Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b2605f-c539-497c-ab13-067ab6cf9b6d/1/skcpjniSXyWKomVsc-cGgxVOpGU.mft
File:                     skcpjniSXyWKomVsc-cGgxVOpGU.mft (raw, json)
Hash identifier:          ueWhpY0ZggjOh8p3yFDT5zXvLa/YLWk8hg1zeqbyGmU=
Subject key identifier:   1D:CA:FE:99:B9:2D:68:23:FE:5A:3B:08:4B:96:A6:D8:22:BA:FF:8C
Authority key identifier: B2:47:29:8E:78:92:5F:25:8A:A2:65:6C:73:E7:06:83:15:4E:A4:65
Certificate issuer:       /CN=b247298e78925f258aa2656c73e70683154ea465
Certificate serial:       01954747FF5F9EF6E29F01B578622C4E2030
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skcpjniSXyWKomVsc-cGgxVOpGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/b2605f-c539-497c-ab13-067ab6cf9b6d/1/skcpjniSXyWKomVsc-cGgxVOpGU.mft
Manifest number:          02E8
Signing time:             Thu 27 Feb 2025 12:00:55 +0000
Manifest this update:     Thu 27 Feb 2025 12:00:55 +0000
Manifest next update:     Fri 28 Feb 2025 12:00:55 +0000
Files and hashes:         1: skcpjniSXyWKomVsc-cGgxVOpGU.crl (hash: fZvgacB+e6RTnitD7yLa7eTqx5RKdAEKAWO5eEnnZ04=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:47:ff:5f:9e:f6:e2:9f:01:b5:78:62:2c:4e:20:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b247298e78925f258aa2656c73e70683154ea465
        Validity
            Not Before: Feb 27 12:00:55 2025 GMT
            Not After : Feb 28 12:00:55 2025 GMT
        Subject: CN=1dcafe99b92d6823fe5a3b084b96a6d822baff8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c2:05:5f:35:aa:00:c4:36:29:4c:e0:a7:ee:
                    be:0e:45:85:c3:e6:e0:cb:06:88:0d:a2:d6:94:fb:
                    df:9f:ee:e9:33:0a:96:f1:1a:ef:05:f9:e8:56:4e:
                    8f:97:9d:06:6f:7c:8f:9f:ac:3b:89:12:b8:88:78:
                    d3:8d:d0:23:c5:cd:16:02:ee:d5:70:3b:a4:94:64:
                    e8:74:2e:a0:94:e3:2b:7f:ba:fe:b7:a2:39:2a:6d:
                    ac:6e:6b:b9:64:9b:bb:a7:1a:7d:70:1b:7d:41:6f:
                    d9:93:5e:51:21:6c:52:ed:b8:86:bb:9b:89:3a:e3:
                    f0:7a:e3:c4:c2:0d:44:ac:11:a2:d9:57:f5:63:78:
                    c2:9b:09:dc:f6:e4:7f:16:6a:72:9b:a9:01:af:ae:
                    6e:38:07:1c:c2:bb:57:29:5e:1c:51:82:7c:9b:6b:
                    33:cf:6b:23:d8:a0:89:26:91:9f:2d:86:9d:0b:7c:
                    ab:cc:95:c5:39:44:61:f4:89:05:3a:aa:97:39:bf:
                    09:26:d8:68:01:92:e4:1d:6a:f1:47:3a:19:66:61:
                    24:62:0e:65:fc:c7:49:c3:2e:0c:6f:db:89:60:01:
                    d9:8a:50:ea:cc:f0:da:95:3b:69:ea:47:30:f5:29:
                    90:b2:64:5b:a4:3d:b2:d1:a1:69:51:58:83:77:bd:
                    8b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CA:FE:99:B9:2D:68:23:FE:5A:3B:08:4B:96:A6:D8:22:BA:FF:8C
            X509v3 Authority Key Identifier:
                keyid:B2:47:29:8E:78:92:5F:25:8A:A2:65:6C:73:E7:06:83:15:4E:A4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skcpjniSXyWKomVsc-cGgxVOpGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b2605f-c539-497c-ab13-067ab6cf9b6d/1/skcpjniSXyWKomVsc-cGgxVOpGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b2605f-c539-497c-ab13-067ab6cf9b6d/1/skcpjniSXyWKomVsc-cGgxVOpGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:34:61:6f:69:33:43:d0:7c:b4:6e:8b:22:02:00:52:b6:91:
         10:ea:c8:b4:25:80:d5:57:6a:c9:4b:69:7b:5d:b1:61:fb:fc:
         33:6f:bd:0b:25:1e:5d:eb:7d:04:93:a4:e9:a0:5a:8b:37:66:
         dc:be:ee:52:ce:13:96:14:3b:1b:e0:8f:c8:da:bd:ad:22:8b:
         0e:8e:ca:92:f8:9f:d0:ef:4d:3e:1e:4e:70:77:3f:13:49:91:
         00:56:b5:d1:95:a6:b3:16:9a:d3:67:47:c9:b2:02:c4:24:41:
         82:f4:e9:7a:6f:7a:9e:7b:6f:a5:13:39:cb:c4:0a:2b:67:2c:
         08:26:b6:07:8a:87:eb:a9:62:ca:47:15:c8:3b:ab:d7:5b:37:
         c3:a7:67:37:75:99:01:37:6e:61:45:57:a0:d4:15:9d:b4:6b:
         80:96:a3:1c:a1:26:27:79:63:0e:70:53:41:2e:fd:89:28:c8:
         40:32:00:b4:90:1d:8a:90:66:5a:80:db:83:74:20:39:c9:20:
         d4:13:b3:e6:31:85:0a:68:64:ee:eb:91:46:47:7b:70:ff:19:
         2c:b4:63:9d:63:05:2e:ad:19:e6:af:ef:35:d7:ba:ae:96:9b:
         f6:90:ee:36:c1:09:c5:a6:1f:25:7c:00:4c:56:00:65:2b:d6:
         76:42:3d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----