Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
File:                     SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft (raw, json)
Hash identifier:          0hflmxCJg80/OOmvDJLH7ch563QLKjNb1CQAigO6dXU=
Subject key identifier:   80:35:76:D4:50:78:68:6C:17:27:DE:D7:C9:F3:10:8E:CC:E4:EB:72
Authority key identifier: 4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C
Certificate issuer:       /CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
Certificate serial:       01962F06D3A9906779B6D84AAE90DCCF2FE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
Manifest number:          09AD
Signing time:             Sun 13 Apr 2025 12:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:38 +0000
Files and hashes:         1: SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl (hash: BjssISTeWse1YEgcqJZdeGY9SavEajfvxNDnOCHQh/U=)
                          2: XWgrA6JE6hMs-fYR5JSr732MBIw.roa (hash: +T0dpzBRYum3dH9uf73tvrJYycbYVgdyC2zBV2vtA1Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d3:a9:90:67:79:b6:d8:4a:ae:90:dc:cf:2f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
        Validity
            Not Before: Apr 13 12:01:38 2025 GMT
            Not After : Apr 14 12:01:38 2025 GMT
        Subject: CN=803576d45078686c1727ded7c9f3108ecce4eb72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:19:5f:01:89:15:5d:e6:4c:ce:6b:a5:28:fe:
                    a2:2e:69:e6:04:43:ec:2c:80:6b:32:5b:3c:09:1b:
                    95:7a:04:8d:1e:34:2b:af:f6:66:38:37:4b:2f:9e:
                    44:88:89:a9:25:a8:ad:6e:59:fc:51:6d:21:b6:e0:
                    03:07:3c:76:b5:3d:79:dd:42:06:60:6c:02:7d:37:
                    84:9e:88:04:c3:f0:eb:f6:1a:ca:d3:f2:a2:4a:d9:
                    0c:27:cc:c4:9f:98:70:c9:93:7a:e7:22:6d:dc:a5:
                    4f:e1:eb:1e:33:f5:dd:f2:6d:bb:13:c3:7b:f9:65:
                    15:8c:ae:8e:ca:07:9f:11:e0:4d:b8:5b:cd:b9:bb:
                    9d:14:d6:d7:aa:52:e6:01:48:44:ba:ce:f8:a6:9b:
                    71:71:9c:20:30:2f:9f:77:4f:be:ad:80:40:76:52:
                    c8:8e:b5:02:1b:0e:66:67:20:79:91:ce:a0:72:06:
                    6e:1a:e8:ce:4f:78:3f:21:a8:19:57:25:e1:70:4b:
                    3f:05:27:24:21:c4:25:54:84:73:d0:17:42:d4:75:
                    f9:6b:45:41:dd:ff:f2:1b:20:79:9b:1b:9f:cb:70:
                    9b:a5:09:84:bc:1e:ad:a3:ef:a2:a9:5a:08:64:1b:
                    1d:be:ea:44:a0:b6:a1:c2:7b:51:fd:f2:ae:df:37:
                    43:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:35:76:D4:50:78:68:6C:17:27:DE:D7:C9:F3:10:8E:CC:E4:EB:72
            X509v3 Authority Key Identifier:
                keyid:4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:67:1f:8b:d6:5e:98:c8:5a:f9:54:ef:68:92:82:46:d7:2a:
         d1:e1:ad:bb:07:af:f9:e5:b6:cf:84:74:9b:7e:4e:78:75:d0:
         0f:33:d7:53:c7:55:fe:30:a3:50:30:41:56:14:ec:c9:9a:01:
         6e:9c:93:7e:cb:cf:8a:ef:a2:14:2a:38:1a:9d:73:e5:e2:10:
         fb:d9:75:22:db:32:c3:3b:6b:e5:83:48:79:e2:87:30:26:03:
         9b:19:34:2a:d2:53:4c:a5:da:67:7c:6e:e6:7f:87:e0:c0:71:
         83:49:43:9a:5b:c0:30:eb:73:5a:5a:8e:bd:d7:20:68:35:45:
         22:b2:d9:4e:ea:24:51:86:bd:f2:ba:7c:e1:35:db:6c:96:c8:
         5e:61:73:6a:0e:d9:b0:43:f4:94:26:6b:2a:65:ff:2a:6b:72:
         6a:6d:81:16:89:d2:2e:d1:35:56:fb:db:eb:91:ae:7c:cd:7a:
         f9:a0:ee:f2:2f:90:ba:ac:41:d1:d8:81:56:03:0d:4a:e6:f2:
         df:05:fb:ba:50:79:b7:6c:c9:28:39:3f:2a:1e:fb:3c:24:6d:
         bf:97:ef:e6:ec:02:07:53:7b:35:ca:69:9d:7f:6d:dd:2f:fe:
         de:f5:d1:44:46:ee:0e:d6:a6:6a:b1:f3:8f:e1:9f:0b:61:1d:
         7a:87:da:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----