Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
File:                     SnqRfdz8JujIezCFi28H8po9tD4.mft (raw, json)
Hash identifier:          cl7ljBWSdb+tQZLIk2tGMyluwq9g2kBOKIvdpPdXMG4=
Subject key identifier:   44:CF:C0:B4:38:40:8B:C1:41:C2:53:53:41:78:83:97:2F:36:4E:8E
Authority key identifier: 4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E
Certificate issuer:       /CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
Certificate serial:       01962DF413AFF303533C0F21828D434081DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
Manifest number:          1499
Signing time:             Sun 13 Apr 2025 07:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:32 +0000
Files and hashes:         1: P2xh5AQS8g63oefSEJQg-RsTiE4.roa (hash: fyGkFWMTxDql0OoutRE6aQhGU1Ek1V6QoGNhwV3E3j8=)
                          2: SnqRfdz8JujIezCFi28H8po9tD4.crl (hash: W3emvXuZPIPzqGvrMZeQnQbDH9wwXboCTtW/jql9Vl4=)
                          3: wZuLHZACRgaqannQqtWTgy9AnFY.roa (hash: ArTL5+VwNfVl+VzsgeZQzp979burQZd57vVQg0xpNM4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:13:af:f3:03:53:3c:0f:21:82:8d:43:40:81:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
        Validity
            Not Before: Apr 13 07:01:32 2025 GMT
            Not After : Apr 14 07:01:32 2025 GMT
        Subject: CN=44cfc0b438408bc141c25353417883972f364e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ee:cb:7c:81:ae:7d:3e:ea:f9:bd:dd:5c:30:
                    30:a1:e0:50:85:83:ee:d2:9b:de:3f:02:3c:33:df:
                    d1:6b:25:df:3f:1a:c4:02:33:9c:28:05:68:3c:e8:
                    37:f4:26:89:91:81:4b:ec:f8:82:64:65:ad:d5:fa:
                    dd:52:c7:ab:e7:77:93:62:2b:86:fd:cc:05:fb:75:
                    f2:0f:04:56:34:8b:ba:64:2a:a3:3e:7e:48:d9:a8:
                    61:5e:f4:48:a6:c3:6a:83:97:dd:c5:d5:ed:5e:55:
                    59:25:e7:e8:60:50:67:a6:65:12:cd:4f:c3:46:09:
                    a8:e4:1d:33:dd:58:a1:9a:70:0b:d3:a4:c7:48:7a:
                    4d:f1:6b:ed:74:a4:3c:f6:b5:49:6a:ba:9a:6b:e4:
                    58:71:0f:3d:8b:bc:5e:df:bb:b0:9d:42:13:24:92:
                    59:4c:6d:75:47:7f:b6:ca:b7:80:87:be:bc:27:8b:
                    62:b3:bb:dd:06:d7:22:32:49:13:6f:65:42:60:1e:
                    7f:92:28:65:da:73:53:f9:a2:d9:83:04:9d:35:49:
                    6c:a0:93:0b:a1:88:59:f0:39:0a:42:29:12:ac:5b:
                    ab:c8:2e:0e:71:ed:94:90:87:81:fb:ec:6b:5c:b3:
                    e1:d1:93:a2:c5:39:3a:bc:90:04:7a:ea:90:3b:f3:
                    1c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CF:C0:B4:38:40:8B:C1:41:C2:53:53:41:78:83:97:2F:36:4E:8E
            X509v3 Authority Key Identifier:
                keyid:4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:55:2a:7e:b0:4f:ab:5c:2e:76:70:eb:8e:4a:06:37:83:d6:
         3b:c2:cc:64:87:1d:a4:0d:3f:ce:18:69:e5:2d:f2:4a:8c:c1:
         21:30:0d:f5:e2:06:05:e6:9e:bb:7f:dc:bd:19:07:2c:b1:8a:
         b9:7b:b7:91:3d:6f:a4:6a:9e:2f:f1:c9:61:b3:3b:7b:59:0e:
         20:dd:ef:9a:34:94:19:79:12:69:93:5a:d6:63:63:d4:52:3a:
         79:78:45:17:d8:53:1d:38:59:db:e9:74:22:a3:50:dd:31:6f:
         cb:e8:af:9e:f4:64:6e:29:5d:8d:c2:66:13:28:12:96:87:1f:
         5b:a4:68:87:10:e8:5d:cb:0a:b1:3d:84:55:46:4d:17:2a:55:
         62:35:81:60:0d:7f:cf:9d:d6:5e:7a:40:29:0a:c0:81:c0:26:
         22:1d:9c:9d:46:f5:b6:10:14:e1:67:54:17:39:57:da:fa:96:
         3e:91:52:28:86:88:82:06:07:ac:de:db:b1:8d:09:97:18:6e:
         dc:17:90:75:25:8d:31:9c:8c:47:59:22:c0:76:a8:74:f5:5b:
         f7:48:77:9e:79:cd:be:a5:17:35:2d:7a:eb:b4:e4:ab:e0:dd:
         be:e7:8c:02:cc:a2:33:f8:a1:f0:86:ef:14:18:2f:09:3c:24:
         55:04:52:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----