Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
File:                     SF4-4cMlgXX0_22bVZ2lTIPsC08.mft (raw, json)
Hash identifier:          XpCSmsfBLrTow2aMcvW+rxeHcyw9hhrfsdiOxvR2BZk=
Subject key identifier:   AD:61:D0:8B:33:B2:B4:3F:1F:55:EA:D0:AE:53:16:B6:0E:99:5E:44
Authority key identifier: 48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
Certificate issuer:       /CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Certificate serial:       01962F7435D24A4FFABFE819C281A10DF719
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:07 +0000
Files and hashes:         1: SF4-4cMlgXX0_22bVZ2lTIPsC08.crl (hash: UBZNYqk48VDfEU1TviF5DeRwjVqguj6Q5QGbtQDSsh0=)
                          2: ZopMcF1edsiLC5IB_2wqcv1pm7I.roa (hash: 9APA6+f5SQgw2656vPCnPyRgFDtV/KHCNYnrSKLYasE=)
                          3: fB9-x9nzQMLGXiKWPiofGOiCCDo.roa (hash: /Yz5duUUoV4QyYXJiuuC625duaCe5B8wdcwUeuj9HvE=)
                          4: l38wLN6Gw_epossfbuxRMwnX5sY.roa (hash: EA/nu4qnZGykrdQkMaUMT/48WUqEkVXJbnvFzsWJo70=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:35:d2:4a:4f:fa:bf:e8:19:c2:81:a1:0d:f7:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
        Validity
            Not Before: Apr 13 14:01:07 2025 GMT
            Not After : Apr 14 14:01:07 2025 GMT
        Subject: CN=ad61d08b33b2b43f1f55ead0ae5316b60e995e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:80:41:d9:19:77:8e:f3:66:0c:aa:ea:22:d8:
                    f5:94:de:d7:16:58:40:d7:25:d3:10:fe:f1:7d:6e:
                    b9:4e:a0:88:70:aa:d6:0f:a1:5e:e0:7e:a6:c0:8c:
                    78:9c:a7:13:e3:ae:d9:3e:76:19:b1:e9:91:1f:98:
                    71:ee:8c:fe:b8:c6:90:79:f2:0d:76:4d:5b:d6:8d:
                    db:03:0b:eb:4c:2a:89:7a:a0:1e:d3:e4:9f:a4:f6:
                    97:25:e5:a6:96:81:55:38:83:c9:99:6c:78:bf:a0:
                    09:6e:a3:9e:8e:b7:88:45:85:b8:c3:bb:67:49:7b:
                    a0:83:7d:70:a0:83:ed:f6:5f:b3:4b:93:b2:d4:6c:
                    f2:ab:e3:2c:42:2c:4d:4c:c8:ea:0c:ee:c3:a3:b3:
                    37:4a:d9:83:75:1f:97:b8:33:63:0a:66:0d:8e:c1:
                    86:a4:50:0c:91:67:be:16:cb:4a:1b:4e:c7:ae:79:
                    d9:55:c0:e5:0f:53:a6:e0:16:d4:89:c6:5f:52:39:
                    2c:73:4e:f8:5a:ad:f2:0a:fb:e2:23:77:6c:cd:a8:
                    b6:7a:a9:51:e0:1e:0b:8c:47:19:fc:20:08:fe:08:
                    17:fa:3f:76:37:24:dc:a8:61:17:15:b4:68:66:9c:
                    dd:b3:cc:59:50:be:23:a4:8d:19:4d:8e:d6:82:b0:
                    62:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:61:D0:8B:33:B2:B4:3F:1F:55:EA:D0:AE:53:16:B6:0E:99:5E:44
            X509v3 Authority Key Identifier:
                keyid:48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:fc:bf:1f:48:83:42:6a:a2:31:6b:43:91:74:a9:4a:5f:36:
         0e:36:3e:81:3b:e1:e2:87:d4:7a:7b:65:f5:70:08:ea:9e:7d:
         b8:ed:3a:38:cb:d3:0e:91:a5:9e:20:65:f4:83:10:96:9f:10:
         68:a3:5f:86:92:cd:d4:a7:30:5c:06:0b:7f:86:6d:13:8a:99:
         89:79:2a:c2:c9:ff:d7:5f:9a:2f:ce:1a:97:d3:04:7a:7d:77:
         bc:0c:0e:ae:77:82:6a:af:b0:e8:2a:96:8f:1f:b9:47:34:e5:
         9f:b3:8f:00:c1:c7:59:43:43:76:ae:9b:ae:d4:5e:da:6d:53:
         49:b8:64:d1:68:e5:a0:44:ff:1a:cd:36:7c:8a:6e:d1:ff:fe:
         54:d3:e5:bd:8f:e9:12:c1:81:b5:99:3e:d6:82:ee:f5:8e:f1:
         43:62:09:39:97:bd:f1:20:6d:7f:32:24:9e:88:fe:cc:b9:50:
         b4:45:1a:72:a1:be:dc:5b:69:54:77:8f:dc:ff:a8:d9:68:50:
         f9:ef:8a:76:49:6a:01:2e:30:fd:35:22:78:eb:a0:af:7b:78:
         a4:45:80:26:26:65:8b:95:7a:5b:54:e0:b7:ca:2b:7d:f6:93:
         2c:45:1b:59:0b:1d:3a:e6:35:c3:af:11:c0:e3:52:f4:e6:80:
         96:4c:b7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----