Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.mft
File:                     4SV-qrv2BNRXAFXCzYrCSbspwQY.mft (raw, json)
Hash identifier:          wvnx/S/xLHnMCFbp2r/Tpxl1719TknNrWWWOXibG5ic=
Subject key identifier:   62:78:34:C1:17:DB:1C:F8:C9:F2:C5:AB:B6:DE:AE:3B:9B:F7:86:7F
Authority key identifier: E1:25:7E:AA:BB:F6:04:D4:57:00:55:C2:CD:8A:C2:49:BB:29:C1:06
Certificate issuer:       /CN=e1257eaabbf604d4570055c2cd8ac249bb29c106
Certificate serial:       01962F3D7A597B59F4E8E083D02DD6849252
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.mft
Manifest number:          036C
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: 4SV-qrv2BNRXAFXCzYrCSbspwQY.crl (hash: MJwrICv7bfvY7qsD+Rzz8yQLIxWSIcpCJ1zpKkd3o4M=)
                          2: RtPlHCvdOTduVIrqGHc113txKjY.roa (hash: dA+hHKIy5OrMWm53ajforCyuSadPM2Iwp18qqHwliUc=)
                          3: x3IHGK1LHuOlcRhBY1DkJyUPPNE.roa (hash: 3HWLZe2T3pntWqcoKlGGtGIvMY4jmETllZDIMuRWnAc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7a:59:7b:59:f4:e8:e0:83:d0:2d:d6:84:92:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1257eaabbf604d4570055c2cd8ac249bb29c106
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=627834c117db1cf8c9f2c5abb6deae3b9bf7867f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:fd:75:8f:ff:8f:13:43:3d:f1:ba:a4:6b:
                    47:0e:d7:88:cd:a7:83:c0:5c:e6:de:da:a6:40:9c:
                    f2:50:be:c0:44:f5:9a:5d:2f:e8:c6:7b:bc:83:00:
                    35:76:b7:f0:ec:ed:0e:89:82:75:6e:aa:a0:94:bf:
                    74:da:b3:ef:28:65:26:66:57:a1:4a:c7:7d:ca:56:
                    6d:09:27:e1:43:e2:c4:8e:6a:e0:7a:36:b6:f2:4a:
                    f9:81:b1:96:b3:e1:48:d9:1e:ad:33:55:64:d5:95:
                    aa:30:d7:85:fe:82:32:94:51:23:dd:b5:fe:9e:01:
                    e4:41:5a:25:0a:48:0a:9a:b9:84:b7:c1:8c:bd:f9:
                    eb:d0:80:a9:6b:23:ba:d1:74:46:77:fa:3a:41:74:
                    95:95:21:e3:ff:84:65:e0:93:91:4d:19:1c:c8:95:
                    75:c1:01:e4:33:55:cc:d9:03:f0:bf:a9:98:86:a0:
                    81:0b:2f:f2:2e:c8:f8:54:ab:9e:8c:ff:34:03:b9:
                    36:6f:da:66:dc:31:fe:85:3e:66:33:3e:d6:f5:0d:
                    b8:48:8a:6a:71:41:e7:46:26:8e:bd:c8:72:0f:a2:
                    e5:b3:f0:07:71:1b:69:d6:32:76:6c:f1:e2:20:74:
                    7c:3d:06:f0:f9:f6:0b:54:85:25:25:48:55:59:6b:
                    54:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:78:34:C1:17:DB:1C:F8:C9:F2:C5:AB:B6:DE:AE:3B:9B:F7:86:7F
            X509v3 Authority Key Identifier:
                keyid:E1:25:7E:AA:BB:F6:04:D4:57:00:55:C2:CD:8A:C2:49:BB:29:C1:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d1:59:44:8f:cb:18:4c:38:ac:40:5f:9c:da:d5:66:37:16:
         d4:99:b1:b6:3f:98:ab:f0:80:ad:ff:32:58:50:5e:a6:e5:d7:
         8c:d8:7b:f7:40:3b:9a:92:39:89:c2:07:46:7e:5d:d5:75:2c:
         80:db:6f:04:e5:06:2c:a5:12:ac:ba:3c:42:45:de:a1:d0:1a:
         b1:01:99:f2:42:c2:bc:76:30:78:9c:6f:7e:9a:b3:51:0f:a9:
         b0:5f:77:6f:a7:ed:2d:93:61:0e:32:9e:45:49:54:a5:ab:31:
         d2:e7:f8:2e:09:03:16:48:69:35:61:40:a7:df:db:7f:c5:b1:
         27:3d:ee:74:9a:be:b7:0b:7f:32:1e:95:0d:3b:f8:75:d0:f7:
         16:bd:d4:e0:e3:f0:c9:71:08:fb:21:7d:cd:9d:4c:aa:e3:12:
         2b:aa:38:4c:aa:9f:fd:9a:cc:9b:74:b4:10:a5:47:0a:f0:c8:
         05:20:5d:0a:a9:5e:2d:a8:62:0b:c2:1e:1c:62:9a:7c:03:80:
         71:35:7a:02:52:dd:06:be:f2:25:6b:11:1f:0e:8a:20:3d:53:
         15:58:5c:cb:f7:c7:60:b0:40:79:10:aa:cb:2e:8a:ea:ce:08:
         d0:7b:e0:ce:ad:64:06:99:8f:c6:78:32:05:e3:d1:b3:32:41:
         1e:fa:9f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----