Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft
File:                     SSqOSCqB2QxFxNkKxmij8iRcDW0.mft (raw, json)
Hash identifier:          COKntJKbE/Q1+glh3lQap0QjS1HzjpKnxqVlEjdFefM=
Subject key identifier:   6A:A9:60:B7:98:25:A6:A3:A4:39:3B:2E:9F:40:A4:11:CC:82:71:65
Authority key identifier: 49:2A:8E:48:2A:81:D9:0C:45:C4:D9:0A:C6:68:A3:F2:24:5C:0D:6D
Certificate issuer:       /CN=492a8e482a81d90c45c4d90ac668a3f2245c0d6d
Certificate serial:       01962F0644FBCF113BEA1665E246542C9612
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 12:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:02 +0000
Files and hashes:         1: QKjCAOKQJMjqOOmayga7OQ2UBwc.roa (hash: jA/gBvlqnMxkZ4Kz1oiT52kTp3obybgFm8vN9PxrrXM=)
                          2: SSqOSCqB2QxFxNkKxmij8iRcDW0.crl (hash: wiuWR53D0gWND8RCeT7m5Luvrxe2sTc47R9FrY9D3f0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:44:fb:cf:11:3b:ea:16:65:e2:46:54:2c:96:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=492a8e482a81d90c45c4d90ac668a3f2245c0d6d
        Validity
            Not Before: Apr 13 12:01:02 2025 GMT
            Not After : Apr 14 12:01:02 2025 GMT
        Subject: CN=6aa960b79825a6a3a4393b2e9f40a411cc827165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f2:23:61:4a:e7:63:9d:be:5c:cf:31:7c:a4:
                    e8:64:15:11:41:c8:93:e8:a5:bb:88:d8:b4:76:9e:
                    94:9e:67:11:65:8d:08:af:29:0f:41:04:9f:48:cb:
                    8a:f6:89:21:b0:e9:69:8a:7a:02:0d:6b:9e:e4:f0:
                    b9:90:d7:a9:df:55:3f:23:d5:c6:27:3c:1e:a1:f7:
                    57:f4:7d:83:68:f4:3e:85:d4:c9:cb:ba:14:5d:e4:
                    07:a7:0a:84:3a:0a:3d:dc:9e:42:8d:af:40:e1:eb:
                    9d:51:1b:64:9a:48:2e:02:50:4c:89:e8:a1:58:e2:
                    30:5c:08:ba:37:a8:ac:b5:97:a3:19:12:3f:74:c4:
                    08:87:ee:dd:74:ac:1e:0f:bd:e8:09:84:11:44:62:
                    d6:dd:c4:99:87:d2:6a:77:f0:51:7f:af:34:25:3a:
                    30:60:bc:fc:49:e1:e7:b2:04:9c:8f:14:60:45:d3:
                    53:46:f5:0b:13:e5:38:b3:f8:79:5c:33:b0:28:48:
                    03:2d:c0:f6:61:40:19:f8:10:3b:c8:9c:8f:8e:cf:
                    62:a9:6b:05:63:e7:91:b6:66:8f:9e:09:39:7e:b9:
                    bf:91:4c:fa:c4:21:1d:1e:b1:ae:67:7b:49:25:81:
                    ef:28:4d:e9:fd:cb:9c:a5:03:70:dc:29:be:87:4d:
                    51:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A9:60:B7:98:25:A6:A3:A4:39:3B:2E:9F:40:A4:11:CC:82:71:65
            X509v3 Authority Key Identifier:
                keyid:49:2A:8E:48:2A:81:D9:0C:45:C4:D9:0A:C6:68:A3:F2:24:5C:0D:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:35:5a:66:10:2a:97:16:ce:d0:94:1a:12:e1:7b:6c:88:cd:
         7f:f1:f4:c3:eb:5a:87:88:2d:be:f5:82:a1:63:74:2e:35:05:
         cd:b5:21:65:81:bf:12:e7:c9:69:be:5c:64:b8:8c:ca:6a:a5:
         dc:ae:cb:6b:2e:1a:86:59:3a:a4:1d:64:16:fd:e6:95:ff:13:
         74:8e:c6:b4:6f:77:48:da:ad:88:e4:72:d2:ea:8a:ad:db:46:
         b2:2c:fb:8a:3b:f1:9a:93:c7:23:66:c2:66:01:ab:0a:8c:c5:
         c9:15:5e:d8:e3:57:61:2c:5e:3b:03:e0:47:d0:5d:a4:42:34:
         2c:31:ae:fa:90:dc:ce:b2:b9:2c:40:33:6a:2b:48:44:a1:ff:
         b7:18:4c:e4:01:82:80:2a:e0:4e:33:d5:03:7f:f3:05:ba:91:
         8a:ab:b8:55:09:46:08:e7:e8:4c:3a:3e:bd:56:14:d6:14:9c:
         74:55:9e:d3:6f:3a:52:c7:52:9f:3e:3c:fd:f2:3e:f2:eb:9d:
         cd:5a:e3:84:9d:61:18:43:ad:d4:4e:a8:1e:cd:2c:a5:a7:a3:
         6c:f1:4b:03:04:69:02:a0:99:96:2f:bc:63:45:22:c8:de:54:
         4b:ab:75:a0:84:40:c8:53:ba:d3:0d:d3:e1:98:38:91:8a:6a:
         5e:d4:0b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----