Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
File:                     SAqutTeS1SAWm84oDD3Yb4N27GM.mft (raw, json)
Hash identifier:          gNEvQU2Ky/hOfG09NacjM5DcEJobB+zPGD278DH0X/U=
Subject key identifier:   73:30:32:94:C7:F3:76:09:6E:36:5A:62:9C:A0:EE:39:A6:CE:F8:08
Authority key identifier: 48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
Certificate issuer:       /CN=480aaeb53792d520169bce280c3dd86f8376ec63
Certificate serial:       01962ECF8E0CBDE535E340071FC3F2C9E27F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: Kc84xCLoopoVZjLsNJRLj2XaVE4.roa (hash: EYoVSxaior1IONB3NcpWKZcJ8AkylxdNSnDbeuoh7e8=)
                          2: SAqutTeS1SAWm84oDD3Yb4N27GM.crl (hash: a+UDGD+1MNUJU0XC6r1g6gfh91ciLF+SkJkiQlfg5xA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8e:0c:bd:e5:35:e3:40:07:1f:c3:f2:c9:e2:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480aaeb53792d520169bce280c3dd86f8376ec63
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=73303294c7f376096e365a629ca0ee39a6cef808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2e:cd:1c:94:15:ff:51:ac:49:8b:b4:d5:ab:
                    aa:3e:2b:6b:d3:4b:3d:75:bd:67:dd:0f:24:3b:17:
                    10:b0:e0:ae:13:fa:55:3e:54:91:77:a8:5e:91:d2:
                    69:32:ba:cb:42:b7:4a:5e:89:35:18:53:2d:f0:07:
                    7f:75:3c:81:6b:88:50:9f:de:c9:f8:d9:f2:1e:d2:
                    e5:b8:65:4a:3c:ec:93:7d:e7:78:c2:bc:01:2f:b0:
                    c6:0c:5e:99:64:d5:d3:45:a2:25:84:32:22:14:ac:
                    e6:0c:22:8f:83:fe:61:84:c4:f5:1d:1f:a3:1a:a7:
                    e3:10:38:f5:14:97:b4:b8:e5:25:b1:ea:fc:a7:b2:
                    92:14:75:ee:d0:fb:bf:fa:c0:35:2f:90:ba:4a:38:
                    fe:2d:a1:bf:8c:b1:55:7d:25:40:1a:19:ae:6b:37:
                    3a:a1:f0:b2:ee:db:87:b2:13:99:8a:cd:0a:6f:c3:
                    19:4e:d3:ce:c3:78:87:29:db:24:fc:af:22:f9:f2:
                    8d:ad:23:ba:fd:19:b2:e5:72:81:71:46:52:5f:24:
                    cf:80:ef:2c:1c:c2:45:5b:bb:6f:c5:81:36:11:65:
                    dd:09:a7:0f:38:31:dd:55:c9:d3:4e:06:2f:b6:f0:
                    ce:09:37:59:c8:bc:b4:ae:fe:59:29:af:b1:93:8e:
                    60:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:30:32:94:C7:F3:76:09:6E:36:5A:62:9C:A0:EE:39:A6:CE:F8:08
            X509v3 Authority Key Identifier:
                keyid:48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:bf:42:b2:6d:77:4e:e1:0e:f5:e3:b1:5b:1e:60:59:3d:ae:
         81:dc:df:80:e0:a5:a6:ec:96:76:de:21:74:4e:e6:5f:94:fc:
         36:71:38:73:1e:3c:59:d1:fa:6a:fb:97:32:1a:fa:44:95:ba:
         ac:14:c6:59:ca:3f:17:6f:62:bc:df:b6:d4:7f:93:ed:ab:14:
         83:d9:52:b8:a2:04:72:98:8a:72:f5:40:62:1f:6a:1e:f6:ca:
         0f:6d:1e:19:e2:50:d4:22:85:46:62:6a:5c:5e:c5:64:a0:c6:
         12:fa:97:68:48:ea:d1:65:20:ca:3d:38:7f:42:fe:3c:6a:f4:
         94:a9:1b:e1:6a:b5:dd:c3:bb:74:00:57:7a:76:6a:fc:cd:7f:
         c9:f3:77:ee:af:ca:4c:30:62:78:88:6f:7c:60:fe:cd:9e:87:
         fd:91:e7:23:0b:15:05:e7:a4:56:e5:c7:a9:a5:95:2b:38:d9:
         0e:d1:fb:2b:bd:68:15:f3:95:52:28:ba:64:41:6a:38:86:18:
         88:13:1b:ec:40:b0:01:48:14:43:de:75:5a:c8:15:2f:66:ef:
         52:2e:b8:91:6a:70:37:73:80:f1:fe:95:90:0b:9e:15:9f:fb:
         2b:94:79:e8:66:7f:e9:91:5a:3b:04:d7:59:4b:18:c7:6c:d6:
         5d:ab:63:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----