Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
File:                     SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft (raw, json)
Hash identifier:          hE8q/JVHCP4KWD1ZtCeWXNGPuv+504FaJU9+aMatJgw=
Subject key identifier:   2A:68:97:FA:9F:42:33:FB:4E:2C:D3:31:30:87:B2:87:29:7B:16:0E
Authority key identifier: 4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
Certificate issuer:       /CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Certificate serial:       01962F0685F2432A27B677226809D0AFE6BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
Manifest number:          0404
Signing time:             Sun 13 Apr 2025 12:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:18 +0000
Files and hashes:         1: 8H5TOMd67aNG48y4ErPgYV0YX0E.roa (hash: PgeEgkIGIGVBuq8xPHBreUz8+IAiM5AuP4J/fwAAyms=)
                          2: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl (hash: dPsNTUN+H+mkghEUmgdCM1AreDdmMgru1sRKwN2IbTY=)
                          3: U-j6AH3Jk894ib2lGr8hU_3DRF8.roa (hash: w5lxC2CItXuabeADCVx84G8ZOzDwpOBIylCCN5VOoy4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:85:f2:43:2a:27:b6:77:22:68:09:d0:af:e6:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
        Validity
            Not Before: Apr 13 12:01:18 2025 GMT
            Not After : Apr 14 12:01:18 2025 GMT
        Subject: CN=2a6897fa9f4233fb4e2cd3313087b287297b160e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:26:67:0f:9b:d3:fe:e7:8b:55:9e:49:fa:68:
                    9d:20:c5:47:55:b2:f2:31:c9:48:4f:15:1a:89:5f:
                    d8:c5:df:13:a7:96:35:9b:e2:9c:df:26:3b:5a:e4:
                    c3:86:d2:98:58:2f:04:86:ba:77:7c:85:f3:90:c7:
                    01:49:db:d8:c1:bd:56:63:63:b3:b3:33:3a:5b:84:
                    b4:9e:39:39:b8:03:47:e2:00:89:20:0a:60:56:57:
                    f6:55:19:c3:39:a8:9a:04:22:39:d3:51:0e:b3:c7:
                    03:6e:9d:fc:34:67:07:8d:93:d3:68:a5:00:9a:32:
                    02:97:48:4d:fb:59:2e:d2:e9:9d:ee:87:b5:3d:0f:
                    00:1c:33:ef:98:ec:3b:e9:47:6f:cb:3d:4a:d3:2d:
                    b2:62:99:8b:f5:c3:cb:1f:f3:85:a7:8a:51:a8:f4:
                    50:d1:a0:3b:1f:b7:57:3b:e9:aa:37:44:7c:a5:e6:
                    00:e6:55:3c:fe:31:7a:1b:9a:06:d3:c8:ee:a7:0d:
                    74:84:53:95:b5:15:83:16:f9:5a:fc:5d:8b:7d:0f:
                    a2:d8:57:11:40:4a:21:50:c5:28:2b:60:55:24:37:
                    b6:c4:86:72:fe:c0:47:db:77:dd:4f:52:75:f0:9c:
                    76:d9:70:dc:f7:e8:34:3a:43:5b:e9:12:1f:dc:90:
                    f8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:68:97:FA:9F:42:33:FB:4E:2C:D3:31:30:87:B2:87:29:7B:16:0E
            X509v3 Authority Key Identifier:
                keyid:4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:69:14:4a:42:d7:77:bb:db:15:4c:71:fe:aa:d6:ad:ff:69:
         92:30:6d:03:68:47:0a:07:cf:c3:c1:a8:01:9d:78:77:f4:0d:
         aa:eb:73:7c:f9:5c:5f:8d:93:57:e4:5b:4e:c0:c8:1b:d2:eb:
         63:73:9d:16:3a:02:79:92:90:a3:ce:e0:02:8f:ed:76:f4:af:
         d4:f4:18:af:5c:ca:eb:d6:b9:c5:ed:81:e8:9a:57:ab:66:05:
         6a:72:33:b6:70:2f:19:24:5b:3c:0a:28:73:83:86:3c:ce:55:
         fc:a3:88:8a:29:bb:38:fc:45:ec:89:77:28:19:cb:c9:a7:0d:
         1e:d4:d1:ff:a1:2e:a0:9e:39:27:1e:6d:e5:5d:80:2d:cb:73:
         c0:35:98:6b:c2:be:ec:52:49:58:eb:75:bc:b4:e8:1b:84:a4:
         99:63:07:5c:9e:80:4f:4c:7e:7a:a9:33:80:89:bf:66:65:41:
         11:b4:1f:6b:53:8e:9d:ea:df:ab:65:2a:fd:35:42:73:2a:a1:
         7e:a0:51:cd:54:fe:6a:0f:7c:03:b7:04:4a:aa:d5:f8:db:49:
         08:2f:f0:da:dc:f3:84:af:3b:4b:29:76:8d:6e:c5:27:83:88:
         9c:2d:94:d3:b0:df:ec:30:e2:ee:01:00:3f:12:41:64:f5:d3:
         58:e3:8d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----