Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File:                     sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier:          GBZodP6pU/zYY02Mi92AzT/rvUE2klZJI+WMRBWLnbw=
Subject key identifier:   6E:8A:31:78:1B:45:2D:FF:70:74:24:63:BF:9A:8D:F9:2A:29:82:4F
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer:       /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial:       01962E98CC26563E1B41BFFEAF119D6E6899
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: XQRW4hC6egq6X6BxwUNnVpgvblo.roa (hash: PhRVE0d3jHpqQEE7GI6sFR1qHTQDk+IvXmg/HiU9evE=)
                          2: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: BjOlA+VHP4uesniWsXeDi3HqjEdLGw6GMR5vCeS2yG8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:cc:26:56:3e:1b:41:bf:fe:af:11:9d:6e:68:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=6e8a31781b452dff70742463bf9a8df92a29824f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a9:5d:d2:5c:0f:b8:57:b8:fc:b0:f4:ec:84:
                    97:11:67:a2:a1:9c:11:73:30:b3:39:3e:66:c1:36:
                    f8:98:df:60:c3:b0:0e:97:91:68:f4:10:22:08:4f:
                    95:09:30:a7:a6:a6:f7:25:53:fe:4b:f0:19:f5:4c:
                    0e:f3:94:57:b1:53:21:52:ae:7b:71:06:e3:d6:af:
                    39:33:42:cf:60:ae:c8:4c:3c:98:19:e0:7f:73:25:
                    ec:8a:be:77:98:d5:8a:8c:81:f9:ca:dd:9b:c3:ae:
                    66:69:7a:1d:12:d7:f6:ec:45:a8:03:17:1f:df:f9:
                    32:4d:7d:4d:be:19:57:32:81:6c:05:a2:e8:b6:e1:
                    cf:e8:c4:52:ce:37:79:7c:fd:41:38:3d:5c:26:04:
                    2d:c4:4a:43:e6:79:6a:27:86:eb:c1:50:76:34:67:
                    02:38:56:53:66:de:0a:a3:7d:71:78:d5:c5:c4:c3:
                    d5:15:2b:95:a5:0d:92:9b:8f:98:11:0a:66:58:41:
                    be:eb:38:e1:8f:e7:3a:b1:98:1f:c5:3e:2f:b2:a3:
                    3c:b4:88:24:20:ec:c4:04:86:83:77:94:4f:c5:3c:
                    48:35:fc:39:eb:f7:f0:71:4b:63:82:48:2b:ac:67:
                    03:73:b6:ad:1d:72:18:ee:e6:5f:ca:98:47:78:97:
                    b1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8A:31:78:1B:45:2D:FF:70:74:24:63:BF:9A:8D:F9:2A:29:82:4F
            X509v3 Authority Key Identifier:
                keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:4d:1a:75:d0:b2:8e:29:d1:06:22:72:8c:5d:26:ec:22:76:
         cd:c4:a2:dd:0b:2a:46:ba:88:ca:bf:8b:77:bd:3f:32:cc:aa:
         8c:a4:b5:85:a3:be:68:57:da:a6:c8:e6:67:98:95:35:7c:a6:
         ed:78:fb:30:59:3f:1c:66:be:27:29:24:ff:f9:16:a2:06:c3:
         85:58:c5:59:6f:7f:97:f8:30:2e:be:53:26:eb:c2:b8:aa:89:
         8a:f4:e4:6d:eb:d8:d4:fd:f5:03:ba:6e:71:55:fe:ee:2e:94:
         7e:04:37:54:ac:74:ff:ca:14:c4:ad:a9:ac:1c:2b:f4:49:ad:
         d7:db:2b:b8:75:22:f8:bd:5f:8f:2a:08:83:cc:4d:65:e6:29:
         46:c6:a7:b2:bb:84:e7:f2:8b:07:f7:85:52:06:92:65:53:5f:
         1a:cf:ce:97:7d:83:74:d5:fc:05:f3:54:2b:de:8c:91:f4:8a:
         ee:43:5c:1b:b5:f8:7f:35:31:83:78:68:00:2c:fe:9d:60:09:
         46:b1:77:31:42:dc:0c:0b:38:8b:9a:7b:17:14:27:29:0f:17:
         0b:9c:2e:70:3c:22:97:68:ff:a9:7b:c8:bc:a7:a3:64:93:2c:
         0b:64:88:27:3e:52:93:64:53:7e:00:75:83:f0:7c:bf:57:e5:
         c6:94:0c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----