Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
File:                     SanokeBtQid9xPtfvWnpq9jimIM.mft (raw, json)
Hash identifier:          GQVHBWrfuhSbPxB+wfepAQJWmV0PTai/IBwvo1WJmYA=
Subject key identifier:   BD:10:CB:DB:06:42:B0:37:1B:7B:14:59:C6:02:06:35:01:02:36:24
Authority key identifier: 49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83
Certificate issuer:       /CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883
Certificate serial:       01962E98F8CBC96EA7D37BB9768377D783EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: SanokeBtQid9xPtfvWnpq9jimIM.crl (hash: qbXJHCcDenXSJ9WWT1GPvn6AzmmH2L3UuIZa9S8O8Zo=)
                          2: xNQR2jyCo-wMte68YS73m1IZ9O0.roa (hash: BWuMWNUBHZ2TpJe9eyJrXKCjlVJ/6BKirHJr21VbUdA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f8:cb:c9:6e:a7:d3:7b:b9:76:83:77:d7:83:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=bd10cbdb0642b0371b7b1459c602063501023624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:40:ed:d6:db:03:37:d7:cb:32:dc:09:5e:5a:
                    38:0d:f8:6c:59:5e:3e:98:29:aa:7d:f6:3a:7e:ec:
                    17:50:b1:40:25:87:a4:0a:00:14:50:86:19:09:5c:
                    64:c2:6a:89:98:10:a7:b4:4b:74:92:80:44:c4:71:
                    15:8b:c3:bd:cb:fc:23:8c:76:1d:2a:0a:91:23:2f:
                    af:3c:40:66:c3:cf:a6:e6:59:f2:4c:bb:2d:0c:31:
                    3e:09:56:05:48:df:e1:c0:50:20:3a:7c:cb:ad:fa:
                    e6:6e:4b:ad:fa:00:b5:8d:90:ce:84:8c:df:a9:4f:
                    4f:ac:d7:1c:42:40:1c:c0:a5:41:d2:44:50:5a:f4:
                    d9:93:03:6b:dd:9d:fb:68:96:ef:a1:68:8e:0b:da:
                    a1:d5:9f:b9:06:ee:43:5d:c7:22:ee:90:4c:81:b9:
                    34:90:d6:4e:53:bd:8f:a1:72:7c:51:0a:08:59:08:
                    b0:70:1d:b1:c7:10:26:b3:e1:f6:af:ef:4f:de:3e:
                    9c:bf:4f:40:5b:4c:a4:f7:1b:7a:d2:a0:8a:b0:16:
                    7a:16:0c:24:14:9b:86:fc:28:0c:18:21:b4:43:76:
                    45:f4:00:ac:f0:b9:be:e6:5e:14:52:21:8c:c9:d4:
                    f5:5d:f7:ae:9d:40:98:64:6a:3c:56:44:44:c4:b6:
                    1d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:10:CB:DB:06:42:B0:37:1B:7B:14:59:C6:02:06:35:01:02:36:24
            X509v3 Authority Key Identifier:
                keyid:49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:73:22:8a:9e:f8:1c:db:9c:cd:f1:d4:7e:41:b3:57:b2:a4:
         6f:e6:32:aa:08:97:3a:f9:63:4a:61:48:9f:36:29:2f:02:32:
         0d:b0:7c:19:9f:ff:f2:37:00:fe:59:63:3f:63:ce:50:7e:03:
         13:ab:88:45:64:61:fa:c7:e2:e1:ad:3e:e0:9b:59:59:1d:14:
         a6:54:56:82:22:27:ab:f9:d4:f1:c5:b8:2e:e9:16:6f:24:b3:
         8c:4d:1e:05:69:47:38:85:6c:a3:4d:e0:50:ed:8e:c7:c8:68:
         07:e1:7a:0c:8a:1b:c1:27:cc:fd:0f:8f:fb:f5:5b:9b:30:fc:
         fb:ee:e1:5b:0a:84:a6:c4:97:4a:2a:ee:f0:37:7e:44:d2:a6:
         e3:54:90:91:eb:78:eb:8a:55:18:51:2e:33:a9:0e:2c:40:49:
         59:d1:34:4a:fa:9e:b6:a7:34:6c:a6:ce:79:06:86:f6:da:3c:
         43:9d:7c:d8:61:4e:31:91:ee:cf:f0:65:20:32:90:50:81:9c:
         fb:12:36:0b:85:e4:fc:82:d8:db:24:69:6b:fe:d1:7e:d0:bc:
         ab:34:e0:b6:ab:29:df:78:53:7a:a3:de:73:36:c2:88:20:25:
         68:0b:c9:ac:bd:55:8a:67:97:d8:ff:b2:bb:13:89:02:13:d1:
         a7:f2:72:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----