Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
File:                     smbm5NXff4olZUFEdV172ZLnNTk.mft (raw, json)
Hash identifier:          oJF9BdQ3JXyfMLXO+c/t1xiIJnN4vyB7Z7FuO38s7dg=
Subject key identifier:   9B:5F:B8:D6:FF:F9:6A:DB:AD:4A:AF:A9:BC:81:D9:A2:5C:DC:A5:27
Authority key identifier: B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39
Certificate issuer:       /CN=b266e6e4d5df7f8a25654144755d7bd992e73539
Certificate serial:       01962E61E51206D15388CD769467733711AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
Manifest number:          07F3
Signing time:             Sun 13 Apr 2025 09:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:29 +0000
Files and hashes:         1: 4UxBywVcvcMsb-HDJGoMszIr0uA.roa (hash: CPNjg2b32CAKEDe5pmcVPP+MsVRB7Gy+EYi43k44UBQ=)
                          2: smbm5NXff4olZUFEdV172ZLnNTk.crl (hash: mxw1AcpwfcsmSbrqkNLnTVHcxi4j2NCCrw4hbvDcMk0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e5:12:06:d1:53:88:cd:76:94:67:73:37:11:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b266e6e4d5df7f8a25654144755d7bd992e73539
        Validity
            Not Before: Apr 13 09:01:29 2025 GMT
            Not After : Apr 14 09:01:29 2025 GMT
        Subject: CN=9b5fb8d6fff96adbad4aafa9bc81d9a25cdca527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e2:74:3e:41:00:68:b5:f5:16:d0:1a:65:e2:
                    b0:20:62:68:8a:ea:fd:e8:72:a9:6d:73:49:99:25:
                    4c:1b:ff:ec:d9:b9:76:4f:eb:b2:6f:4d:69:8b:dd:
                    7d:98:6c:a3:6a:8f:03:1c:f8:a3:bc:a2:83:33:1d:
                    53:f1:e5:72:95:a9:ea:2b:17:d9:e6:fd:c7:d9:8d:
                    38:a9:06:cf:c6:7c:be:74:26:13:b5:15:a8:08:92:
                    d9:be:7b:2c:93:e3:c2:83:80:fa:f4:fc:48:cb:94:
                    f5:6b:ad:ce:00:4c:98:2e:eb:9d:58:d9:d4:a7:bb:
                    95:78:1c:52:60:7b:f3:67:92:49:57:3f:eb:75:f8:
                    dd:c3:ab:da:fa:99:1c:58:56:92:9d:ad:0c:19:f5:
                    40:22:f7:cf:ed:e5:2f:2f:6f:b2:cf:f6:0e:21:eb:
                    e7:e6:9f:c5:fa:34:d3:7d:e5:a7:fa:5d:d0:c8:fb:
                    00:33:5f:1c:1f:02:15:9b:73:bd:d0:1a:18:ab:4f:
                    8c:80:9c:d4:d7:12:05:86:e4:cb:2f:15:8f:01:e8:
                    90:0a:54:55:00:ca:23:30:aa:e1:4e:06:f2:ef:1b:
                    33:b6:bf:57:78:8e:b1:3a:26:93:c5:4c:25:64:f1:
                    b0:32:ff:f3:7d:56:e3:d1:18:42:44:7c:25:20:5c:
                    e9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5F:B8:D6:FF:F9:6A:DB:AD:4A:AF:A9:BC:81:D9:A2:5C:DC:A5:27
            X509v3 Authority Key Identifier:
                keyid:B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:90:7a:aa:58:e8:ad:59:6c:84:c9:18:1c:ce:3d:64:d3:28:
         77:46:26:e0:30:b5:ed:91:f6:74:6b:a1:82:7e:0a:22:54:f7:
         b3:27:dd:87:18:b0:29:68:2d:6d:96:ce:9c:1f:dd:ce:28:cc:
         f1:d6:0d:55:60:11:9f:45:60:69:ed:c1:ce:42:dd:87:53:22:
         87:55:15:c2:3e:9b:29:4b:e3:9f:7b:c8:be:1b:d8:40:79:a0:
         43:4d:5b:38:57:15:49:d0:91:5a:b1:8e:fa:d4:02:a6:7c:cf:
         dc:4c:bf:a4:41:a6:80:85:e1:be:57:c3:33:88:25:4c:b1:07:
         5d:31:01:91:d5:5b:ec:38:6b:ac:53:f8:fd:bf:d4:d0:af:b0:
         50:6d:af:62:f5:51:d6:9e:7e:8a:d0:c8:d5:8b:f6:6e:a1:f6:
         54:f0:c2:6b:aa:49:e3:08:57:e8:0c:48:41:29:5d:b4:61:d7:
         e8:66:2c:62:49:0d:68:73:90:77:ed:55:2e:c9:9c:91:e9:c0:
         a5:f4:3b:25:a8:5b:4e:60:64:5e:b2:50:a2:48:e4:3e:8d:91:
         5b:fb:76:e9:49:93:8a:4e:3e:72:a8:ce:75:ef:79:c7:54:f7:
         a2:db:7a:b9:59:55:64:c4:4c:13:ff:57:e6:0e:66:61:18:ca:
         14:f8:1b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----