Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
File:                     sH-v24bTjze_DCbT8nMf3vaxTko.mft (raw, json)
Hash identifier:          W4O5wJVZsLJ4tDm7ihzlsvbgmguEKSE9SXj+TrXxuW0=
Subject key identifier:   A5:26:73:88:19:2C:23:6F:18:51:6A:B5:A3:31:59:3B:66:8D:2C:9F
Authority key identifier: B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
Certificate issuer:       /CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Certificate serial:       01962F3D4463EA627C6C3AFB03090FF5E2CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
Manifest number:          0647
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: 6JrlKE6-D36PVGMwp7ew7z1aOA4.roa (hash: T1fYyT20nJ5YneHKV99StH98ng47eu4G5rhmxnPt+y8=)
                          2: sH-v24bTjze_DCbT8nMf3vaxTko.crl (hash: c2LA+EF57iZfnKTtBMGLertdpmlEx85R2A+V0ER5CDY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:44:63:ea:62:7c:6c:3a:fb:03:09:0f:f5:e2:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=a5267388192c236f18516ab5a331593b668d2c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ea:8e:b1:65:fe:da:6c:8f:30:c5:12:7b:7d:
                    e5:24:dd:46:58:f3:26:dc:55:c8:f4:44:5c:96:0c:
                    98:3f:f6:e7:dc:be:8c:41:65:19:fc:32:c3:08:2e:
                    c0:18:27:28:ed:32:60:b1:15:52:d1:dd:75:d5:3f:
                    eb:78:40:36:45:72:a7:77:e3:33:8f:f3:2a:a9:bb:
                    a0:1b:cc:79:a4:ab:fe:f1:5c:e6:b8:2d:41:07:a3:
                    13:3a:6e:60:f0:7a:8b:b3:03:08:f8:90:d4:d3:60:
                    09:df:5f:c6:b7:81:bb:e2:ce:18:dd:7c:25:ea:72:
                    a4:12:68:4a:89:1e:b0:ec:87:71:ae:50:70:bf:7f:
                    a4:0c:de:8d:ea:38:75:59:05:16:61:43:14:92:bf:
                    c6:64:6c:ca:f3:0e:8a:c7:99:5c:9d:48:f1:6d:70:
                    7d:32:f8:ba:21:6a:ba:65:c5:05:2f:5f:58:f9:d6:
                    f2:fe:d1:73:ca:a3:2e:b5:d3:76:97:68:c2:8a:17:
                    8f:cd:97:c8:e6:37:c9:c5:95:2c:17:40:58:5e:d7:
                    d3:09:a1:49:af:29:dd:5c:ab:01:c9:f4:c4:04:12:
                    65:63:ea:ca:4d:bd:50:b8:11:4f:05:af:4b:93:65:
                    a5:76:63:f0:bf:74:e3:ff:30:bd:c8:59:f7:26:19:
                    73:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:26:73:88:19:2C:23:6F:18:51:6A:B5:A3:31:59:3B:66:8D:2C:9F
            X509v3 Authority Key Identifier:
                keyid:B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:3a:95:95:bc:57:97:49:95:08:c6:cb:5f:cf:95:be:6e:86:
         7b:df:86:fd:1a:ed:9b:62:92:f5:d2:b7:f6:e6:41:6c:67:41:
         c4:3a:d7:c3:8e:8f:ba:44:a8:ec:70:75:88:36:c6:98:60:97:
         99:a3:4c:d3:c7:0d:29:80:8f:e9:cf:ff:57:78:82:d2:b1:dc:
         74:06:16:b8:7e:ff:d4:f7:8b:ec:99:5d:98:84:6e:41:b3:33:
         6e:3e:ba:b1:b1:ce:77:60:a8:41:e9:c9:5e:9f:38:f1:b4:5d:
         01:f9:f8:de:2b:31:1a:b4:7f:52:cd:60:96:8d:4b:3e:4b:b8:
         bd:7d:7b:52:35:20:f0:66:63:2e:71:e4:b6:73:9e:33:d9:a6:
         ae:7e:5d:dd:9a:3f:17:8e:b2:eb:ce:b5:3f:93:33:97:3f:d7:
         42:8a:b1:69:b6:d5:5c:61:ea:9b:9c:fd:ad:8c:86:18:3d:ae:
         71:b3:da:65:17:c0:83:6b:d2:19:8a:d3:ce:b0:e8:be:6b:57:
         a0:bd:28:d3:c8:6e:a5:ac:be:fd:83:4a:62:a9:94:49:89:bb:
         f3:09:a0:73:bd:74:05:49:5e:f5:65:b6:84:7f:36:0f:b7:da:
         28:3f:02:d0:cd:b7:4e:dc:ff:bb:5b:c6:0e:9c:f4:dc:7b:d6:
         d1:51:ea:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----