Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
File:                     SIxl3DWbWMprpdPa64dPBYaE6MY.mft (raw, json)
Hash identifier:          9uX/v0uVq466b0TouDI0RuW2TsdPeMSxvJQmghYoJIE=
Subject key identifier:   8A:97:C4:C8:E8:27:60:D1:AD:A5:46:DF:84:BB:FC:2E:8B:89:50:78
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Certificate issuer:       /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial:       01962FAB4DA6BEA0437F486EF252A5F8A0F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
Manifest number:          0A45
Signing time:             Sun 13 Apr 2025 15:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:17 +0000
Files and hashes:         1: FZ5EZpDq-K0XA4SjrzGHyd153to.roa (hash: b4KiX1j/3r//4ngjLPvb5RfQAtdM3BaY0Jf4yPv0wJk=)
                          2: NVd8LXx_N2OnP7Dz0qYfp0BrwyE.roa (hash: KXS5t23U3JN9IkH4G9USA7r6qnruCVWmREWySxRe2Ns=)
                          3: SIxl3DWbWMprpdPa64dPBYaE6MY.crl (hash: dxLp3IJ9PpSAegJJyjd1VyAJ/bn3MMfyB0f98kxA91o=)
                          4: cSVJv9Y-FnxxLG20frdAri_noBk.roa (hash: 34paWKddNtWaw0Vl7xzlk/3/M190Z6IXyvbGbAK4Tj8=)
                          5: u7FYseYTvFuik1kkZdQXan5NUT4.roa (hash: OILWNi9mv9AwF8S+yDdOr81iUCDmwjfaxbEGwvX0caY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4d:a6:be:a0:43:7f:48:6e:f2:52:a5:f8:a0:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
        Validity
            Not Before: Apr 13 15:01:17 2025 GMT
            Not After : Apr 14 15:01:17 2025 GMT
        Subject: CN=8a97c4c8e82760d1ada546df84bbfc2e8b895078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b2:db:ef:7f:fa:f1:98:b1:af:c1:8a:ff:53:
                    6b:84:96:d8:d0:a3:84:70:c0:39:4b:af:17:b5:02:
                    9f:81:91:63:d0:88:81:3e:c5:03:2a:9a:25:8b:be:
                    9d:73:52:db:bf:b4:f9:09:d2:56:90:18:fa:4e:d7:
                    f1:10:ce:0d:aa:a3:58:8b:7b:9d:64:eb:a6:7c:ab:
                    b0:08:73:be:38:44:33:45:07:06:a9:c0:92:5b:67:
                    56:c9:c8:96:e3:76:d0:07:cf:f8:03:73:23:7d:ac:
                    02:c4:a4:73:63:87:9c:e8:a1:a4:a4:3c:36:2c:15:
                    46:5d:5a:2f:4e:36:a3:d0:ab:f6:ea:e6:65:39:88:
                    b3:45:2c:37:9b:5a:7a:82:a5:d4:d5:32:09:09:f7:
                    6c:b2:88:0b:b5:0a:8c:37:76:3d:7b:dd:3d:3a:55:
                    d0:31:39:cd:5f:ed:fe:4d:9f:f3:cb:9a:52:ff:d2:
                    55:cc:f3:f4:0a:f2:53:6a:0d:3a:55:40:f0:5f:ba:
                    96:f1:fd:f4:99:35:c2:87:0d:ee:ef:7a:fb:c5:4e:
                    af:66:a6:43:66:52:45:b2:6d:f4:03:8c:27:ad:c9:
                    61:e1:1e:27:01:31:f5:73:5f:b8:2a:c6:53:24:44:
                    b4:29:43:05:fb:22:59:e2:30:3c:cf:94:19:94:a0:
                    8e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:97:C4:C8:E8:27:60:D1:AD:A5:46:DF:84:BB:FC:2E:8B:89:50:78
            X509v3 Authority Key Identifier:
                keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:8b:bd:7e:49:ad:1b:df:66:cf:c9:ee:41:c0:b7:02:e3:1f:
         86:24:0b:a1:6a:8b:c4:25:37:3e:9b:09:ee:a0:e9:12:e9:40:
         91:89:c7:97:f4:fb:5f:ce:ca:cd:cc:db:47:5b:bd:64:90:a4:
         83:63:69:74:1d:03:63:0a:8a:6a:66:b2:5f:90:27:0a:82:fe:
         03:a9:d2:7a:49:a2:22:49:19:41:f9:78:a5:a3:34:83:73:91:
         0b:f6:a6:24:ba:a1:f2:56:7e:ea:6c:50:ba:4f:1b:ee:9f:17:
         7d:47:66:41:57:ea:01:90:4e:08:bc:73:8c:61:d3:97:bb:76:
         78:16:65:18:1d:cf:38:c7:79:01:1a:e7:3a:a1:8e:ba:7c:a9:
         ba:c8:8d:f6:ce:9d:25:63:4e:de:45:e5:99:3f:22:8c:4a:9f:
         e8:cc:69:be:47:09:5b:c5:8d:35:d4:94:b4:4e:6d:b2:74:ae:
         33:a1:e0:32:25:c9:62:3c:9d:3b:c9:73:af:e4:2c:7f:4c:5d:
         32:8e:e1:c1:28:4f:6f:86:4d:14:b1:76:ff:99:17:1b:49:c7:
         8d:a2:9a:45:52:42:b6:19:72:20:d5:cc:a1:85:d5:51:58:f6:
         00:53:3f:84:42:15:ee:bd:20:64:a9:88:89:24:b9:f8:31:c9:
         76:68:45:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----