Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
File:                     SVbzCE2TEO-hvAfvMfk0spQfED4.mft (raw, json)
Hash identifier:          uZ7ncSXQdCdaQaV/N/Uy7Od1g8rhl0KaFf2XIyoBjsE=
Subject key identifier:   E3:35:A8:44:44:C3:FE:79:B5:CD:B0:73:82:1E:99:69:6E:3B:5C:BA
Authority key identifier: 49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
Certificate issuer:       /CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Certificate serial:       01962E61A09B5D21EB3ACCA5046D2FC54DC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 09:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:12 +0000
Files and hashes:         1: QocjuYoGfozpr0QiTXkGPfsUrcg.roa (hash: Y8oC4kwoV9mXXZSXGd1lAHQDlPdz5kxQi4KnTi7EYOM=)
                          2: SVbzCE2TEO-hvAfvMfk0spQfED4.crl (hash: 11qxIX2mx4dFHppeUjvjf3mkS/S9qR0LmdflXHH9vi8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a0:9b:5d:21:eb:3a:cc:a5:04:6d:2f:c5:4d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4956f3084d9310efa1bc07ef31f934b2941f103e
        Validity
            Not Before: Apr 13 09:01:12 2025 GMT
            Not After : Apr 14 09:01:12 2025 GMT
        Subject: CN=e335a84444c3fe79b5cdb073821e99696e3b5cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:96:ea:f2:28:c5:cb:36:58:21:26:e7:1c:16:
                    70:13:b0:be:51:93:84:28:23:42:9f:d7:1f:85:39:
                    e8:a8:51:08:d3:a7:dc:ba:c8:f8:cf:ac:28:14:8f:
                    c6:c9:a9:e6:30:69:54:9b:46:77:43:af:45:b6:ac:
                    80:fd:2e:39:ba:49:32:73:29:be:80:d1:e3:c6:6f:
                    e3:a3:03:ce:38:15:5e:e5:5e:9e:96:2d:96:93:f2:
                    02:24:1a:82:2a:47:f0:26:a3:bb:ea:b3:dc:3a:8b:
                    d4:f6:13:d0:de:b0:34:97:22:85:d2:16:58:87:9a:
                    7c:8f:f2:9d:56:b4:48:40:1a:11:b7:df:92:19:a9:
                    52:34:50:78:1b:61:4e:9c:1f:8c:bc:ed:01:8e:80:
                    32:02:cb:e5:8c:52:54:84:f8:e8:01:ee:eb:94:39:
                    f1:28:2e:41:62:13:77:d8:20:92:a6:b3:96:44:a4:
                    cf:5f:f9:a5:61:d3:65:97:3e:a6:6d:c6:49:ef:b0:
                    e8:f8:b7:9a:af:50:c2:13:91:33:7d:66:bd:f4:04:
                    e4:75:3b:b4:a8:93:2e:d5:09:8f:ee:70:35:e2:33:
                    0f:cd:18:a2:b4:29:de:e3:92:6d:06:e1:76:a9:38:
                    38:e6:55:1f:9e:8b:c6:15:1b:96:e7:2a:65:5d:85:
                    a8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:35:A8:44:44:C3:FE:79:B5:CD:B0:73:82:1E:99:69:6E:3B:5C:BA
            X509v3 Authority Key Identifier:
                keyid:49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:89:a3:50:8e:d4:8e:a8:19:23:98:2a:47:b9:5b:56:5d:e2:
         6c:23:87:a3:7e:f6:08:d4:70:5a:ed:57:09:3c:4f:c1:8d:6f:
         53:08:b0:b9:50:4c:60:f8:35:75:76:f6:e0:80:40:1b:3c:ef:
         ca:01:d0:b4:ee:08:c4:1a:93:2d:72:df:df:eb:36:4f:74:1b:
         73:ab:75:44:97:4f:4b:ff:63:b2:89:47:06:31:ef:75:08:7a:
         3b:f5:47:20:67:4d:15:ba:f5:a2:45:a0:df:e3:45:8d:1b:cb:
         5c:1d:bc:58:c0:3f:fc:81:12:b1:05:78:34:7d:ed:c5:50:cf:
         3d:8e:0f:85:3b:c0:1a:d4:5e:74:10:72:03:f2:8c:bb:47:6f:
         32:4d:b3:0f:60:12:d6:d2:a0:c8:b8:e9:58:b3:8d:90:f5:67:
         94:a5:d3:08:d6:62:bd:df:96:b8:a6:0c:43:f2:46:bc:4f:f2:
         dc:f1:e6:af:22:51:57:3d:a7:2b:be:93:ab:52:f7:fe:a3:2b:
         e1:02:4a:52:c4:bf:80:67:4e:e5:be:b9:ee:02:af:f7:15:58:
         b9:38:a2:1a:27:ad:29:84:29:c3:b3:f8:27:7f:f7:f2:b0:f9:
         d2:1e:68:fb:d3:9f:a8:e7:12:c0:92:69:b8:07:f1:a0:5d:71:
         0f:02:7e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----