Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
File:                     skmuabOnLsLm6a25kJDYEqHSmVE.mft (raw, json)
Hash identifier:          esV2bBICx0I/XB7t8uyrqXsZ2CIX5OgMexqT9xz1ppw=
Subject key identifier:   01:6E:74:D1:BD:25:BC:29:9B:6C:13:21:59:D1:AD:2C:40:7F:75:23
Authority key identifier: B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
Certificate issuer:       /CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
Certificate serial:       01962F06D10DE348062C2BB6470E9EF88B57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:37 +0000
Files and hashes:         1: omiVo8lJOxBO3d2eFDOX09spiwY.roa (hash: 3VKQ20p2zglj9J79jWC9kZRYgl/DejI2kMckcoXVkGA=)
                          2: skmuabOnLsLm6a25kJDYEqHSmVE.crl (hash: Woh0HSCN6IZNL8j74JNtYYxSyiTarCfmmZQPSQb6CDM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d1:0d:e3:48:06:2c:2b:b6:47:0e:9e:f8:8b:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
        Validity
            Not Before: Apr 13 12:01:37 2025 GMT
            Not After : Apr 14 12:01:37 2025 GMT
        Subject: CN=016e74d1bd25bc299b6c132159d1ad2c407f7523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:06:5e:c3:c0:e3:77:09:5c:45:29:4d:67:8b:
                    23:f0:6c:b7:60:bb:77:b8:43:4c:83:00:41:eb:8f:
                    2b:b1:89:17:f7:1f:34:39:0d:94:f5:7c:0e:2b:a2:
                    51:74:48:42:35:68:19:32:f6:2b:86:5b:ab:a1:2e:
                    b4:e9:6a:66:64:4e:b6:ce:bd:dc:b7:94:f6:b8:36:
                    1c:76:68:2e:45:0f:ba:26:d2:8f:aa:0a:32:e6:0c:
                    4b:ec:a2:41:82:d8:a8:80:53:4d:ea:cc:e8:26:36:
                    96:1b:2f:8b:06:3a:2c:1d:57:d3:68:29:3c:3c:88:
                    ee:dd:f4:9d:40:3f:28:22:a8:34:e4:85:12:f6:68:
                    75:8b:aa:6f:37:40:35:9a:40:85:d5:eb:be:bd:77:
                    58:13:8e:74:0c:85:02:80:c4:4e:4f:29:51:62:99:
                    75:d4:c4:c2:8e:eb:a0:7d:c4:d1:47:1a:0f:47:e7:
                    4e:7c:5f:1c:d3:9e:00:ae:e1:80:50:86:d1:9e:dc:
                    4b:80:38:52:33:25:95:74:65:54:c9:e0:e1:39:72:
                    9d:13:5c:a5:c8:8a:ff:39:48:e8:e1:44:6e:51:36:
                    7d:6c:1c:32:ac:50:ac:b5:9b:18:63:fd:eb:79:cd:
                    be:30:fd:56:eb:41:e7:5b:c0:89:e1:bb:13:d9:2f:
                    dc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6E:74:D1:BD:25:BC:29:9B:6C:13:21:59:D1:AD:2C:40:7F:75:23
            X509v3 Authority Key Identifier:
                keyid:B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:8e:0a:bc:9e:6a:85:f8:82:d9:73:20:b7:a9:90:03:32:f4:
         94:b1:92:65:e1:91:04:19:4a:4e:7f:97:e9:3a:71:2f:8a:85:
         d6:1f:55:b4:2d:66:d0:c3:82:ad:df:15:6a:16:32:2f:a8:be:
         9c:fe:9b:6b:44:0b:fd:2d:1a:28:31:ec:91:e4:69:a1:b9:ab:
         0a:a3:58:b5:cf:8d:c5:fb:cf:84:e0:45:ef:43:85:9d:b7:cf:
         5f:96:9c:44:b0:46:b9:cf:c1:e5:bc:b1:9f:c6:d5:bf:54:ba:
         15:55:69:4d:4e:02:2f:7d:d5:7a:fc:34:14:90:ed:e1:d9:e3:
         39:71:05:9a:e6:a6:a5:b1:89:ce:bc:cc:d1:5f:15:3f:bc:73:
         fe:0b:66:4d:79:d0:1a:cc:69:2c:45:57:f8:2d:39:5b:60:4b:
         3d:f5:b4:de:c7:e9:1a:c9:b3:6b:4f:80:bc:38:45:f9:3e:e5:
         68:75:5c:1e:29:11:6d:f8:ce:a8:46:42:17:7d:b3:f7:c0:00:
         34:e0:5e:57:70:3a:b3:0e:f3:96:b2:f1:1f:aa:9d:32:7a:92:
         6e:fd:49:dc:29:6e:94:f3:83:3b:e4:37:f9:1a:cc:17:9d:05:
         a3:c1:f4:18:e9:4d:6f:bb:af:1e:fd:fb:b3:8d:72:c6:0d:92:
         8f:47:31:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----