Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
File:                     SepQocYggnYq_aAH1vyLS9sFdJ8.mft (raw, json)
Hash identifier:          FZj9H+VViygGFazPvEuAQEa2KbXxqhPIkSLe0YgF+Hk=
Subject key identifier:   91:02:7C:9B:7D:41:48:65:CD:CF:4D:2F:11:1E:41:AB:E2:B8:EF:4D
Authority key identifier: 49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
Certificate issuer:       /CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Certificate serial:       01962F742102EAA8F6565D48B80FBC88C9D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:01 +0000
Files and hashes:         1: BHvEiTbi4Pq6B9PpmT5f6n87vL4.roa (hash: s+QevCZ3wcDACFh+jWTrJPdapoQkuOB0iQkRIdmgUkk=)
                          2: Nvgx0NStgiF6lAwa5XAPUa97GUc.roa (hash: HepcNDvL/nGXjv68tFuvUcj3BhJTbTJLihV6JiWEI70=)
                          3: SepQocYggnYq_aAH1vyLS9sFdJ8.crl (hash: Wy5p886M3t83uYW1IarYtyG2vnbHVWQRA58vcuy9uus=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:21:02:ea:a8:f6:56:5d:48:b8:0f:bc:88:c9:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
        Validity
            Not Before: Apr 13 14:01:01 2025 GMT
            Not After : Apr 14 14:01:01 2025 GMT
        Subject: CN=91027c9b7d414865cdcf4d2f111e41abe2b8ef4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:49:4a:5a:ce:e3:ee:4f:2d:06:f8:ce:07:15:
                    a1:a3:a9:bf:b8:65:61:c4:06:3d:4e:f7:fb:7f:dc:
                    b8:35:6a:48:8f:0d:d2:41:ce:db:3b:3e:5d:4f:0b:
                    45:b0:90:5d:2d:bb:e3:00:10:01:1a:7f:11:b3:13:
                    32:7c:15:8c:48:95:9a:29:50:05:f2:80:a3:4f:60:
                    d1:65:48:b6:71:6a:fc:ba:a8:e8:e9:c1:97:8a:4b:
                    78:a3:ef:f5:b7:6f:ac:1a:8b:f1:51:ab:41:99:3f:
                    83:20:60:81:aa:c7:a4:52:54:a9:81:1a:8f:47:35:
                    40:46:27:bd:dd:a5:63:89:9f:7b:33:0b:e2:a5:8d:
                    05:00:9f:32:b8:c7:51:d1:91:01:4a:ea:e7:b1:1f:
                    61:c0:1f:cf:e5:8b:1e:47:f5:99:c8:00:8c:7f:b5:
                    e8:72:23:50:71:51:1a:6f:d9:35:a6:bd:2d:82:cd:
                    2e:71:17:7d:62:e3:78:04:48:14:f1:fe:4b:bd:62:
                    9a:ba:92:51:49:f4:6c:71:91:87:d0:09:07:b6:17:
                    4d:33:1d:d0:93:56:53:b6:e7:1c:b6:78:74:71:0c:
                    58:5c:99:95:04:4c:9d:59:77:ad:c7:af:e6:d7:67:
                    c2:ff:17:f0:ae:dd:1c:4c:5a:1c:0a:17:74:26:10:
                    1b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:02:7C:9B:7D:41:48:65:CD:CF:4D:2F:11:1E:41:AB:E2:B8:EF:4D
            X509v3 Authority Key Identifier:
                keyid:49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:1a:3f:5a:81:9a:df:05:1f:ae:0e:88:22:86:fd:28:fc:63:
         4c:70:d9:3a:ea:d7:f9:d3:ae:41:74:ca:f1:11:d4:bf:aa:75:
         16:b8:c7:99:dd:c8:d9:6e:19:2d:d1:f5:e0:94:14:44:81:72:
         0d:36:ec:11:78:49:1f:ca:cc:19:38:de:9f:4e:4a:67:e6:3f:
         31:0b:15:45:64:b6:b9:42:46:63:74:6f:6d:ab:89:fa:29:1b:
         dd:76:e6:6a:14:7a:26:d5:91:cd:b5:bc:64:25:2a:ec:15:55:
         06:5b:76:81:34:80:b0:54:d6:49:ad:ab:43:1a:d8:12:f8:fe:
         21:19:3c:2d:a3:21:0b:3d:16:54:23:d1:a8:cc:a1:72:36:c1:
         34:a3:18:96:09:d2:b1:90:d6:4f:f1:da:d3:ed:51:12:7b:e5:
         77:87:54:0b:15:e5:21:1d:55:3b:d7:45:b5:40:42:67:16:30:
         8e:11:25:f9:2c:c8:3e:89:2e:07:d4:4c:b7:8f:c4:2b:1f:e0:
         75:0a:ef:ee:50:e2:99:3c:b9:e0:3a:92:1d:11:30:8c:f1:8d:
         7f:f1:d8:9c:8a:34:0b:9e:e6:43:11:92:1a:0d:b1:d4:20:41:
         25:97:17:a3:e2:ce:e7:b9:ba:96:07:b1:9e:3f:18:a9:93:d9:
         52:b3:e8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----