Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
File:                     swfIfntuKU8nAHkO7xnoKTnYXNY.mft (raw, json)
Hash identifier:          P56jpZtczk4BUeKmJXU22BQbz9lBoHJmgErrjTbEA0Y=
Subject key identifier:   23:8F:0B:5E:31:67:24:43:97:2D:5F:85:FD:92:DA:81:13:24:49:53
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Certificate issuer:       /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial:       01962DF3B852FB075B6BC8C8F3DE8946A43F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
Manifest number:          11EA
Signing time:             Sun 13 Apr 2025 07:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:09 +0000
Files and hashes:         1: 7FzoSqKZlb5kD6vPPTk2SfC27nM.roa (hash: 6aAGYHU1rCi9sNjHbIL9N9TC7WU4O97UeTWhOeOg/Oo=)
                          2: DCsIzUY9MCA0JaV6Og8Z-7mZrek.roa (hash: fdCemzvEyH44ROybDOkOmBmBhHkALSGBPuIIm5TTIXY=)
                          3: E-rmqFPQ6asHDNqUZiVe4hmLaTQ.roa (hash: +q1K5JLt0dsMSZaPj7YZ2RC5IuCiyKA1uPousYIHDvA=)
                          4: O7g8kyuF4tMM4-vk7Y69OQ7XHok.roa (hash: g8MzInjaeIjPLeGBhJPRfcI+t8p/SupgeCBEHS1Ipd4=)
                          5: fCiUIighRSUqDy9_j7Ntck8ZsVk.roa (hash: UKgRc+5pPOQlC0a0ajbNwptnIkCgOsFRgQmvx4R5d8k=)
                          6: swfIfntuKU8nAHkO7xnoKTnYXNY.crl (hash: CKSITrPHu1ePiDte+ZmZNnkDB4hSZCaLN1NxhYisBNQ=)
                          7: yD5Hs_qDOjzYePaGjxxpveB5n3A.roa (hash: Gf1ynMuKw8mwItao11g6hpTk8T+awfVyraxB/Jj6t1U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b8:52:fb:07:5b:6b:c8:c8:f3:de:89:46:a4:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
        Validity
            Not Before: Apr 13 07:01:09 2025 GMT
            Not After : Apr 14 07:01:09 2025 GMT
        Subject: CN=238f0b5e31672443972d5f85fd92da8113244953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:69:fd:1d:bf:c9:fe:51:46:00:27:56:99:b0:
                    11:9d:63:fe:a0:c4:79:ef:1e:c4:28:f4:4f:76:80:
                    51:0e:80:37:8e:b3:a1:17:29:a9:fa:64:77:2c:91:
                    7b:c2:88:a4:06:13:47:00:24:c6:1b:f9:99:ef:63:
                    da:eb:f1:8a:6f:74:d8:e5:0d:8c:ea:2f:e0:9c:35:
                    fe:a0:e7:9c:53:53:46:18:37:27:30:18:65:c2:42:
                    e6:da:c2:a4:e1:e9:41:49:1d:67:54:94:43:cf:e8:
                    42:58:a7:e3:2c:1e:17:33:6a:ff:b3:ce:3f:4f:2b:
                    e2:63:69:1f:07:78:bc:52:a5:be:3f:89:6e:b4:29:
                    45:66:dd:33:01:3e:a9:60:9d:e7:84:e0:0b:e1:2b:
                    8a:7d:ae:f6:90:a4:20:10:2f:1c:4c:f3:df:0f:23:
                    15:37:d3:c6:0e:96:78:f8:7d:7b:6c:e9:9b:cf:91:
                    d9:83:83:a2:95:b2:7e:b3:50:9e:7b:a6:a8:76:e8:
                    8c:66:0b:4e:a3:6d:39:c6:db:85:2d:2e:8b:c4:22:
                    7b:54:21:72:31:e9:5f:f0:c7:4b:19:a4:63:56:65:
                    70:b8:8c:51:8a:32:de:4b:27:4d:3e:25:76:44:20:
                    48:80:c3:4c:5a:b7:7e:6f:15:46:62:c2:b6:f5:1d:
                    57:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8F:0B:5E:31:67:24:43:97:2D:5F:85:FD:92:DA:81:13:24:49:53
            X509v3 Authority Key Identifier:
                keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:19:62:b3:d2:34:a5:24:ff:c4:62:95:21:ed:3d:f4:48:6c:
         6c:5f:fc:76:e3:68:14:89:7b:bd:57:3e:45:bc:2f:5b:d7:7c:
         ff:73:ea:94:ce:bf:e2:47:c6:55:3e:73:89:4d:0e:e2:d7:39:
         83:80:e3:d7:92:5d:ba:d2:33:8e:df:5a:0e:80:34:7c:09:33:
         98:3d:ef:25:66:8f:e3:d5:08:1f:2c:10:4b:dd:1b:89:7e:24:
         4b:80:ce:76:84:1d:3d:56:66:8a:14:a0:2b:a8:6e:64:3d:9b:
         93:f1:1c:67:66:13:0c:c8:bd:9b:43:a9:8e:e0:b6:70:c6:3e:
         c6:7c:b8:06:4d:f9:3e:29:ab:a2:95:c5:72:7d:84:8c:8c:c4:
         1e:c9:41:f9:a3:72:bf:9d:44:aa:57:36:75:43:d9:28:c1:41:
         d1:0c:ee:55:38:94:9d:87:96:51:7b:5f:94:88:ac:a0:fc:cc:
         d6:e6:0a:ee:79:30:3e:cd:67:b9:23:16:20:4f:c6:60:d3:b9:
         e5:d5:7e:e3:59:d4:d3:fe:29:4a:44:47:22:80:1c:ef:55:db:
         2a:1a:33:a1:d7:80:5b:87:70:66:f3:c8:d5:54:91:8b:bb:b8:
         23:2b:ec:64:5c:8a:77:c5:73:19:f2:dc:48:82:c3:7d:58:ac:
         e0:b9:79:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----