Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
File:                     sMeY09W2CWzTnliSWiihffthznU.mft (raw, json)
Hash identifier:          swve/gwQfI7iC3yC9UfPZrMm/7ERbAChGO1X/8eg+zc=
Subject key identifier:   9E:6B:0E:47:AB:66:E0:B0:4A:3D:00:56:74:2E:FD:61:B7:DB:A3:97
Authority key identifier: B0:C7:98:D3:D5:B6:09:6C:D3:9E:58:92:5A:28:A1:7D:FB:61:CE:75
Certificate issuer:       /CN=b0c798d3d5b6096cd39e58925a28a17dfb61ce75
Certificate serial:       01962ECF5C56905E96035932B6FAF3BBDA32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
Manifest number:          0A43
Signing time:             Sun 13 Apr 2025 11:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:03 +0000
Files and hashes:         1: lAlkLc1CavmRfvnNM-ldOwGYoR8.roa (hash: 0wroejPoBcULff3nhQGRj0gl288xNtfnDJXaFr+mf24=)
                          2: sMeY09W2CWzTnliSWiihffthznU.crl (hash: 3psIKh9O/O4+qqHW719EYX/3XbX+DqE/LtBt6TkdIT0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:5c:56:90:5e:96:03:59:32:b6:fa:f3:bb:da:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c798d3d5b6096cd39e58925a28a17dfb61ce75
        Validity
            Not Before: Apr 13 11:01:03 2025 GMT
            Not After : Apr 14 11:01:03 2025 GMT
        Subject: CN=9e6b0e47ab66e0b04a3d0056742efd61b7dba397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6f:66:ef:38:c9:c1:37:4b:3e:5c:63:be:6b:
                    3c:4c:6d:5b:b8:f6:98:ac:82:91:c5:97:15:0a:02:
                    3e:ea:01:48:e3:ca:1a:73:75:88:6e:7b:8c:28:13:
                    f0:cd:8a:cd:eb:8a:71:71:27:c3:f9:97:a6:a5:76:
                    b8:74:fe:4e:6a:6d:6e:95:33:70:e9:e4:68:88:f3:
                    60:f9:5c:19:5a:f0:d2:d1:46:9e:98:5a:d0:e2:9e:
                    c2:45:8a:a2:3a:a2:c6:00:79:ec:1d:a8:93:99:78:
                    1f:62:9b:d1:0f:4b:92:62:37:1f:8b:d2:95:fd:7c:
                    8c:fd:e8:74:79:87:d9:06:a9:91:06:17:82:59:62:
                    cd:8e:67:09:bb:f8:d8:d3:09:ba:26:1d:ea:a5:4c:
                    db:c0:e7:77:ba:31:9b:a2:f8:ed:9b:a0:1b:24:b0:
                    a4:0e:f7:2a:dd:7a:c7:43:5c:d5:c9:07:17:f4:54:
                    d3:76:7c:1e:10:d7:ec:1d:37:4a:c9:7d:1f:d0:11:
                    df:71:26:ba:60:4f:4b:3e:e7:ba:36:ef:56:a3:69:
                    fd:77:ec:15:cd:7e:21:25:a9:2a:bd:55:e6:72:3c:
                    92:ad:a1:ba:2a:26:fb:86:83:b7:8b:bf:7a:a0:29:
                    09:5c:15:15:bd:16:3e:15:8d:c9:af:6f:b2:8b:31:
                    45:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6B:0E:47:AB:66:E0:B0:4A:3D:00:56:74:2E:FD:61:B7:DB:A3:97
            X509v3 Authority Key Identifier:
                keyid:B0:C7:98:D3:D5:B6:09:6C:D3:9E:58:92:5A:28:A1:7D:FB:61:CE:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:5d:88:87:76:10:98:b5:9a:67:cd:6f:cf:9f:5e:dd:7f:58:
         1d:be:f3:81:9d:65:12:bf:e3:cd:e6:a3:c0:3e:79:b5:e0:e7:
         cc:0c:e2:a1:94:d3:8e:80:a8:60:04:da:14:48:fe:55:e3:10:
         9b:02:34:62:c6:0c:15:eb:86:99:19:f7:e3:41:f9:dc:a5:69:
         b9:14:16:a9:b3:ff:c8:45:50:20:b5:a5:02:47:50:2b:b8:2d:
         95:b1:a9:26:d3:53:77:7f:1d:51:c1:cb:81:ac:3c:44:01:4b:
         d9:dc:a8:e9:14:77:12:e6:8c:23:2b:5c:fd:c7:5a:22:07:14:
         13:64:d2:01:d8:59:65:90:20:3e:66:0e:63:26:da:2a:0e:64:
         7c:9a:bf:5a:c0:85:8d:b2:8b:26:0d:ab:93:5c:93:c1:05:17:
         40:af:12:32:2f:a6:46:fa:de:58:c6:25:a0:59:4a:51:dd:ac:
         14:d5:57:ff:71:2c:16:76:51:db:94:a3:cb:c8:0f:9e:68:1c:
         f5:76:d6:ed:5c:d9:a3:11:00:8b:12:a0:18:85:66:5d:44:68:
         3f:70:ed:c7:fb:78:69:e1:6e:47:70:25:28:d0:84:55:65:29:
         1c:00:80:95:61:db:4a:37:8d:cc:e2:cf:74:1d:40:c3:56:c2:
         c6:a2:de:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----