dc:3a:4b:1d:1b:07:e4:b8:cd:ae:25:7b:b8:03:ee:
         69:71:ec:6b:94:20:30:a4:05:51:f1:98:05:9c:aa:6d:da:fb:
         ec:64:9b:97:ca:63:7c:79:2e:a4:32:43:87:ca:e3:10:a8:40:
         1c:1d:dd:c3:12:48:5e:07:29:62:4c:4f:6d:7c:27:88:ea:0c:
         d0:e2:1b:b2:ac:c6:e2:a9:c5:e3:09:7b:13:b5:9b:14:64:e9:
         c6:1d:bd:78:28:48:eb:bc:e8:c2:4a:4f:40:0c:5b:25:0f:7a:
         67:cc:04:26:1d:a4:b5:3c:ee:61:af:cf:fc:69:bd:45:49:5c:
         1d:fd:4a:fa:d6:80:49:03:9b:3f:df:8a:e9:e0:8c:d7:cf:fa:
         d8:fd:e2:c9:43:cc:9a:6d:86:f6:9f:18:69:56:29:79:cd:15:
         05:92:3f:af:53:9b:77:ec:cf:37:46:77:fd:f9:04:8c:45:00:
         5c:8d:15:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----