Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
File:                     SUqFZSdrSiUbpXPdbV9fh4I469I.mft (raw, json)
Hash identifier:          LS6ede6xzxXcV2BppxeLKTcEZrQdJ0k8OT/5PKwAcrA=
Subject key identifier:   F4:7C:34:3F:82:DB:1D:4E:BF:C6:FB:07:C9:56:EA:02:C6:63:BD:CE
Authority key identifier: 49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2
Certificate issuer:       /CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
Certificate serial:       01962F747403E4309640C6D54CECA30CC19A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
Manifest number:          1067
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: SUqFZSdrSiUbpXPdbV9fh4I469I.crl (hash: YlkrOwAxAfye6+s1bAiG2ayfKY0+AtMjdqWUqQQV+m8=)
                          2: colowNm5_qh5Va7chPSOw1VK1ck.roa (hash: nloDqYvIeZi3RS1elNvQ7LOm+0c8P6a1rYXwvCChzp0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:74:03:e4:30:96:40:c6:d5:4c:ec:a3:0c:c1:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=f47c343f82db1d4ebfc6fb07c956ea02c663bdce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:27:4f:e7:a0:b8:0c:53:a9:18:9c:41:29:99:
                    a4:10:38:88:5e:e2:0a:3e:fd:2e:03:e0:8d:1e:2b:
                    a1:0c:35:b6:c1:b8:c1:ae:26:c6:45:66:0c:75:ef:
                    ae:83:70:24:ba:6a:94:1b:ed:80:71:04:a6:22:80:
                    48:da:55:46:df:3e:28:2d:91:e2:6f:7d:46:de:bb:
                    73:8a:31:03:00:30:44:4d:a8:78:38:2b:df:c2:7b:
                    e4:41:32:d5:a5:d0:6f:6e:d4:0b:25:56:af:0d:1d:
                    fc:ce:ff:be:4d:74:0f:5d:f7:53:54:5d:0f:9f:6d:
                    35:13:84:0c:98:fa:f6:67:82:31:8f:88:90:4f:2f:
                    44:5c:bc:5a:5f:8e:ac:95:8d:f4:37:06:8d:8d:56:
                    e1:7e:cb:44:8f:6b:d3:9f:ef:25:2f:9b:56:c7:57:
                    aa:ff:3a:44:d5:13:7d:91:d8:fe:a6:0f:9f:95:24:
                    6d:41:c4:6d:96:9c:93:5d:62:0b:c7:19:11:c4:7c:
                    60:22:a7:f5:c6:20:10:38:63:7c:c3:8c:b8:98:c6:
                    f6:06:0c:83:93:c0:c3:2f:a0:79:87:99:59:45:43:
                    ff:fe:27:ad:64:d5:eb:7f:c1:eb:1a:fd:be:c1:a3:
                    65:82:e8:68:26:23:7b:03:e3:7d:45:53:cb:a5:d7:
                    b1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7C:34:3F:82:DB:1D:4E:BF:C6:FB:07:C9:56:EA:02:C6:63:BD:CE
            X509v3 Authority Key Identifier:
                keyid:49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:9c:cb:62:ee:40:2c:0b:7d:70:08:ea:89:41:79:ca:ac:b6:
         96:7f:a8:c7:05:cf:9c:33:95:21:d2:78:99:b3:af:c7:a8:14:
         be:c7:d0:ac:93:f0:bd:43:ef:90:06:f9:fa:d5:a0:33:90:c2:
         89:97:ce:b6:af:00:b6:7d:f2:16:f8:98:95:34:11:ad:1c:2e:
         a8:c6:aa:08:c5:5c:6c:44:12:65:bd:f0:6d:7e:92:9b:cb:23:
         70:cc:3c:a4:fc:a3:13:d6:0c:18:9e:3d:81:43:c7:aa:10:ab:
         5f:42:be:b4:67:b5:67:49:f5:3a:b0:7e:37:27:e0:be:5d:8f:
         37:6c:ba:86:3a:01:41:8a:39:34:93:eb:ca:84:41:bc:71:4e:
         34:86:5b:2a:a3:22:4b:75:ba:64:d9:89:8e:19:03:49:35:f3:
         cb:9e:29:bb:96:16:d3:de:ed:b4:de:43:35:09:33:d1:fa:aa:
         77:f8:9d:57:79:3a:ca:84:ad:3e:ed:4d:c2:ed:7e:f2:09:be:
         61:c9:bb:f5:bb:47:5b:48:df:8d:4f:bd:63:9b:0a:90:a4:6b:
         a0:74:f3:f1:7f:ce:81:62:dc:65:b8:f1:98:ef:79:cb:4a:22:
         5d:b1:83:27:7f:99:36:68:5e:82:b3:73:b8:29:8e:00:4e:31:
         19:8c:03:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----