Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
File:                     SInGeZ92tFIvCZH2uTNP1ttUHVs.mft (raw, json)
Hash identifier:          isPWX0zG2wvN4swnRa9A95A7Cm1g9VTIoxu4xkN9Eo0=
Subject key identifier:   5A:00:54:92:E6:52:8B:08:DE:48:48:9E:FF:6B:6C:A3:C1:20:53:3F
Authority key identifier: 48:89:C6:79:9F:76:B4:52:2F:09:91:F6:B9:33:4F:D6:DB:54:1D:5B
Certificate issuer:       /CN=4889c6799f76b4522f0991f6b9334fd6db541d5b
Certificate serial:       01962ECF7D99D39FB51D0A6B5C0F1D2D9861
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft
Manifest number:          0FE5
Signing time:             Sun 13 Apr 2025 11:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:12 +0000
Files and hashes:         1: SInGeZ92tFIvCZH2uTNP1ttUHVs.crl (hash: DHOZ9q230Bb9DXSNT5TjmmoFNs4pbynLleT0Nyq1g64=)
                          2: W9LIimzmvADZP7RqK5-CS9hx7F8.roa (hash: 0bKnzD+/f66zg904NSAl0qUDPLAd/0RlfEWM3sOW+wk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7d:99:d3:9f:b5:1d:0a:6b:5c:0f:1d:2d:98:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4889c6799f76b4522f0991f6b9334fd6db541d5b
        Validity
            Not Before: Apr 13 11:01:12 2025 GMT
            Not After : Apr 14 11:01:12 2025 GMT
        Subject: CN=5a005492e6528b08de48489eff6b6ca3c120533f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:be:e0:62:ee:e0:8b:a9:f5:5b:c7:b3:cc:f4:
                    2e:b6:5f:55:56:d0:32:83:42:cd:e0:d8:f4:1c:73:
                    90:fd:95:19:8e:15:9c:e5:b8:62:64:99:0a:51:6e:
                    37:86:e8:21:93:c0:49:01:6f:c5:3c:62:69:21:12:
                    8a:45:98:e4:b1:3f:11:e9:5e:c0:bd:d5:61:91:a1:
                    cb:ff:32:5d:2d:81:34:c3:b6:0c:fe:8e:a3:85:75:
                    3f:d8:27:f5:2d:a5:2d:3e:c8:83:a9:92:ca:a4:60:
                    a8:29:f6:05:4b:9d:5e:d6:7a:4e:97:b0:b7:36:4c:
                    b2:d7:b6:77:21:15:ce:9a:2e:c2:ea:a2:de:f2:09:
                    21:cd:58:f4:2e:7c:5a:ef:05:bf:d5:09:05:81:6e:
                    61:9e:5f:3c:24:81:fb:b3:d9:6e:21:81:64:c3:37:
                    4a:7a:12:85:2e:55:a2:08:58:3b:fe:c9:07:c8:2b:
                    22:c4:c1:0d:24:84:25:07:89:14:ef:65:22:0e:56:
                    a1:54:d7:d4:fc:05:e7:82:8e:f7:30:a8:68:5d:c8:
                    8e:d6:5a:39:9f:35:48:df:55:32:45:1b:91:52:26:
                    3b:2f:e2:e6:e0:52:8c:61:b1:15:86:98:28:23:27:
                    5f:6b:63:0b:02:ea:55:15:fd:22:d2:01:70:f5:52:
                    40:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:00:54:92:E6:52:8B:08:DE:48:48:9E:FF:6B:6C:A3:C1:20:53:3F
            X509v3 Authority Key Identifier:
                keyid:48:89:C6:79:9F:76:B4:52:2F:09:91:F6:B9:33:4F:D6:DB:54:1D:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SInGeZ92tFIvCZH2uTNP1ttUHVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9ad77a-729d-4727-9aaa-f57bdcc73b16/1/SInGeZ92tFIvCZH2uTNP1ttUHVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c7:68:89:03:c7:0c:a8:58:4f:ef:0d:7f:05:a0:6a:cd:23:
         9e:3c:e5:bb:11:99:9b:66:ae:12:ae:6b:25:42:d1:d7:8a:1a:
         cd:54:51:6e:cd:23:18:51:66:a0:8a:aa:9f:c6:f9:6d:4a:5b:
         b7:4b:d4:88:8c:55:c4:21:b2:73:04:bc:52:ec:e4:aa:2a:c7:
         fb:51:5d:1d:bb:21:bf:99:0e:0e:cb:c6:7f:72:50:90:92:45:
         6c:86:82:e2:85:08:8f:39:4b:4a:07:26:69:89:9b:de:c1:08:
         1f:7d:d2:6d:3f:32:65:e0:67:3d:bb:71:1c:de:88:02:76:aa:
         1b:03:07:b4:39:ce:2e:59:63:30:19:a9:b2:80:e3:17:e0:8a:
         29:06:e2:04:f2:98:e7:e3:95:48:0b:16:86:c4:89:2a:ca:e2:
         39:dd:19:1b:5e:c9:12:0f:d2:57:bb:33:b6:18:97:8f:c7:93:
         c1:dd:c1:3a:aa:a7:73:da:db:56:97:82:4a:01:b7:db:b1:93:
         f4:3e:81:03:65:91:dc:c7:86:b3:20:42:2c:97:98:ac:33:0f:
         49:fc:8a:8e:b3:f5:e6:6e:b9:6b:97:50:eb:6f:de:a3:b2:99:
         5e:13:68:e7:89:eb:e0:a2:b6:e0:fd:e7:42:96:75:f1:ba:08:
         4e:b8:32:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----