Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft
File:                     SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft (raw, json)
Hash identifier:          E6qgA4YbRmPHM+s0rRBgqSh16XnTLbYOsZe5KRxx7f4=
Subject key identifier:   C9:CA:E6:67:77:5F:CB:84:E9:27:D5:CD:7C:18:D2:14:1E:B7:BF:96
Authority key identifier: 48:FE:C1:AF:2F:32:1B:1D:1B:82:87:A1:FD:05:51:3C:E6:6E:4C:FD
Certificate issuer:       /CN=48fec1af2f321b1d1b8287a1fd05513ce66e4cfd
Certificate serial:       01962DF3FCB58A3ED47DDA7448FC9ED40742
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SP7Bry8yGx0bgoeh_QVRPOZuTP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft
Manifest number:          142B
Signing time:             Sun 13 Apr 2025 07:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:26 +0000
Files and hashes:         1: 5ZSiu_Jf4uuM2tr9eexam4PdUnQ.roa (hash: 4s92BezBLCr6XDiFpPfCSDr/ke7pRUF4VnT2G98F0hQ=)
                          2: SP7Bry8yGx0bgoeh_QVRPOZuTP0.crl (hash: mkXXLzYU+wtWsqeMuMIco295q92KdVR3NuXV7zFWMB0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fc:b5:8a:3e:d4:7d:da:74:48:fc:9e:d4:07:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48fec1af2f321b1d1b8287a1fd05513ce66e4cfd
        Validity
            Not Before: Apr 13 07:01:26 2025 GMT
            Not After : Apr 14 07:01:26 2025 GMT
        Subject: CN=c9cae667775fcb84e927d5cd7c18d2141eb7bf96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:22:b8:03:53:ff:39:46:bc:40:3b:9d:91:75:
                    ef:ab:0e:cc:62:8f:be:f9:11:6e:4c:47:55:f7:09:
                    92:80:a6:7d:89:32:17:30:8e:c7:f5:2f:a2:d5:48:
                    ed:fc:5b:e3:7d:98:5e:8c:7b:ea:df:bf:eb:5a:8c:
                    b0:c0:bf:9d:f8:7b:d1:a1:5f:ad:0a:82:69:11:97:
                    42:87:09:93:13:1e:c4:a7:b6:c2:2f:7a:38:71:a6:
                    33:a9:2c:12:d4:d5:a9:95:a8:ba:7e:ca:88:a6:41:
                    cf:35:fd:a8:dc:ad:85:cb:bb:b2:dc:00:86:65:38:
                    da:d3:3c:53:8f:82:02:21:e4:88:d7:cd:79:66:b2:
                    4c:4b:28:88:e2:ce:67:33:27:81:37:43:e8:ae:b6:
                    18:37:d0:09:b3:d5:0e:5c:41:b7:db:8d:d5:3b:3d:
                    c6:25:21:47:83:3f:d9:7f:8a:14:c0:37:c2:b4:d2:
                    a0:4d:cc:a7:43:f7:a0:a7:13:f0:d0:9c:2b:ae:48:
                    0a:ba:e0:b8:53:1f:71:d4:c6:95:56:73:1c:e2:3b:
                    ab:8a:ab:a8:b9:1c:72:1b:7c:40:47:57:34:b6:bc:
                    4d:2b:45:4a:0f:19:25:66:5a:7e:12:34:c6:bb:46:
                    c5:45:cc:18:21:85:4c:ee:2a:39:05:e1:95:30:fb:
                    b9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CA:E6:67:77:5F:CB:84:E9:27:D5:CD:7C:18:D2:14:1E:B7:BF:96
            X509v3 Authority Key Identifier:
                keyid:48:FE:C1:AF:2F:32:1B:1D:1B:82:87:A1:FD:05:51:3C:E6:6E:4C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP7Bry8yGx0bgoeh_QVRPOZuTP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c9035d-e57b-43f3-93d1-c27d1a85569b/1/SP7Bry8yGx0bgoeh_QVRPOZuTP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f0:7f:5b:2d:98:52:33:49:dc:44:f8:3f:b6:5a:58:80:9b:
         53:c7:3a:ca:c2:9c:2f:ce:89:85:4a:8b:f1:0c:c7:44:59:75:
         6f:aa:93:62:8b:c9:10:fa:67:c7:1f:3e:05:69:c9:42:e6:21:
         26:1f:30:2d:7e:2f:8e:90:47:03:cf:f2:23:06:4a:d1:51:72:
         c1:c4:f6:cf:6d:cb:b8:b1:bd:ba:27:5d:a3:6d:70:6b:89:ec:
         27:bd:67:06:41:81:ca:1c:8a:5a:c6:6a:39:9b:ba:6e:48:a8:
         4c:cd:5f:1d:c3:a0:9d:da:d4:9e:79:4f:c5:0d:07:0e:a4:72:
         09:79:3c:7b:70:ee:97:5e:d0:5d:e1:96:74:36:33:aa:3f:6c:
         e0:de:c4:2b:78:17:63:c7:64:2a:88:ec:15:2a:2e:40:a9:50:
         7a:c3:ea:e6:d7:94:8a:22:d8:6d:27:a0:3d:7b:86:30:f8:66:
         95:71:3a:4d:63:a2:ce:1e:2f:dd:ed:32:eb:21:f6:18:c5:4a:
         57:e0:5a:80:7c:36:0a:1a:8e:63:4f:dd:85:13:80:fd:bb:e4:
         32:79:c1:a0:6c:51:03:0b:0f:a0:07:f2:40:e7:22:b6:0a:78:
         5a:d2:98:31:85:63:04:9d:f6:2c:f8:b9:86:53:42:90:c9:ff:
         e1:0f:7a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----