Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
File:                     SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft (raw, json)
Hash identifier:          MnUQ6VGC3UBwq3Qt0TcLDyjoLUJoW852zuYoxvMjRyE=
Subject key identifier:   35:39:3C:18:62:1A:38:A1:A3:EC:0F:82:F6:9A:32:EF:76:A6:E1:5C
Authority key identifier: 48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
Certificate issuer:       /CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Certificate serial:       01962F3D75893A726BDA1AC61B3EACA42FC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
Manifest number:          13D5
Signing time:             Sun 13 Apr 2025 13:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:18 +0000
Files and hashes:         1: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl (hash: kgtKxeQsa4eAOmDT3r3ClbPI7AuG0J3l8ax3LvkAAnU=)
                          2: fDIcgxuviPH1xRvEDyo8UqwcwI4.roa (hash: rJoyrLL7oo1+w5siaXJh6iXQyoUFBWgTdCtgNT3fEho=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:75:89:3a:72:6b:da:1a:c6:1b:3e:ac:a4:2f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
        Validity
            Not Before: Apr 13 13:01:18 2025 GMT
            Not After : Apr 14 13:01:18 2025 GMT
        Subject: CN=35393c18621a38a1a3ec0f82f69a32ef76a6e15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:93:54:28:6d:81:bf:4c:cd:34:ee:ea:be:1f:
                    31:2d:59:bc:87:4b:11:04:53:5a:1a:d9:57:13:23:
                    25:66:d0:58:d5:c5:85:32:64:6f:4b:3d:2b:10:20:
                    63:98:ca:5f:bc:7f:08:db:be:6a:d2:3e:ba:02:af:
                    e3:09:85:fd:53:56:ce:79:9b:5c:f0:f2:be:27:16:
                    c6:89:08:59:8e:9e:cc:42:9e:b0:62:a1:42:92:c0:
                    bd:c4:05:aa:67:92:ff:01:05:ff:01:78:6d:54:02:
                    bf:84:c5:71:f3:ad:67:78:71:a4:de:7e:ea:cb:9f:
                    cf:d0:ba:70:03:c3:f7:f8:b5:6f:f0:3e:9d:1f:99:
                    3d:f8:7f:fb:ca:ee:6a:30:a0:a7:0d:df:64:09:97:
                    cf:f0:7b:7f:74:bd:1b:c8:0a:de:1e:41:f8:76:c8:
                    52:dc:e0:c4:0f:9f:be:61:12:f5:d9:ed:a6:15:51:
                    c1:32:0f:99:83:24:1e:24:c3:81:e0:78:91:64:d4:
                    2b:06:33:92:0a:0a:78:44:f0:94:4b:7f:d3:0a:ec:
                    b1:96:35:fc:7b:37:81:32:14:c3:b8:b5:f0:0c:7a:
                    e5:2a:6f:89:e0:c5:94:f8:89:ca:02:ee:54:e4:55:
                    66:a6:83:df:09:7e:74:43:c9:2b:42:33:14:7f:ec:
                    b4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:39:3C:18:62:1A:38:A1:A3:EC:0F:82:F6:9A:32:EF:76:A6:E1:5C
            X509v3 Authority Key Identifier:
                keyid:48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:71:c6:7d:a0:78:d3:8f:05:af:06:33:85:98:25:ba:98:a6:
         ed:8d:f7:b1:bb:d5:99:05:51:c8:87:ac:b6:dc:87:7f:3b:9d:
         4a:5d:4b:81:3c:7b:3b:62:31:bc:fa:b5:41:77:13:d8:51:74:
         de:77:8d:87:c2:31:13:ea:23:08:e3:5f:7c:c0:dd:a2:48:8c:
         3b:02:a5:93:ed:e6:e4:33:5d:c3:65:c8:f5:da:18:9c:cb:b6:
         aa:8b:9a:49:eb:76:71:03:0a:1b:6b:d4:01:d2:54:1b:4e:5c:
         05:c1:bb:5c:40:13:2d:a8:32:61:f4:c4:28:56:1e:02:85:59:
         d9:1c:3f:c7:43:64:1a:03:3f:a9:f9:50:76:96:18:33:9d:c2:
         b2:b3:00:03:de:0c:01:fa:46:29:4b:5e:ef:8e:d6:5c:6a:b1:
         1a:44:be:c1:1a:95:23:a4:1a:e2:11:d6:24:9b:af:b1:d0:b9:
         67:a8:95:7b:3e:42:ac:b4:8c:49:e8:31:a0:2f:a6:70:09:1c:
         18:d4:ac:3b:5b:9d:d5:4b:b2:b2:ae:bf:5d:9e:cd:61:54:c8:
         2b:43:f7:2d:73:59:63:d2:2c:56:cd:ba:8d:a0:cb:91:3a:64:
         af:9f:10:9a:c4:6d:3b:04:43:ac:8c:0c:26:0f:a3:e4:f6:9a:
         46:6b:f0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----