Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
File:                     SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft (raw, json)
Hash identifier:          0pdS6XvMHCHRhRjLKatz5noYL9je1vIF5xhdBm1EeP4=
Subject key identifier:   D2:6D:60:55:CB:D0:CD:F5:11:55:9F:07:3D:0A:00:52:E6:BC:CC:4D
Authority key identifier: 48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD
Certificate issuer:       /CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
Certificate serial:       01962F74625879FCC903B64D2B7D9771F055
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:18 +0000
Files and hashes:         1: 0wd8USbWCypDvxsrm2rdEEzeU_Q.roa (hash: 4BLoMU8VT88SvJWyIY1jDuGzUxaGaHRq5WqqLmwX80o=)
                          2: SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl (hash: Wl8EcJv7KtZX/XyqkKchtJGcBNDpGulUrEiDU8niCL4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:62:58:79:fc:c9:03:b6:4d:2b:7d:97:71:f0:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
        Validity
            Not Before: Apr 13 14:01:18 2025 GMT
            Not After : Apr 14 14:01:18 2025 GMT
        Subject: CN=d26d6055cbd0cdf511559f073d0a0052e6bccc4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1a:23:07:1a:20:e1:3b:06:20:12:37:ad:f7:
                    1d:c1:95:f2:9c:52:bb:5f:a7:d5:67:02:d8:47:84:
                    4d:5a:00:0c:2d:b9:bf:a4:36:5f:fe:82:bd:0d:6f:
                    78:7a:4f:e6:52:98:c3:e2:1a:1c:5c:b3:b7:b6:17:
                    21:74:bb:f2:bd:f4:f1:7c:3a:bf:39:46:a0:9c:9d:
                    58:be:44:31:40:44:af:5f:15:89:a6:35:cf:03:68:
                    ba:18:9f:56:3c:3e:10:5c:23:29:f3:01:2f:1f:40:
                    2a:bf:09:01:09:4a:6a:c7:be:f0:f7:6f:23:23:2f:
                    d0:fb:58:b7:ed:96:39:b8:66:22:e7:bf:0b:4e:b4:
                    50:dd:10:b7:6e:4d:b8:38:8d:18:1e:bd:cd:bd:a5:
                    6a:1d:39:c4:6a:cb:79:b9:73:55:33:e3:55:be:f0:
                    8f:b1:c4:b3:ee:ac:7c:06:9f:36:dc:ca:b4:27:80:
                    75:05:0d:a4:9a:2f:3f:8c:d0:2e:2b:6f:a5:a5:d0:
                    c6:7f:8e:46:83:21:a3:81:28:0f:91:2b:51:26:58:
                    c0:26:e1:ce:2a:20:ce:00:d3:27:da:12:6c:59:ea:
                    d8:17:12:51:81:04:e0:19:f3:f4:6d:19:37:4c:ad:
                    1d:31:99:c2:bc:0b:fc:54:0f:1d:3c:f6:7d:78:ad:
                    6a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6D:60:55:CB:D0:CD:F5:11:55:9F:07:3D:0A:00:52:E6:BC:CC:4D
            X509v3 Authority Key Identifier:
                keyid:48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:67:a3:f1:70:54:da:98:0c:cf:98:55:34:ab:5b:33:1f:6b:
         3c:d0:92:89:a5:6c:ad:b4:66:70:b3:33:25:47:02:1e:a1:e5:
         4f:79:ec:5e:7a:19:7d:47:54:36:22:13:ce:67:88:f7:21:2a:
         52:c9:c4:3f:72:57:03:c5:e1:54:56:3c:98:1f:04:cb:41:e7:
         b9:00:95:60:fb:2e:00:f6:cb:2c:13:76:f9:cb:a4:e6:af:dc:
         e9:98:96:ed:ee:ce:af:6b:8a:52:d3:e4:af:b6:2b:6e:d1:bc:
         48:36:85:d3:e4:45:21:6d:b4:77:d7:0f:03:9b:af:7a:55:70:
         ce:22:4e:d0:eb:e8:c8:f5:38:1d:30:75:fd:93:ba:65:06:5e:
         50:a5:a2:a3:35:c0:43:af:eb:3b:b3:3e:71:54:1b:ed:51:fc:
         d3:c9:c5:8f:37:c1:17:47:f5:72:e8:2f:d6:3d:61:a5:a5:a5:
         fd:3c:0e:d6:93:d9:2e:ee:68:5f:84:f1:39:ec:23:cb:08:46:
         12:72:91:83:89:39:a3:ee:54:ed:b1:90:d5:e1:07:1a:e3:95:
         72:18:3e:52:32:71:e5:63:73:2d:14:40:0f:56:df:ed:13:4e:
         3c:21:c2:ac:3a:e5:a0:15:3e:ab:88:2f:97:98:04:13:a7:d0:
         fc:19:8a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----