Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
File:                     SfCTu46K0RxMg07f0t9U1By0n3k.mft (raw, json)
Hash identifier:          tFqma4xvxFQD/neXGHR5e8oiG7aOOUuxn3FJs6AvJas=
Subject key identifier:   07:73:0D:CB:11:C5:68:44:79:E2:6C:7A:8B:AA:06:F0:F6:E6:96:0D
Authority key identifier: 49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79
Certificate issuer:       /CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
Certificate serial:       01962E2ABBA65E4735CEFDFE645929B42D6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
Manifest number:          0345
Signing time:             Sun 13 Apr 2025 08:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:14 +0000
Files and hashes:         1: SfCTu46K0RxMg07f0t9U1By0n3k.crl (hash: JunXDQ5bHEZKCKU+fpBfwPmDvilfdIYgGOjMw8GIbDw=)
                          2: swB_r0IFBPm9Iemed8mXUpcDjzs.roa (hash: 4f+/BeqDILlbNbuoHwEa+IBP8dJNYECac82k/mVW3hE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:bb:a6:5e:47:35:ce:fd:fe:64:59:29:b4:2d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
        Validity
            Not Before: Apr 13 08:01:14 2025 GMT
            Not After : Apr 14 08:01:14 2025 GMT
        Subject: CN=07730dcb11c5684479e26c7a8baa06f0f6e6960d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4d:98:87:f7:0d:40:59:56:8e:73:df:04:23:
                    06:ac:28:fb:92:c9:5b:2e:e0:5e:34:fc:20:f5:b2:
                    b3:90:bb:17:29:a4:9f:19:32:76:37:3a:a3:b6:d6:
                    63:5c:a2:9f:f3:91:9c:e9:af:11:90:3b:03:a8:ea:
                    46:59:e2:be:88:70:eb:d8:0a:94:65:70:fa:33:3d:
                    44:26:7b:9c:71:5a:47:99:16:6e:91:44:10:e5:f5:
                    88:2c:fb:d3:06:d8:03:15:56:a3:ec:d6:48:79:c0:
                    c0:53:e1:ab:95:f1:bf:a8:fb:b9:31:29:77:a7:07:
                    69:4b:80:b4:73:b9:da:23:a6:01:d7:b5:59:4e:76:
                    f9:37:73:ad:9f:98:0d:37:9c:9c:39:cf:1c:6b:7f:
                    1f:0b:28:6b:5b:b3:bd:99:43:41:13:88:28:b6:6b:
                    f2:81:9e:9b:82:d2:12:9d:5c:3a:01:66:ba:ee:04:
                    df:f6:48:ba:7e:9a:1c:a4:0e:be:98:66:0a:9c:fc:
                    31:f3:23:0d:1a:f8:40:15:18:89:74:65:87:4b:38:
                    d8:ab:30:0c:50:fc:35:23:99:9e:1c:61:f2:76:5f:
                    28:34:09:76:ec:2c:35:d0:e1:b8:55:23:1d:f8:cf:
                    ed:a3:79:e2:79:3c:36:62:88:80:56:77:fb:62:bd:
                    de:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:73:0D:CB:11:C5:68:44:79:E2:6C:7A:8B:AA:06:F0:F6:E6:96:0D
            X509v3 Authority Key Identifier:
                keyid:49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d1:53:a8:f3:4c:b7:d3:03:5c:99:92:21:84:17:71:c4:e4:
         80:02:34:49:2e:cc:eb:81:25:9c:8c:e3:46:02:ff:52:b0:4c:
         f9:fb:6c:7b:95:86:ee:fd:cd:20:47:a3:c4:8d:d6:c2:86:b6:
         bd:36:4e:f1:c6:87:92:f6:79:76:59:e6:e6:94:af:af:18:db:
         07:ae:8a:f2:6b:ea:e8:63:3b:61:5b:55:7a:6e:76:f0:5b:3e:
         55:83:56:87:01:07:83:44:9a:a2:dd:46:01:e3:1b:91:27:3b:
         5d:3c:b7:d5:d5:f0:ce:c4:bf:a0:b7:6d:c1:e4:34:7e:f0:96:
         18:9f:85:c3:76:85:36:a8:f2:25:1e:39:23:2a:16:48:7b:03:
         7d:7d:19:36:fa:53:d2:45:51:19:16:84:cd:49:d3:25:58:2c:
         f9:f9:d7:e1:a9:3c:79:b8:3f:b7:84:26:f1:cc:ed:9a:7b:55:
         ab:c6:81:12:f4:d1:6d:19:4b:ea:4f:b6:f8:3b:cd:5a:6c:a7:
         5c:63:f2:00:df:81:cf:92:e7:db:ed:54:03:12:3a:49:f6:d9:
         b1:9b:7e:90:0e:c1:4f:82:86:cf:2f:ff:b2:a1:87:41:64:32:
         63:67:a7:8f:45:46:e6:68:f4:64:fb:7b:eb:75:cf:7c:9e:ec:
         33:9e:a8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----