Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
File:                     SScSTZgDp95UiDFko3bqcuPGPq8.mft (raw, json)
Hash identifier:          4rng/9Ej0776TtNKSOFcnL0uENDYat4s23zRiRtQSvQ=
Subject key identifier:   4C:26:35:63:27:19:95:82:FD:64:2C:A8:48:83:4D:0C:3C:C3:B8:A1
Authority key identifier: 49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
Certificate issuer:       /CN=4927124d9803a7de54883164a376ea72e3c63eaf
Certificate serial:       01962FAB8932DA880015E3E4F90E60E18600
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 15:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:32 +0000
Files and hashes:         1: 6-IQUKyeOlnZ0n7k-mpTFfKu5nA.roa (hash: uwqOWT1eD0xXX0n+hN5F7B5Z9MhYA/dYHW/YSlQ6tT8=)
                          2: OJmLUcdGyKqyreRJA04sZVowZg0.roa (hash: ZPcGNQNPGXt7sqvYIqkF3ZoSuhuiF050QsXqHbGtgGo=)
                          3: SScSTZgDp95UiDFko3bqcuPGPq8.crl (hash: Wef8fLSkNMTY9x4KKKHFTSmu00rsZZt45n9rm89tfKI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:89:32:da:88:00:15:e3:e4:f9:0e:60:e1:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4927124d9803a7de54883164a376ea72e3c63eaf
        Validity
            Not Before: Apr 13 15:01:32 2025 GMT
            Not After : Apr 14 15:01:32 2025 GMT
        Subject: CN=4c26356327199582fd642ca848834d0c3cc3b8a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5f:0a:79:54:91:34:1b:14:71:c2:2b:3e:30:
                    c7:64:58:ea:8b:db:a6:61:36:7b:6c:03:c7:f6:53:
                    68:7c:8c:02:73:72:13:03:76:1e:c0:ff:0f:04:5d:
                    10:2a:2e:19:56:c3:19:ad:55:5b:97:11:df:1e:61:
                    18:84:9b:9b:9c:be:e6:4a:39:f8:e8:f4:16:ca:67:
                    55:d4:f3:cd:3d:93:49:8f:c0:22:54:ec:f1:83:5e:
                    b4:5f:9a:7f:b9:13:25:1e:8c:99:aa:2b:e5:6e:be:
                    d4:38:80:c6:2a:55:af:6d:bf:b9:f1:9d:d9:b5:7e:
                    7a:2f:d5:21:51:a1:67:66:ca:3d:5b:a7:bf:8b:32:
                    99:35:a9:a4:97:e4:25:b2:24:9b:7d:82:bb:df:94:
                    ac:ed:d6:7d:35:3b:ff:d2:de:3d:a7:87:3b:d3:da:
                    55:ac:0c:ee:a3:94:ae:73:d3:9d:dd:b4:1a:db:80:
                    28:e3:aa:da:18:91:7e:d0:ad:5d:1c:34:52:a6:08:
                    ee:d4:bb:5d:31:9e:bf:ac:02:36:9e:92:58:d5:6f:
                    20:a8:7c:37:6b:42:e4:32:2c:91:ac:31:ef:8d:da:
                    b1:fa:c8:ec:bb:53:dc:44:9b:08:73:79:54:42:80:
                    48:65:79:34:33:75:14:44:7e:a4:c4:3e:d5:ea:78:
                    e9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:26:35:63:27:19:95:82:FD:64:2C:A8:48:83:4D:0C:3C:C3:B8:A1
            X509v3 Authority Key Identifier:
                keyid:49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:3b:bd:c1:f1:14:df:5e:0e:7c:fe:dd:54:df:f7:5b:ad:f8:
         a9:7f:11:70:49:21:f2:fe:7f:55:47:78:05:45:95:07:94:3e:
         4e:93:b4:4f:31:d1:4d:57:8a:a9:26:4d:27:5d:7d:6a:e9:40:
         c9:12:43:64:53:2d:fc:16:ac:28:51:7e:10:61:2d:00:89:a3:
         7c:6e:ab:98:00:83:bd:02:9d:2d:11:5d:16:39:7c:eb:1a:6c:
         9d:21:0d:4a:a3:84:74:e1:ff:56:fb:46:cf:9f:92:9b:ee:e7:
         71:08:90:9f:12:0c:2a:5b:64:0d:36:49:84:38:42:72:23:cc:
         ac:6c:39:3f:7b:59:aa:55:19:53:89:0b:9d:1d:26:30:33:6e:
         54:e6:ce:3e:0d:78:10:e0:46:82:15:f9:66:06:66:64:74:79:
         df:40:c1:6f:a8:3e:07:a2:bf:df:93:c3:65:69:ff:ba:d7:40:
         d2:76:19:c4:86:72:86:53:82:ca:24:7c:ab:27:25:5d:38:26:
         b6:04:8e:0c:7a:ae:0a:4a:fb:6e:55:3d:96:4a:20:ec:9c:2a:
         2b:50:7b:69:55:d4:ea:5b:7c:45:d1:fb:3d:e3:be:07:bc:91:
         43:b3:42:a7:58:5b:88:4b:e8:5a:3e:bf:18:a1:40:63:ac:dc:
         b3:7f:1c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----