Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
File:                     S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json)
Hash identifier:          hK7yq4wqwCYjy4/hyz84teQac9qHqplwCsvYm0v3e4U=
Subject key identifier:   56:CB:8F:9D:B5:4E:00:83:D5:9E:7D:7B:2E:08:05:8E:5C:BF:3C:B1
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Certificate issuer:       /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial:       01962DF454A89C9975B445BCE144673EC804
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
Manifest number:          0AF1
Signing time:             Sun 13 Apr 2025 07:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:49 +0000
Files and hashes:         1: 7fSgZ-LQDYvguJzdZ14V0z0FUCE.roa (hash: bUjKLDflZP/Ln3EKUyE+zKMongCT5xOF2uDWHet5S9I=)
                          2: DiRUXj-wMeKTJD3aUfG_fU2alsE.roa (hash: C8nsHrwSkn8Gd1JmzSYSfUzGZSwYITwrUGRtmf3pI4s=)
                          3: Ru-jgtHHtk22zU2Iz9obbyyNqtA.roa (hash: JK2Fg/eBJyup1fiSh8xdKaGSDAo/evkcOv83dZLvh1k=)
                          4: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: Tf1VeWh/uYNiEBGV00aJxQVAXYIDvEmm+6zE4Lza9Ws=)
                          5: WzBH8kAZVhitfGs3LpWEVIaX2DU.roa (hash: yyE311L3mhjCKLl6ozIj/e45U2t4pgo+mFiZj5vWZ9E=)
                          6: vTYkTnZMEaqfhCdiY5ia6c9viZw.roa (hash: m5F7OL9Eo2LVurzs6A9iXzsVS70f86h9K1zL5V462Uc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:54:a8:9c:99:75:b4:45:bc:e1:44:67:3e:c8:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
        Validity
            Not Before: Apr 13 07:01:49 2025 GMT
            Not After : Apr 14 07:01:49 2025 GMT
        Subject: CN=56cb8f9db54e0083d59e7d7b2e08058e5cbf3cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:af:2f:02:9b:e9:b0:97:44:83:ce:d5:39:46:
                    35:44:28:a5:a7:09:cd:35:a4:57:b8:82:9b:5a:4d:
                    54:ee:de:f7:26:8b:c7:25:54:3c:58:b6:cc:ce:54:
                    a7:f4:04:25:f4:8a:0f:73:1e:0d:68:63:3b:ff:8d:
                    a4:c9:fb:2c:56:ab:82:75:66:0e:89:c9:1a:a9:cd:
                    24:c7:7b:4b:da:5d:72:af:34:3a:b0:67:81:60:4a:
                    db:90:2a:a3:06:e5:3b:74:77:97:df:29:b0:a9:eb:
                    e4:81:ed:49:42:64:d7:f1:4c:40:38:fc:3e:6e:1e:
                    a7:28:16:48:4f:a8:a7:42:de:a1:45:fb:6a:86:6f:
                    46:41:8a:66:68:7d:76:53:be:95:db:e1:6b:ad:9c:
                    62:fb:25:96:0c:24:4d:93:0b:b4:f0:f7:ca:62:be:
                    a6:ca:76:3c:26:4f:f9:af:53:29:c6:df:c2:53:22:
                    e3:f9:07:98:77:d8:76:14:32:a0:f0:14:df:eb:30:
                    f0:81:82:3c:7d:c2:29:5b:91:77:26:fa:28:9f:d5:
                    33:8c:18:17:fa:2c:d7:2d:dd:07:20:d3:21:3d:51:
                    e7:f9:c4:c7:ab:67:84:4d:89:88:4d:b9:50:04:22:
                    67:e0:9e:ca:df:ef:25:da:39:49:9b:b3:ff:42:41:
                    5e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CB:8F:9D:B5:4E:00:83:D5:9E:7D:7B:2E:08:05:8E:5C:BF:3C:B1
            X509v3 Authority Key Identifier:
                keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:5f:c7:21:a1:2e:57:7b:15:60:73:e8:81:c0:b1:b3:62:b3:
         84:fc:24:15:86:9a:99:e7:1c:f9:8d:93:d6:50:66:b4:71:71:
         f1:4a:1d:f0:cd:d2:f5:b8:f4:8d:cb:6c:01:68:03:6b:9b:98:
         5a:53:f7:09:15:1a:7a:26:3c:e5:e3:dd:c3:41:ff:07:b3:f1:
         81:3d:eb:13:63:3e:88:20:f5:31:65:3d:6f:b5:bf:83:cd:cc:
         bc:fd:b4:dd:9c:77:8d:8e:df:6c:b0:94:1c:f7:40:df:ef:00:
         2b:36:a1:2c:52:07:16:69:8d:e8:50:8c:73:01:20:17:07:38:
         69:3a:c4:ad:c8:e4:60:e6:7a:c9:74:9d:ed:96:0f:76:e5:c7:
         9f:89:d3:c3:21:b3:d1:56:d3:b6:6f:0f:52:f5:bd:0c:73:10:
         4d:ec:86:0e:e1:67:67:90:d3:42:65:d6:61:f2:c1:20:e8:b7:
         e1:b4:0b:a2:18:7e:5a:69:bc:d7:e5:ec:ba:94:1d:6e:cb:c8:
         af:41:89:40:81:e7:7c:c1:25:16:0c:aa:c6:f5:61:ec:52:11:
         7a:80:c2:7d:f5:bb:9f:00:a1:db:bf:31:7f:60:da:81:a2:40:
         1b:49:39:5e:91:ab:c7:de:c3:38:6c:73:05:a3:c8:5e:cf:17:
         e7:64:26:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----