Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
File:                     S4xZ6sloSDTLl8wq2FjVx03PbO0.mft (raw, json)
Hash identifier:          Zt2JHMjGfdOVMRs8bKe/4W+vyP/m5uXahNt6kxGovsk=
Subject key identifier:   24:73:40:31:7F:6E:00:1D:40:07:2E:25:C5:8E:DF:0C:25:0E:E0:97
Authority key identifier: 4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED
Certificate issuer:       /CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
Certificate serial:       01962DF3C95702F5CA50593A19C23D65E557
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
Manifest number:          0350
Signing time:             Sun 13 Apr 2025 07:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:13 +0000
Files and hashes:         1: RX0vF7s1v3ZmCOZA2PNfN34Nc0Q.roa (hash: DL5GkVVXEPj8zi75flOVBOwBTEyMxXVt8DN9ATKiCDI=)
                          2: S4xZ6sloSDTLl8wq2FjVx03PbO0.crl (hash: QLIkQYRM/pYQ0tuck/dGRVu4GI2d9JFWEplSZ6zNWZg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c9:57:02:f5:ca:50:59:3a:19:c2:3d:65:e5:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
        Validity
            Not Before: Apr 13 07:01:13 2025 GMT
            Not After : Apr 14 07:01:13 2025 GMT
        Subject: CN=247340317f6e001d40072e25c58edf0c250ee097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e7:bd:9f:9e:02:7c:a6:1f:23:e6:18:14:b6:
                    8a:a2:bf:fe:6c:32:20:5d:3d:67:a8:06:07:a0:5d:
                    5b:a9:b3:d4:f7:75:64:6f:e2:35:ae:ab:60:ed:a4:
                    3c:65:03:42:54:95:8c:e8:1d:13:6e:ea:72:ba:00:
                    bc:cb:f9:cb:08:47:b1:af:86:de:ba:f0:2f:2e:c8:
                    e5:b1:51:e2:bf:43:6e:d2:36:f6:58:f9:ef:7d:74:
                    30:d2:d7:3d:96:64:8c:df:4e:a2:52:8d:d0:4c:a9:
                    ec:7a:05:3a:66:4f:15:e6:3e:04:a7:a8:4b:14:3f:
                    8b:74:f7:9b:64:59:58:8e:db:65:35:bf:47:81:20:
                    ef:be:4c:af:1b:e7:0d:55:b0:ee:73:09:2c:24:95:
                    cf:33:f1:ec:f7:c3:7a:35:3c:cd:27:6c:97:b6:f4:
                    47:ef:4a:de:e8:72:f2:81:eb:32:51:64:88:52:67:
                    41:ae:40:a8:c5:ac:2b:a9:b9:3e:c2:58:81:51:4c:
                    8b:4f:4a:03:b5:6c:4b:90:63:81:1f:c7:8b:28:fa:
                    8b:c8:e5:7a:4e:ef:31:49:9f:1b:4c:72:42:17:8f:
                    a7:71:5b:7b:62:42:68:5b:99:f6:f6:f5:aa:41:42:
                    db:a5:80:2a:ec:20:14:9a:38:56:bb:be:eb:b7:f3:
                    33:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:73:40:31:7F:6E:00:1D:40:07:2E:25:C5:8E:DF:0C:25:0E:E0:97
            X509v3 Authority Key Identifier:
                keyid:4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:d0:13:a0:6e:e9:58:0c:65:ad:cb:a5:de:7e:24:9c:b0:e6:
         12:8c:47:e4:53:17:11:17:fc:c1:8b:a6:da:58:7d:3c:ef:94:
         72:2a:7a:d6:e8:1f:cd:13:9b:1a:f0:c9:56:58:10:56:04:3d:
         2c:31:f4:24:8a:ee:dc:32:06:73:05:b9:7b:d0:67:0e:b7:da:
         c3:9e:d3:92:8d:39:1d:ce:cc:90:31:78:96:a3:8e:0f:c6:ea:
         3b:f3:25:5e:d2:55:f5:c5:cd:b6:df:3c:9f:3f:54:ab:04:a5:
         76:12:7f:58:87:f2:39:58:5a:cc:d1:19:33:2b:df:6d:34:db:
         c9:77:d5:d7:b2:fe:24:8c:22:e3:59:a8:a4:ef:e2:a4:62:15:
         68:b9:83:f5:79:44:c0:5a:45:12:a2:14:b9:b6:97:48:b8:77:
         68:04:c1:05:bf:97:3a:a2:73:78:04:6c:ce:64:a5:35:e1:16:
         12:2f:6f:a0:b0:99:5b:10:84:71:e6:72:02:1f:7a:51:27:18:
         f0:ad:a7:04:35:bc:3b:15:bf:12:5f:c3:22:c2:ff:5b:6c:1a:
         5a:37:35:6e:86:03:43:29:f7:93:28:6e:3c:16:a8:6c:e9:46:
         91:31:e4:3b:f9:d6:42:38:ab:45:80:c4:dc:31:53:f0:71:ed:
         a5:cf:c1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----