Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
File:                     swUV9H2pJdn5ATgIqpETwr3pbZo.mft (raw, json)
Hash identifier:          NZe5PgmTMUty9RBppn3UP9dCqlT84C685JBdVnp6hOI=
Subject key identifier:   D2:25:84:A4:86:3D:28:6D:00:36:6F:B2:41:B3:C4:CE:1D:82:69:03
Authority key identifier: B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
Certificate issuer:       /CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Certificate serial:       01962F063F46EB4235C89BB38EE675D0DBC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
Manifest number:          015A
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: 8D4_cs3El7iMnocmOE0P9fDWbGM.roa (hash: EF6oh36rQUWBSR4sj1xINR215tCyltEhPZYCKNWyilI=)
                          2: swUV9H2pJdn5ATgIqpETwr3pbZo.crl (hash: QM5Rj1dvPsr/w+QHHfdJ6pQqD+JE00rQZQ6FumCKOkY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3f:46:eb:42:35:c8:9b:b3:8e:e6:75:d0:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30515f47da925d9f9013808aa9113c2bde96d9a
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=d22584a4863d286d00366fb241b3c4ce1d826903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1b:9e:d2:2b:f0:59:e6:17:1b:41:48:8e:27:
                    a8:aa:16:3f:e2:67:66:10:1b:ab:e4:cc:12:46:95:
                    d9:44:7d:e6:62:16:58:0e:2a:fa:83:73:fb:0e:66:
                    32:6d:26:d4:8a:0b:02:a8:ac:16:27:e5:eb:7f:24:
                    58:37:d2:dd:f7:85:e1:69:5b:8a:05:df:4b:5b:2f:
                    af:be:ef:a9:af:26:f6:9d:e1:d4:86:52:e7:06:de:
                    bd:d3:9e:03:e8:72:65:bd:48:ae:10:8b:49:56:e9:
                    d7:5d:bf:58:6e:6e:18:45:c0:1d:62:71:6b:b8:68:
                    2c:c6:af:a9:88:ca:aa:20:f3:8d:cd:b6:ef:1d:ea:
                    c8:47:ab:51:af:20:3c:9a:8b:89:1f:7c:03:59:3a:
                    d8:cc:74:17:15:f9:0a:36:ce:19:3a:62:00:27:74:
                    d5:0b:8e:c4:68:fc:33:68:c2:92:5f:0e:89:74:67:
                    78:a9:0c:e0:5f:20:1a:fb:59:36:f7:40:f5:13:0b:
                    cd:45:bc:bb:7d:99:8a:8d:12:d3:2d:86:5e:9e:9b:
                    23:de:69:95:ad:d6:56:f1:0a:2f:8c:be:44:8f:ac:
                    d9:2f:6b:c5:77:1f:5f:5f:c2:0a:16:52:24:af:89:
                    2b:70:32:37:72:9e:c3:29:ac:6d:2b:e4:4a:fc:1a:
                    c2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:25:84:A4:86:3D:28:6D:00:36:6F:B2:41:B3:C4:CE:1D:82:69:03
            X509v3 Authority Key Identifier:
                keyid:B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:42:35:20:f5:ce:95:b6:6f:97:42:2c:fe:29:b7:cb:90:cc:
         6d:ac:dc:34:f8:0f:7f:dd:ab:20:c9:2d:f7:a2:55:3a:f8:4d:
         0b:83:6f:a2:d3:78:f3:71:1c:97:6c:1f:ad:8b:96:c3:0d:8a:
         20:09:f5:34:0a:f1:0a:b5:3e:ee:8f:af:38:9a:ad:5d:77:b1:
         c6:e5:f8:63:e3:a8:5e:98:aa:9e:91:46:ae:be:1a:5f:ba:4c:
         f9:93:bb:91:c2:88:5b:db:13:44:fb:ae:dc:a6:81:d3:c0:10:
         a8:57:84:80:82:e9:c5:56:41:d4:f4:6e:9d:9e:02:ee:10:9f:
         6a:0a:7f:98:cd:55:f3:48:5d:e8:ff:ea:8b:fa:10:e2:25:ae:
         dc:c6:0d:06:10:2b:65:48:7d:73:04:1b:86:74:7a:52:c7:f7:
         51:dd:08:5f:37:5e:ab:0f:f3:38:db:f9:fe:c2:cb:b0:6e:a8:
         90:45:02:09:55:6b:13:f4:79:bd:69:5a:e0:6d:4c:b7:cf:35:
         cb:a6:6c:c7:c5:e7:7e:e8:e9:52:13:e1:ff:f3:89:ff:dd:37:
         06:98:9e:45:1d:ff:18:3b:a3:81:8c:29:01:3b:d0:d2:92:c6:
         93:44:ce:98:2e:8d:c9:f6:d6:dd:82:21:c5:7e:4a:2a:bf:4f:
         98:83:e8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----