Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft
File:                     SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft (raw, json)
Hash identifier:          4ZUkV8UP2qGCj8a423bOGKfMfX+LwCCK7Rv58QGWAFg=
Subject key identifier:   05:AF:26:74:C4:FC:E9:9E:03:38:1D:C6:94:79:47:13:71:25:74:B2
Authority key identifier: 4A:75:5A:6D:E5:C1:67:80:9F:81:9C:85:F8:C8:E5:A6:E4:CE:12:7D
Certificate issuer:       /CN=4a755a6de5c167809f819c85f8c8e5a6e4ce127d
Certificate serial:       01962ECF57F5599E785CD6A57D93CA3829B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft
Manifest number:          063C
Signing time:             Sun 13 Apr 2025 11:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:02 +0000
Files and hashes:         1: SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl (hash: hB92DZDbc6pFu9lZtrB3q7nHAb2Y1xPJlo4iclfTNC0=)
                          2: Ss43uKVk12glj7GND1Q0DQOfOOI.roa (hash: afk/nkdp+pPj29GdfzUTdj7jJFKdBQ7g7Tl5QgpoC38=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:57:f5:59:9e:78:5c:d6:a5:7d:93:ca:38:29:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a755a6de5c167809f819c85f8c8e5a6e4ce127d
        Validity
            Not Before: Apr 13 11:01:02 2025 GMT
            Not After : Apr 14 11:01:02 2025 GMT
        Subject: CN=05af2674c4fce99e03381dc694794713712574b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:bb:f2:bc:e3:ac:a1:cf:1f:12:c8:0a:89:
                    78:3c:43:67:ca:50:f5:92:ef:3c:d7:f7:5e:a2:57:
                    16:dc:95:ce:e1:56:70:fe:25:5a:9a:f6:cc:11:6f:
                    f9:c8:36:d1:aa:7e:05:fb:c6:5d:bd:32:92:c1:dc:
                    83:08:32:36:ed:a0:08:e9:8a:18:2f:2f:93:96:87:
                    31:d9:39:20:3a:b0:a6:4b:4a:7f:3a:be:b8:24:ca:
                    f8:92:62:cc:cc:92:54:ac:03:22:aa:f7:95:9b:40:
                    ea:bb:b4:45:8e:bf:ee:40:74:3a:1e:da:01:70:36:
                    12:46:0c:9f:89:b4:64:cc:37:a7:83:d6:65:fe:94:
                    fd:82:1d:18:8c:1d:66:51:82:5d:3d:71:b5:62:c3:
                    fe:5c:e6:ca:15:56:c4:22:fc:d6:36:56:66:4a:ce:
                    84:45:2b:1e:26:1f:08:2e:df:c3:b3:0c:cc:d5:ef:
                    10:5e:0a:a1:1f:82:3c:37:d1:38:51:9e:8f:c3:25:
                    71:8f:77:50:a9:e1:51:67:a1:e3:c1:de:73:8a:92:
                    20:80:1c:c1:79:ee:d6:fd:74:15:6b:ee:de:31:c9:
                    e9:e6:f9:94:b0:b5:6f:d7:ad:f7:3b:2d:cd:31:4f:
                    a1:c7:b4:32:f2:e2:3e:eb:7a:f9:ce:87:d0:a5:1d:
                    ae:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AF:26:74:C4:FC:E9:9E:03:38:1D:C6:94:79:47:13:71:25:74:B2
            X509v3 Authority Key Identifier:
                keyid:4A:75:5A:6D:E5:C1:67:80:9F:81:9C:85:F8:C8:E5:A6:E4:CE:12:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:73:79:e2:ec:0c:75:44:df:ec:df:a3:42:89:4c:e3:5a:d2:
         7a:77:88:fa:ac:eb:65:35:c8:e9:67:64:62:ef:50:24:3c:88:
         ac:12:85:a1:88:2c:a2:30:fe:5b:8d:40:89:60:bf:d7:93:7e:
         0e:0c:4b:c2:90:6b:08:ad:c7:72:5a:87:17:6d:27:c3:09:8a:
         d1:9a:07:3b:ad:f4:b8:6f:e4:55:86:9b:08:1c:b5:e6:35:63:
         0f:75:8d:94:a2:97:3a:73:b1:26:81:37:ab:e9:b7:d6:25:a6:
         1f:f8:d7:e0:ad:1c:1c:62:6d:7e:da:57:ee:96:31:10:cd:2d:
         1b:61:14:96:ad:fc:6a:32:d0:fa:3b:c6:fd:50:21:dd:4a:d8:
         0e:59:0b:b1:34:32:30:a1:56:9e:f7:59:74:14:25:02:79:ed:
         01:7f:53:1d:f2:47:38:08:13:c5:56:bd:9b:4d:dc:e6:2c:0a:
         da:80:ff:29:83:6a:ef:78:aa:d4:f8:8a:22:82:89:34:cc:94:
         01:cd:5f:5f:68:56:52:7a:e6:69:a6:1d:10:c5:ff:d0:d9:d2:
         12:47:16:90:85:86:bf:7f:c2:4b:22:37:33:b5:00:f6:52:85:
         25:5d:a0:92:93:1c:45:b1:86:31:eb:67:d0:26:61:ef:94:16:
         24:b4:f6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----