Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
File:                     S1ejnbXHqja-gs11HlDLkCMDPco.mft (raw, json)
Hash identifier:          Pz41ngblRpxhH7HNt8qSN1/rDxKrEGhacyrOYZJF+bw=
Subject key identifier:   6A:56:4D:9F:A6:4C:91:BF:C8:A2:D6:3B:2C:56:A5:78:97:1F:1D:18
Authority key identifier: 4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
Certificate issuer:       /CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Certificate serial:       01962E990CD04C28126DCD5ABA6F0AD607A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
Manifest number:          AF
Signing time:             Sun 13 Apr 2025 10:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:44 +0000
Files and hashes:         1: S1ejnbXHqja-gs11HlDLkCMDPco.crl (hash: tttqXsDfffOMDAxDBGwB6CkUZi8EzYReye6mhUIa0k4=)
                          2: zO8Iwb0BsWTcNVLMLIiP_wo8DJM.roa (hash: OPJwqPTjOpu2TkWSPAK04GvaPgxXe8e980q4NWTbl0o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0c:d0:4c:28:12:6d:cd:5a:ba:6f:0a:d6:07:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
        Validity
            Not Before: Apr 13 10:01:44 2025 GMT
            Not After : Apr 14 10:01:44 2025 GMT
        Subject: CN=6a564d9fa64c91bfc8a2d63b2c56a578971f1d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5c:36:f2:98:52:3c:ba:b1:95:d2:36:d3:bf:
                    55:32:93:53:15:41:fb:64:6a:fe:31:74:0a:21:1a:
                    5d:f5:f4:7f:15:5e:2d:aa:1d:67:21:82:7d:39:68:
                    46:d8:10:eb:48:17:bf:1b:59:08:4e:4c:01:a7:27:
                    e6:32:50:f4:6f:db:b7:01:bb:9d:6c:9b:46:d6:aa:
                    8b:b3:e7:57:bb:7c:57:38:69:4c:21:8f:4f:58:40:
                    dc:1e:3e:7c:97:9b:38:1a:10:40:bc:b3:0f:e3:f8:
                    81:67:03:61:bf:34:88:91:68:f3:4d:fd:64:e3:dd:
                    26:a3:c0:fb:a8:b6:2a:ea:5b:67:81:b4:ba:16:40:
                    2d:18:ea:63:e2:bc:71:fb:e2:23:57:c5:d4:32:7e:
                    56:07:bb:81:a6:51:63:e5:4a:d4:9c:94:87:5b:ea:
                    4e:5e:ac:f4:80:5e:10:d8:03:ea:7d:b6:27:05:43:
                    e4:18:7f:3a:2b:c1:04:6b:d8:54:4b:ff:57:3e:9e:
                    b8:ed:7e:8e:a3:e5:a3:d4:e3:b7:29:6f:76:09:49:
                    e6:bd:54:d6:dd:ef:f7:2f:27:ff:0b:c3:2e:6b:11:
                    85:38:02:82:5b:a6:17:97:9f:db:d6:a7:36:73:3b:
                    82:23:bf:59:cb:a9:d8:ff:9a:f0:03:2c:56:31:37:
                    06:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:56:4D:9F:A6:4C:91:BF:C8:A2:D6:3B:2C:56:A5:78:97:1F:1D:18
            X509v3 Authority Key Identifier:
                keyid:4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:53:da:a5:b6:8d:30:82:e3:87:00:83:28:1f:73:be:f3:9e:
         b4:2d:53:75:8e:a0:c3:b2:2d:c5:ad:b5:22:5c:1d:5f:3f:c0:
         8f:7a:91:4a:a0:72:94:76:b3:12:40:62:4d:2c:20:0c:b8:e6:
         5c:0f:a8:df:0b:2f:f2:d9:bf:b7:c8:31:35:2a:20:8d:97:69:
         7a:b5:02:43:a6:17:71:d6:fa:7b:7f:da:2b:74:14:22:31:41:
         d1:05:ca:42:bf:ca:75:f1:df:b4:a3:ee:d4:3d:c2:ca:bf:43:
         ef:07:6b:ac:7d:b3:19:bb:80:90:c0:05:fe:ea:5c:d8:a2:e4:
         95:dd:0a:4c:82:b8:a3:cc:4f:84:88:ee:03:bb:34:d2:cc:44:
         43:ca:97:25:5c:92:79:9e:af:2e:49:fa:a6:48:38:44:10:ae:
         94:09:17:3c:9a:63:b0:be:b9:a5:8a:eb:b2:d4:3c:55:d7:af:
         36:bf:c5:29:12:c6:4c:21:d0:b3:8e:30:e7:50:55:4b:e8:9e:
         50:33:66:12:da:70:ee:c2:90:0b:14:1d:76:06:5e:86:e9:bc:
         35:18:5f:18:30:b1:5b:07:c7:5c:e7:dd:20:b7:eb:3b:28:6f:
         fd:5b:89:ea:17:f2:76:3a:f3:0b:66:59:58:75:2d:41:f9:ef:
         a0:7e:d9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----