Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
File:                     Snz-iBFothWgvUEcwxS9BApNJ_Y.mft (raw, json)
Hash identifier:          L7VS46HLCkMAHmxLcXGQK65tNbJWq8nmQJfpZWBuRM0=
Subject key identifier:   FF:EF:16:62:43:29:A7:FF:3B:AF:E3:E5:06:14:A8:80:D4:D4:47:59
Authority key identifier: 4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6
Certificate issuer:       /CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6
Certificate serial:       01962FAB8FCF4E03D52C11EDCBA3DA060C3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 15:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:34 +0000
Files and hashes:         1: Snz-iBFothWgvUEcwxS9BApNJ_Y.crl (hash: NHYiarCuEiH8OjLnpdtLsqsoBEhL8okqq4OffwV9f3M=)
                          2: h_GYODiIwy0tVyLDmKAyNCK7Ui8.roa (hash: EVyFdfHvchtGYnioVymnJTf1ceZLIXds+uNSkp7sgG8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8f:cf:4e:03:d5:2c:11:ed:cb:a3:da:06:0c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6
        Validity
            Not Before: Apr 13 15:01:34 2025 GMT
            Not After : Apr 14 15:01:34 2025 GMT
        Subject: CN=ffef16624329a7ff3bafe3e50614a880d4d44759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ff:fe:d1:5e:de:f1:bf:b5:46:a9:af:12:45:
                    43:43:02:4c:8f:cc:06:59:ba:41:96:4e:88:d0:7f:
                    36:43:bb:5f:7d:5e:f5:9a:48:58:04:ff:a8:bb:fd:
                    55:97:7b:3e:09:8c:67:74:81:0a:bc:67:61:7c:94:
                    c2:aa:df:c2:6d:da:e2:bf:30:eb:54:9f:d5:cb:58:
                    77:73:e1:48:54:b4:62:d1:65:21:f2:4b:24:39:5e:
                    f4:37:99:5f:14:d5:d4:51:57:de:ac:ab:74:6f:97:
                    a6:69:0d:2b:8d:e2:7b:35:2a:ef:02:25:67:19:87:
                    dc:17:01:a5:bd:a5:e6:14:24:c9:86:df:98:9e:36:
                    b4:50:cd:a3:04:1f:e6:6c:65:51:7c:75:c9:2d:46:
                    2c:29:86:c3:50:92:78:66:82:ec:c9:cb:67:c8:ee:
                    56:de:20:54:71:79:3b:d9:78:e0:79:a7:77:ae:6a:
                    d1:e8:72:b9:b3:05:59:d6:22:8b:42:60:48:ce:b0:
                    a6:f4:b0:bb:c1:36:5f:f4:4c:03:52:0c:5e:46:80:
                    51:7c:c0:7c:a6:5f:cb:5b:ba:71:59:fe:bc:de:fb:
                    9c:05:c7:6e:d6:46:8e:d1:c6:41:78:67:56:c1:fc:
                    17:a6:47:1d:9e:94:03:75:22:24:63:39:54:57:2f:
                    df:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EF:16:62:43:29:A7:FF:3B:AF:E3:E5:06:14:A8:80:D4:D4:47:59
            X509v3 Authority Key Identifier:
                keyid:4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ae:f4:50:22:47:79:5a:f3:81:75:c0:85:2f:3c:da:c3:fc:
         24:2e:78:c0:e1:ba:a5:88:06:85:17:f0:8c:2d:fd:ad:38:92:
         7c:44:6a:75:41:1e:ee:80:08:78:fb:fa:a8:f2:be:83:6a:ae:
         ee:df:33:ef:7d:a7:f2:31:72:7d:14:3f:c2:7d:79:6e:be:dd:
         3b:9f:1c:43:ca:24:da:36:a4:58:be:fc:eb:78:8c:b3:46:c9:
         e7:28:bf:1d:ee:c2:ef:9d:6e:a3:46:6a:2a:53:8b:8a:d2:dc:
         c1:d6:ed:65:bd:3b:b5:8e:a5:93:56:10:71:a1:6f:99:0a:a1:
         a7:e2:35:48:d7:f8:e3:3e:62:02:5e:30:a6:e1:ae:3d:30:d2:
         6b:79:0e:98:c8:bb:e4:89:5a:93:9d:a7:61:27:5c:ec:a1:ed:
         96:d9:92:5d:89:d1:98:fc:6a:81:b1:27:2a:fb:03:92:12:9e:
         74:07:d4:80:7d:56:81:10:7b:7e:b8:a8:83:7a:98:45:e7:89:
         f3:6b:dc:eb:fa:1c:83:2c:58:4b:62:f0:d4:53:90:09:ef:39:
         c1:8d:21:f1:80:06:c2:f9:39:37:a1:58:4b:41:dd:fc:2f:04:
         e2:13:11:23:f6:40:fd:27:eb:d2:28:5f:22:5b:4c:cd:ab:29:
         fa:05:bf:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----