Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
File:                     _SYdRTGeg3UYdDbaRL9bmtsESn8.mft (raw, json)
Hash identifier:          CCdO+/l89DUfEJbikWRow4IFO9eRK0mcerKi5fW+6Cw=
Subject key identifier:   0A:EF:60:A0:DD:BB:F8:FF:D4:F4:A9:22:1F:04:98:75:69:23:0D:22
Authority key identifier: FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F
Certificate issuer:       /CN=fd261d45319e8375187436da44bf5b9adb044a7f
Certificate serial:       01962F3D6E1707CAA7F4FD9A54DFA844B1FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 13:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:17 +0000
Files and hashes:         1: ElC-6BWKIscUitjfAAuE6V-GosE.roa (hash: puexHHhEWAY8GemHhcMwArliXKfDZpEmPaNZcjyIMY4=)
                          2: GBGBlAFSzLuNFgNx2x_0D_5DQmg.roa (hash: NZPhbRaB5eM/voPBrZEMV3C9aUgwFS3iIgWGfN4cNI0=)
                          3: IUfsA9WUIh_drsK7CEvgRpo35z0.roa (hash: +jKjtuQptzEAVzSdULkJ5A8HWf8sGmcVbiqzXEqShbg=)
                          4: _SYdRTGeg3UYdDbaRL9bmtsESn8.crl (hash: W6pc7twiqA4gYLK59UL3vJNJQnMb7S3p4HbWEz8lAAs=)
                          5: _cs3H8q9ZlFgGKRLwiQ4Xtf8xNU.roa (hash: zP2/mCjB82eimNPlv5UC3nRyIxCuHe80Zw3eVdffH6Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6e:17:07:ca:a7:f4:fd:9a:54:df:a8:44:b1:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd261d45319e8375187436da44bf5b9adb044a7f
        Validity
            Not Before: Apr 13 13:01:17 2025 GMT
            Not After : Apr 14 13:01:17 2025 GMT
        Subject: CN=0aef60a0ddbbf8ffd4f4a9221f04987569230d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:82:df:6e:44:ee:d4:6a:18:a5:c3:9e:76:db:
                    21:82:80:e2:25:e5:64:e9:7f:7f:c9:79:60:65:fb:
                    ab:9c:34:3d:54:a4:54:dc:9b:db:ad:a7:68:72:af:
                    f2:1e:33:85:26:a9:3d:da:0e:c4:1d:30:8d:e0:9c:
                    e0:3a:55:d9:5d:7a:a0:9f:95:30:ce:02:ee:41:2a:
                    39:fc:38:41:8a:32:e4:86:a9:ed:33:95:36:7d:12:
                    a6:5f:15:c9:06:9b:50:80:b0:79:39:59:84:eb:3f:
                    b0:13:9a:2f:16:6f:cf:39:2e:5f:37:aa:9f:96:d7:
                    6f:9e:b5:ee:2a:a7:7d:a8:66:92:8d:af:3b:18:cb:
                    3f:eb:19:4a:1b:0c:8f:a1:ed:82:a6:cf:a5:55:91:
                    78:51:f2:1b:ae:d1:c3:db:26:bb:13:3b:d6:60:d7:
                    00:bb:e4:32:ad:e2:b1:d2:8c:61:79:b0:3c:ed:fc:
                    07:eb:63:17:d1:c0:0f:6c:f3:9d:38:e8:8a:df:8f:
                    08:0a:29:87:24:97:57:6d:dc:7f:1a:6a:01:82:7a:
                    86:d8:b3:0e:41:a2:20:1d:56:a9:cf:f9:7e:4e:0b:
                    f3:3e:5e:c3:07:2b:37:1b:30:ff:6c:cc:c4:17:52:
                    66:e5:7c:ed:46:eb:d1:2e:17:db:80:2c:50:ec:9f:
                    6a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EF:60:A0:DD:BB:F8:FF:D4:F4:A9:22:1F:04:98:75:69:23:0D:22
            X509v3 Authority Key Identifier:
                keyid:FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:3b:97:b4:9a:ce:6d:34:d8:f9:b1:3d:34:f8:bf:9d:be:75:
         9a:4d:ad:39:4d:ae:20:99:85:d9:01:a0:c6:f1:2c:bd:47:6c:
         be:0c:b2:8f:5f:b6:4d:ed:20:de:a5:b1:a0:92:64:64:a8:db:
         90:e8:48:35:90:cd:12:be:26:7d:c0:17:7f:b5:6f:ab:56:33:
         85:97:15:12:f0:c5:86:8e:48:04:8e:15:63:92:82:5f:de:82:
         46:18:2a:28:56:2a:0b:e9:5b:cf:c9:e3:48:cb:9c:d2:63:b5:
         7a:06:8c:92:dc:61:93:0a:98:d7:8f:30:93:4d:bb:2c:b3:e5:
         d4:52:25:d0:5e:54:7b:86:9b:7d:6f:a6:5a:bb:55:8e:47:e0:
         58:be:7e:1e:c7:62:77:19:6f:1a:9f:7e:b1:3f:f6:ef:0f:1d:
         b5:fc:97:5b:4e:ee:17:ff:4c:a2:74:98:10:79:34:5d:84:76:
         c6:4c:cc:b8:e8:50:c8:94:05:f9:93:1a:92:91:33:9b:4b:f9:
         ef:a8:57:87:d0:f0:d4:f1:fc:bc:49:51:32:0a:29:f1:44:d6:
         f7:8f:c8:dd:09:5c:9a:bf:ed:53:bc:05:55:ba:b9:d6:33:38:
         7a:7c:4a:aa:0f:9a:c2:2a:ae:4e:49:20:24:a5:76:79:2b:3a:
         3f:35:cd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----