Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
File:                     sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json)
Hash identifier:          Qkx+C2W5WN4JVCzDS40dZeyO+oT/pn6BpJeQTyFQWbI=
Subject key identifier:   06:4B:46:12:8A:BB:D2:7F:B8:48:F4:A5:84:1A:B5:E6:0D:3C:27:F7
Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Certificate issuer:       /CN=b194f0304eedd363c6622fd91c59b10871aa3044
Certificate serial:       01962F3D301AB9391F10AF284995FE9E9349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:01 +0000
Files and hashes:         1: CGIluw5b3rFNq3TYcrDu-mJjjcY.roa (hash: 7XYO0sh+h2BXkgYXdxURNA8WGt1oRVxjTX46cE0gy/o=)
                          2: RLQ2xMmRZoZiAtZFS_YRcySPvAc.roa (hash: P8RbzLYf4UK0GuClJazmarq7imv/ewysF1Ivpx0otS4=)
                          3: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: tzQK9pmqGNrYdiVutLHhZkaAHfI+usUixPAS0c9AJhE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:30:1a:b9:39:1f:10:af:28:49:95:fe:9e:93:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Apr 14 13:01:01 2025 GMT
        Subject: CN=064b46128abbd27fb848f4a5841ab5e60d3c27f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dc:6c:10:9d:e0:92:78:3b:3c:2b:1b:82:c4:
                    0f:06:70:bc:34:68:14:f9:39:cc:9e:96:e4:a8:07:
                    66:55:e0:87:ae:d5:88:d1:a9:b7:c3:bd:54:14:51:
                    7d:f6:69:a6:21:88:98:7d:2f:97:28:66:b8:4e:ad:
                    57:52:4c:fe:9d:eb:c6:80:0c:36:07:37:d8:e3:ce:
                    fb:f0:16:67:25:f3:00:9d:79:db:41:97:3a:7e:77:
                    5e:de:26:ce:f1:86:ce:b4:bd:46:e3:16:ce:22:4d:
                    b4:bd:15:8d:ae:ee:cd:9a:7e:f0:33:07:9e:21:a8:
                    7a:ca:c7:30:5d:ba:ba:29:08:15:05:ac:64:62:ad:
                    93:d7:5d:d3:a0:b0:3a:0d:2e:2d:28:18:b8:98:70:
                    c8:00:49:41:59:d3:1d:8e:84:c1:2c:32:2e:68:53:
                    54:76:8e:8e:9f:8b:dc:a5:da:49:f0:c5:e3:9d:16:
                    aa:cd:c4:5f:3e:3b:cb:27:27:83:80:12:8e:0f:92:
                    33:83:1e:e3:65:6c:11:e7:cb:e8:1a:cb:1e:d8:63:
                    50:3e:fc:88:ab:e1:80:14:e2:10:72:1d:0a:84:f7:
                    e6:66:22:0d:99:b0:e3:5f:a1:af:67:12:9f:3a:7c:
                    73:e4:f3:4e:a3:48:a8:69:7c:da:1a:eb:4b:f0:49:
                    2d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4B:46:12:8A:BB:D2:7F:B8:48:F4:A5:84:1A:B5:E6:0D:3C:27:F7
            X509v3 Authority Key Identifier:
                keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:03:b3:3e:2c:91:b9:8a:c8:0b:a3:52:fb:e7:35:01:9c:08:
         6a:7e:50:3e:ac:7c:33:49:3e:46:25:18:3c:ed:02:da:1f:db:
         a5:54:dc:74:fc:44:6e:a9:3a:5d:02:12:ed:76:31:e6:b4:01:
         c8:f8:ff:b7:74:8a:65:e8:0e:fc:f8:62:55:d5:18:60:85:36:
         d5:4c:0a:47:41:20:95:1d:5c:d1:39:a6:13:20:ff:cf:05:ef:
         cf:60:2f:3a:5e:fe:3b:eb:3c:7c:c8:2c:8e:b6:c7:da:01:20:
         69:53:bc:93:66:d0:21:c3:09:e3:c1:79:25:c4:e6:de:71:6a:
         26:7a:55:f5:bc:9f:82:d8:41:58:cb:ed:19:b4:44:21:f1:e0:
         ac:51:ff:f9:7c:97:b0:2e:8f:bf:49:c3:eb:fb:a0:87:0e:2d:
         ef:0a:8a:80:8d:ad:cf:c0:02:ec:9c:ae:65:38:c4:75:12:8e:
         19:a7:1f:86:06:bb:21:2a:46:90:3a:29:ca:92:d7:ab:d6:6f:
         a2:97:75:4a:17:06:6d:fc:72:96:86:5c:11:ab:47:54:1e:6f:
         96:d7:d1:08:b2:e1:75:ef:4f:13:7b:b3:38:7d:7e:7a:ef:1e:
         5e:90:73:b7:ad:fc:24:d5:21:58:06:3e:0c:62:d2:3f:6b:ae:
         31:39:88:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----