Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
File:                     sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft (raw, json)
Hash identifier:          +E0Pptv+kGcCohFMnbLI9UsJ5EESD2aj/UNyjzVdLIM=
Subject key identifier:   30:AD:60:6A:F7:81:E0:E3:32:86:59:60:D0:9C:C6:DE:0E:EF:2D:17
Authority key identifier: B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17
Certificate issuer:       /CN=b004f5869f5675f65f9b10cff4b65f74f76bed17
Certificate serial:       01962F74A4AFEE693505FB82AE17374D1FD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
Manifest number:          0400
Signing time:             Sun 13 Apr 2025 14:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:35 +0000
Files and hashes:         1: N2y6-GMHKdnhwHw2qI2S6D9db-A.roa (hash: 3FLdtIoRp74dNi1D23oUnkHCD3n8shdafvj6sD2pzxY=)
                          2: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl (hash: rahqHcQ2NB952v4hmh1bQiMP30STKMhCXYM78EP7TJ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a4:af:ee:69:35:05:fb:82:ae:17:37:4d:1f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b004f5869f5675f65f9b10cff4b65f74f76bed17
        Validity
            Not Before: Apr 13 14:01:35 2025 GMT
            Not After : Apr 14 14:01:35 2025 GMT
        Subject: CN=30ad606af781e0e332865960d09cc6de0eef2d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d3:45:bc:57:35:5a:b7:d8:bd:49:40:25:9e:
                    b7:31:9f:af:2b:7b:66:43:f0:03:be:52:2a:5f:b7:
                    f3:bf:4f:80:b6:ad:e5:44:2f:29:6e:e0:16:d0:a6:
                    0a:7a:12:47:aa:b5:66:fd:d2:2b:5b:f1:78:16:c7:
                    7d:fd:69:8a:1a:79:39:49:ec:5d:b2:4e:fe:cc:00:
                    f0:46:84:57:e8:a8:b0:7e:4b:82:11:42:80:5d:cf:
                    ae:55:c0:99:71:b6:59:f1:6f:c7:7b:ee:75:cc:59:
                    b1:3d:ba:8c:46:99:2f:26:d3:11:99:b1:81:4a:0d:
                    d0:c8:84:7c:cd:e8:9d:fb:98:ce:c1:2e:25:17:ee:
                    26:30:8b:10:2e:de:cf:1b:05:05:36:00:67:59:b7:
                    dd:3c:6f:f7:bf:70:b4:04:21:03:68:11:0b:e9:be:
                    5b:ee:33:66:c2:76:9c:aa:e0:f0:1c:e7:62:e4:53:
                    ed:9b:05:6a:a8:0a:da:e9:1f:c3:d5:29:77:27:eb:
                    d4:a1:f0:45:19:71:60:44:00:73:00:3d:89:e3:e0:
                    63:be:8d:68:32:ed:0e:17:57:5b:a5:86:39:11:88:
                    4f:fd:c8:d6:67:3e:74:02:11:37:fc:d3:a5:92:6b:
                    4a:1f:60:75:ac:00:cd:27:72:aa:fa:e0:8e:20:b4:
                    11:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AD:60:6A:F7:81:E0:E3:32:86:59:60:D0:9C:C6:DE:0E:EF:2D:17
            X509v3 Authority Key Identifier:
                keyid:B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ce:70:39:1d:5a:2a:d0:9c:a2:96:f1:bd:0b:b1:5e:ee:39:
         06:97:91:c6:bb:91:b2:ea:d3:e3:54:73:94:5b:c8:eb:24:e5:
         dd:71:86:6f:51:d5:0f:04:f4:58:06:98:e2:3d:d8:4f:7f:0c:
         57:60:dd:7c:49:30:a1:84:0a:ea:07:d5:6a:ed:c2:d9:a7:77:
         9f:3f:2b:2c:96:d2:ba:f0:13:12:18:14:ad:2a:11:a5:69:c6:
         bc:d5:ac:00:d1:b6:da:2b:2f:df:70:24:07:56:d4:24:50:1c:
         57:d1:15:67:de:fb:0e:91:28:52:68:e5:65:9f:69:87:1a:ad:
         1f:b0:06:ca:5a:26:19:64:fb:e1:87:d9:50:f7:76:83:e6:6f:
         a8:f6:f5:b9:5e:3e:b3:9a:20:57:6b:93:3a:e7:5f:b2:23:e6:
         dd:e0:b3:c6:38:c5:b5:c5:55:24:15:8d:4d:17:41:f2:4d:7b:
         5a:93:c7:41:f9:1a:5c:e8:1f:cf:5c:7a:97:7a:20:43:b1:36:
         bb:fa:f3:b6:be:cf:f4:e8:70:51:19:83:0d:d3:7c:7a:60:4d:
         9e:f5:2c:d1:b0:23:62:9f:c6:f3:e7:6e:ab:92:45:f7:52:8c:
         4d:6c:d6:c9:ca:b3:78:df:fc:01:1c:cf:d3:a2:51:db:66:cf:
         2d:31:b3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----