Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
File:                     su0dYGb05GVO9fPMcKXZBamvgpA.mft (raw, json)
Hash identifier:          Wz4+bMjyWZ0bUzHkvXzkL9BiWszIhWlRSTvuruBVlj0=
Subject key identifier:   9F:B1:82:91:1E:7A:FE:F1:0E:EE:76:44:7D:CF:A0:58:6D:58:33:3D
Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
Certificate issuer:       /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Certificate serial:       01962F06701CC568B9B2F52C5038C55ADF0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:13 +0000
Files and hashes:         1: 1-ltIqDmdRri_JzK-WP35nYk2cQM.roa (hash: 0bK+rteLcuTEscCNCfYnJ6bFxtebRlZJOqtPYrohMPw=)
                          2: Zkat7ibcLmD2h_0_XMZ8A60Ar4Y.roa (hash: S9WARRHeF7XnyVkRNyrlC/MJ9g6e/aBgMKh17IrDCTs=)
                          3: kLoSSyOqdGXBSQRo8VZp6L-TiaM.roa (hash: 9hIEwlHhl+bUrm5c0k44GlmKeMVBJgHOI+a/J30MoSc=)
                          4: kweAulzTrCvxJT9UZzTQmhyNMt0.roa (hash: 6ACNdOW4ObJspcsXRMK8EDpIbxmZVEa19iOYRQQmt+I=)
                          5: su0dYGb05GVO9fPMcKXZBamvgpA.crl (hash: lPhEFTGEFktDBzxJ5wCJ2CrbqDQFVUxsxPRPeQgEoIk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:70:1c:c5:68:b9:b2:f5:2c:50:38:c5:5a:df:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
        Validity
            Not Before: Apr 13 12:01:13 2025 GMT
            Not After : Apr 14 12:01:13 2025 GMT
        Subject: CN=9fb182911e7afef10eee76447dcfa0586d58333d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a2:d0:f0:d3:f3:fe:e0:3e:8e:25:79:e0:87:
                    f4:12:46:52:f1:39:7c:48:08:a1:6c:df:de:b7:25:
                    d1:a4:8d:6d:65:f4:57:df:f4:2e:1f:33:21:99:ee:
                    59:e8:52:51:01:33:87:4f:ed:68:ad:d3:18:b3:8b:
                    97:da:5e:95:48:5f:53:f1:3f:cd:c3:80:03:28:8c:
                    56:14:dc:1e:52:d2:57:b3:2e:72:cf:2e:72:90:80:
                    08:d7:43:08:a5:a6:24:18:65:44:5f:aa:bc:7b:76:
                    a4:62:a5:65:09:a0:ea:28:7f:5f:42:05:95:51:e6:
                    05:44:24:5d:13:07:a6:85:ae:90:fe:5c:d0:9d:e3:
                    c8:7a:57:22:87:db:de:dc:7b:c9:3d:d5:07:91:74:
                    55:2d:98:df:a8:e8:ee:6e:47:a9:74:c1:60:6a:df:
                    a5:2d:29:20:ea:bf:bb:84:3e:23:85:96:5f:2a:ac:
                    3e:c3:88:26:b8:cc:57:59:08:3d:9f:58:24:57:cd:
                    d2:3b:4f:12:de:32:98:bf:d9:7e:8f:ba:55:52:72:
                    27:60:94:57:c6:84:a4:fe:9c:db:bf:53:4d:a7:76:
                    83:4a:9f:f8:43:02:81:f3:0c:0d:53:6f:22:30:fd:
                    a4:02:56:fa:ec:1c:65:98:86:0e:5f:77:72:10:09:
                    79:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B1:82:91:1E:7A:FE:F1:0E:EE:76:44:7D:CF:A0:58:6D:58:33:3D
            X509v3 Authority Key Identifier:
                keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:87:e7:88:72:71:01:0c:54:8a:71:43:8a:a1:f0:9e:fc:46:
         ec:85:30:7f:5f:87:19:0e:da:df:f2:fc:df:2e:6a:8e:8d:13:
         40:74:b0:a6:16:f1:70:e1:ed:61:65:a7:7a:5c:64:a8:dc:f5:
         17:cf:ea:d3:52:3e:b7:1e:48:85:33:06:94:6a:56:82:59:23:
         f4:90:df:b3:f8:dc:e9:f3:1f:fb:19:b1:86:fb:f0:5a:d2:bf:
         77:b6:9e:d8:66:4d:e3:64:76:48:41:0e:c8:bb:01:dc:32:d7:
         45:c3:1f:91:21:fe:b4:53:e4:3b:38:4a:80:4c:54:b7:2c:f0:
         d2:1d:6c:de:4d:29:e6:93:46:4c:30:38:c2:4d:2d:9b:28:0d:
         f0:2a:d3:70:fc:99:a7:96:cd:55:ea:66:94:06:7e:e8:75:a1:
         26:02:d3:89:c5:2b:4c:f6:c3:fd:92:db:65:43:f9:05:29:62:
         17:36:95:3c:99:01:79:11:52:91:c6:19:02:04:43:9e:b5:dc:
         fd:7e:86:09:f4:12:53:b7:06:c1:63:4a:1e:2c:56:15:78:92:
         27:b5:cb:a7:06:be:e0:8b:ff:b7:d1:03:94:e9:f1:5e:13:1a:
         fd:38:2e:94:57:58:01:99:a5:e0:13:74:6c:dc:f4:2e:a6:96:
         8b:e0:86:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----