Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
File:                     SFNVcGg2xtB8f9JdW1nbC22JT7U.mft (raw, json)
Hash identifier:          FGWahG3BOkqgm+QQsxadeVvsDGQbZfWIp44J4Z6/Y+s=
Subject key identifier:   1A:EA:4A:98:7C:5C:B4:50:AF:B9:F7:25:8C:4B:C9:0F:6D:3B:D7:21
Authority key identifier: 48:53:55:70:68:36:C6:D0:7C:7F:D2:5D:5B:59:DB:0B:6D:89:4F:B5
Certificate issuer:       /CN=485355706836c6d07c7fd25d5b59db0b6d894fb5
Certificate serial:       01962DF3FBA4EF484A28114A977862875B43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SFNVcGg2xtB8f9JdW1nbC22JT7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
Manifest number:          0884
Signing time:             Sun 13 Apr 2025 07:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:26 +0000
Files and hashes:         1: SFNVcGg2xtB8f9JdW1nbC22JT7U.crl (hash: VriEwKgHlomkNlLMaevjXgIGJbQR85ovBk8LzXyTMbQ=)
                          2: xMvpgjkxKbx_nJXqKUz8HP8cBlY.roa (hash: xpvtl/jAMstPAGZTh7RwpFcbxDqkgPOXgahD3aZqXp0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fb:a4:ef:48:4a:28:11:4a:97:78:62:87:5b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=485355706836c6d07c7fd25d5b59db0b6d894fb5
        Validity
            Not Before: Apr 13 07:01:26 2025 GMT
            Not After : Apr 14 07:01:26 2025 GMT
        Subject: CN=1aea4a987c5cb450afb9f7258c4bc90f6d3bd721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d0:5f:42:06:48:73:23:6c:56:44:f2:94:e7:
                    10:e6:12:70:46:b6:66:7c:95:c4:ee:39:cc:e5:e2:
                    0d:c4:50:80:46:82:8f:69:57:92:a0:d2:ce:74:de:
                    4c:d0:7e:2d:04:45:db:68:9a:0a:ab:48:87:d6:29:
                    92:51:aa:21:94:5f:bb:cb:eb:6a:c5:db:0a:94:8b:
                    b6:68:aa:63:8f:08:72:c0:d2:f3:89:66:35:6c:e7:
                    3e:7a:68:fc:66:fd:64:5d:b5:87:17:36:15:43:37:
                    89:79:8a:50:53:bb:99:84:cf:37:02:29:47:ec:d9:
                    ea:6d:1b:e5:76:81:f1:e4:4f:a9:c9:17:86:ef:5f:
                    7d:4d:c7:e6:bc:19:ff:e8:fa:48:c0:3a:74:54:2c:
                    b4:15:2e:66:1e:8a:33:8b:58:5a:46:e6:75:9d:ea:
                    2f:48:22:5d:ba:11:c7:42:9c:ad:51:0a:41:7a:e7:
                    69:37:d7:67:17:70:8a:8a:78:70:69:59:4f:2e:19:
                    3e:d5:41:62:da:4b:a9:e7:a8:10:9b:72:25:8d:36:
                    f4:a8:47:49:f9:ec:f3:01:86:1e:30:3f:2e:ee:e8:
                    95:cd:2f:4a:ee:d6:ce:19:63:6e:fe:e5:d3:44:8f:
                    a5:86:e7:6c:2c:81:52:c4:3f:6e:87:3f:ac:1d:cf:
                    4f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EA:4A:98:7C:5C:B4:50:AF:B9:F7:25:8C:4B:C9:0F:6D:3B:D7:21
            X509v3 Authority Key Identifier:
                keyid:48:53:55:70:68:36:C6:D0:7C:7F:D2:5D:5B:59:DB:0B:6D:89:4F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFNVcGg2xtB8f9JdW1nbC22JT7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:09:7a:e5:5f:4a:93:2e:71:cf:9a:20:c5:3a:71:58:25:fd:
         a1:f3:02:5a:84:2c:ae:46:d2:3f:4e:a8:c2:eb:a8:32:3a:81:
         16:65:66:06:5a:9e:6b:6c:a3:3b:ef:fa:1b:07:f5:bc:b5:2a:
         da:30:5a:a1:18:99:50:6d:f7:0b:2b:c3:27:ee:6a:8f:cc:a7:
         b6:bf:60:a6:47:ad:7b:77:83:b1:1b:70:ae:03:e8:83:76:53:
         97:bf:a2:66:16:f4:d0:70:01:aa:ea:5e:ba:f2:53:a9:3f:39:
         fb:9d:e5:07:cf:fb:b2:76:76:e6:39:b5:45:bb:cd:32:47:6c:
         22:75:42:06:6b:4c:fc:b8:31:a0:ca:cd:0c:94:35:56:c2:c3:
         eb:62:e7:7a:e6:0d:86:be:c1:f3:42:b7:0b:47:3d:ce:9b:14:
         cc:62:8f:61:6b:ff:da:70:24:05:0c:3b:e9:54:9d:b4:83:65:
         32:16:a5:1f:fc:4f:d4:1a:65:76:a2:c1:2a:9a:7f:14:e3:d1:
         04:9b:0b:f8:47:ea:d4:53:09:5b:7c:bb:75:b5:61:a3:84:6d:
         ca:ea:15:f0:4f:e1:91:95:65:c8:81:bd:f0:d4:9c:73:ad:98:
         c5:48:0d:b6:7c:42:1c:88:18:b2:06:f3:e9:30:b8:da:bb:e0:
         05:72:17:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----