Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
File:                     SFGWc90KnPV4lVIK83wqgYPc4Wg.mft (raw, json)
Hash identifier:          7g3Dmzni7fIzdbIHkdjSQLJ4guBDrP9Ye1+5gxCqang=
Subject key identifier:   8E:A7:32:23:1D:E8:A8:FC:E4:E2:20:6B:15:DB:39:0A:BF:A0:8E:9A
Authority key identifier: 48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
Certificate issuer:       /CN=48519673dd0a9cf57895520af37c2a8183dce168
Certificate serial:       01962E9923140A05266B7075AE6A0772CB6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
Manifest number:          0FDF
Signing time:             Sun 13 Apr 2025 10:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:50 +0000
Files and hashes:         1: N_mB8DyGTMyRNtWdzOHezqUOwxA.roa (hash: 0iM1AEZNlQrcAYLQC9NYhgIr9GaQK1NMxQpbyZpHQKI=)
                          2: SFGWc90KnPV4lVIK83wqgYPc4Wg.crl (hash: TbL1D5Z+3Fi/tZsphpETIS1VW2prUPpN1py/uxwpCHM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:23:14:0a:05:26:6b:70:75:ae:6a:07:72:cb:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48519673dd0a9cf57895520af37c2a8183dce168
        Validity
            Not Before: Apr 13 10:01:50 2025 GMT
            Not After : Apr 14 10:01:50 2025 GMT
        Subject: CN=8ea732231de8a8fce4e2206b15db390abfa08e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d6:b6:75:f8:60:2c:84:7c:ac:67:ad:c8:3f:
                    db:19:50:f2:cb:ce:3b:3d:ab:14:81:1c:ee:66:e3:
                    23:e3:0d:65:f3:46:8c:02:0c:77:f4:53:3c:9d:c5:
                    68:ff:fd:74:d5:e0:77:4c:b2:75:3c:04:29:d8:49:
                    ee:aa:a5:10:1e:e7:ba:70:ee:e0:e8:34:c2:dc:78:
                    bd:51:35:67:0a:45:f5:8a:98:b2:a6:40:c0:b6:d4:
                    6e:e7:bd:09:3d:88:f2:a2:6c:fb:93:43:54:09:00:
                    ac:1d:22:32:d5:be:fe:b3:c0:f2:a5:e4:cb:c3:d9:
                    d8:2f:62:18:94:5a:ff:23:e8:e3:79:e0:b0:0a:90:
                    2f:21:41:d8:81:24:8d:8d:67:1d:5a:65:cc:d8:73:
                    58:7f:22:50:45:ac:f0:9a:0f:22:d9:d9:34:5f:a0:
                    14:4b:32:bd:73:73:60:48:eb:5c:4c:11:c8:55:f2:
                    a9:b6:65:be:c1:95:75:8e:28:f0:3b:55:ac:ce:1e:
                    44:27:aa:1e:60:8c:7a:6a:2b:10:74:1c:a4:a5:b6:
                    8a:ae:1f:0e:8b:79:4c:05:2e:36:5e:70:53:d8:ef:
                    f8:ef:20:b1:ef:2e:a2:c4:c2:e3:95:4d:72:81:9f:
                    24:16:43:23:fc:1b:1c:22:ae:6e:1a:ba:c4:42:af:
                    0c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A7:32:23:1D:E8:A8:FC:E4:E2:20:6B:15:DB:39:0A:BF:A0:8E:9A
            X509v3 Authority Key Identifier:
                keyid:48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:0c:82:9a:5c:e1:3d:86:a8:c8:cc:60:50:e1:2d:6c:83:ac:
         68:84:c2:30:1a:12:4c:b5:41:24:1c:bb:38:e3:16:ee:0e:57:
         5c:20:bd:df:48:67:f8:de:93:cb:e0:2b:2b:a4:21:3e:b0:95:
         c7:4f:43:0f:50:55:09:fb:b9:cc:29:d8:91:dc:15:e4:36:ea:
         04:df:7c:a6:db:6f:4c:c0:82:f6:ba:fa:3a:ac:5d:80:32:de:
         99:4f:af:d0:9b:bc:fb:a6:22:c5:ba:ed:c9:fd:f9:a4:19:55:
         a2:2a:1e:60:e4:21:1a:b7:de:df:ba:0c:d3:26:88:b5:a3:0e:
         e3:5c:94:24:9a:ac:7d:de:2f:92:47:57:6b:87:a7:a8:44:75:
         35:6b:f9:69:eb:70:75:86:31:1c:fa:13:81:5c:5d:ba:5c:89:
         68:5b:12:6b:5d:30:df:75:c3:73:c7:c6:eb:19:aa:15:5e:92:
         4d:96:0a:34:86:26:14:9e:9e:c6:24:21:ce:3b:f1:d1:f4:8e:
         64:09:a4:db:2b:28:51:8d:bc:29:aa:35:d6:5f:99:2e:a7:58:
         d9:56:a6:a5:27:d3:cf:1a:78:9d:d5:84:d8:6f:00:12:0e:f3:
         7f:e3:49:db:94:b4:13:cd:7f:9d:d5:b7:c0:e6:3c:7e:c4:58:
         6e:ec:2d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----