Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
File:                     SglzwfRD7EqDh6rXrKddB7b6qdo.mft (raw, json)
Hash identifier:          gtNW34LeSFeTrQnUp9N3kNmXWXkxMlTnQCGFkILZGIo=
Subject key identifier:   9A:F9:9F:B9:0F:D5:F8:AA:32:76:8D:77:25:D4:B2:18:14:02:C3:18
Authority key identifier: 4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
Certificate issuer:       /CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Certificate serial:       01962F3D8724485A38D1205765D14CF657C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:23 +0000
Files and hashes:         1: EbOu1qDq7ZlN0le3FwRJ22JwUEc.roa (hash: 9DLeiprUkEPr3xfx5ncHn6G4kT050WW6ahOVAnuzCHg=)
                          2: SglzwfRD7EqDh6rXrKddB7b6qdo.crl (hash: TxVVwz2SgawgKxWrSUUh+Bw8jm0cOkV7gdaa6Y6hUxw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:87:24:48:5a:38:d1:20:57:65:d1:4c:f6:57:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
        Validity
            Not Before: Apr 13 13:01:23 2025 GMT
            Not After : Apr 14 13:01:23 2025 GMT
        Subject: CN=9af99fb90fd5f8aa32768d7725d4b2181402c318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:66:65:59:c1:ce:91:be:9e:a5:6d:93:d1:db:
                    6c:98:d4:b1:66:59:74:e8:30:32:48:7c:e9:e0:56:
                    aa:81:dc:5d:a0:fe:f8:48:c4:b1:00:86:41:81:bc:
                    34:34:58:f2:68:47:29:38:04:02:bc:80:fb:f9:cf:
                    11:78:2f:bf:24:f3:a3:39:ec:ed:5b:ca:4c:52:5f:
                    09:9f:98:01:6c:48:1c:1b:71:6d:ec:14:25:94:7e:
                    62:31:e9:92:84:ff:c5:7a:31:b5:52:b6:b8:52:1f:
                    b7:e6:58:28:96:70:53:49:4d:e9:3f:3b:72:7a:18:
                    45:a4:ed:00:cf:7d:1e:cc:6f:d4:b4:3a:7d:1c:40:
                    21:bc:08:40:a2:3a:06:02:49:3d:33:a9:06:32:c6:
                    b1:b3:b8:93:17:73:69:04:0c:20:d0:71:21:f2:f8:
                    ce:94:17:97:bd:e4:35:aa:04:f5:64:17:3b:87:37:
                    d3:65:bb:de:6b:02:7b:46:f5:a9:29:0c:99:1c:90:
                    cf:a9:74:41:7d:6a:d6:ca:aa:06:f8:d9:f3:61:42:
                    e5:29:a3:57:71:9d:24:4a:cc:91:ba:da:c2:c2:5f:
                    c3:90:69:06:c6:df:b0:70:39:a7:64:ee:f5:1a:7d:
                    5e:0c:08:f8:e6:c0:14:0c:f5:b0:bb:73:13:3e:79:
                    17:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F9:9F:B9:0F:D5:F8:AA:32:76:8D:77:25:D4:B2:18:14:02:C3:18
            X509v3 Authority Key Identifier:
                keyid:4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:63:12:33:bd:98:f1:a0:2d:b9:8d:ff:4b:a4:09:c5:b0:4e:
         33:e8:3a:1f:68:21:89:53:a6:43:04:4b:b2:33:fc:e9:a3:b7:
         a7:65:a2:71:1d:3d:b0:3e:c6:63:99:31:8d:3a:1a:b0:b9:2b:
         54:2b:17:fe:18:9f:9a:51:dd:fb:a1:c8:5b:7d:fb:46:f6:2c:
         72:a6:39:fb:5d:45:67:07:c9:fa:b3:d8:4b:d1:64:14:bd:9b:
         8b:2b:ca:89:5d:22:ca:ec:96:0f:d9:c5:40:03:82:67:7f:e8:
         24:c0:64:1b:f9:9a:9d:1b:93:0c:93:e8:6e:d1:0d:2b:cc:70:
         40:ec:43:1e:1f:71:f0:15:fe:84:d3:81:1e:c6:a3:ca:76:ec:
         f7:48:ef:25:26:2a:37:ff:b9:e8:5f:ed:51:36:b9:e0:6c:15:
         be:a4:7d:a6:45:b7:47:84:55:10:7b:0a:5f:b4:3b:a1:4b:42:
         5c:5e:d4:75:f4:e4:c6:c5:cb:aa:fb:67:4e:38:ff:e8:86:02:
         56:4d:db:de:ed:cc:f3:3d:11:45:7b:18:bd:2e:a1:6f:55:d4:
         00:5e:a5:bb:90:0c:75:17:dc:39:f2:f4:77:d6:0a:55:54:fa:
         24:2f:2c:40:4c:56:e6:8e:77:c2:b8:d0:4c:1a:f9:f4:7d:48:
         58:51:ab:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----