Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
File:                     SzMg4LtdviupcmkbddaPSPblf4g.mft (raw, json)
Hash identifier:          2OVL/0ok/lsikDGL/geV4L5tGWCiBg98HS6GfvRogj8=
Subject key identifier:   2A:71:CA:02:12:82:27:51:A9:C5:3E:9B:56:A7:C9:9F:80:87:B9:98
Authority key identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
Certificate issuer:       /CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Certificate serial:       01962F3D6C1AB1305BFA5FEF29ACA54D039C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
Manifest number:          03DB
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: 9qzW7YnH36W9vXQ1K-UKRmz0zEQ.roa (hash: J4D08zsa0EB7fStK9W20ZzcbFP+tabj/c0DhqsCIFd8=)
                          2: I-kFpoqyTRW457pDaSm8d1efpI4.roa (hash: kl/MemwjhzLvig9zm+2bDw2e8HG1sMcZ5V+KPClYcBg=)
                          3: SzMg4LtdviupcmkbddaPSPblf4g.crl (hash: j3FNnJ+LwhMSAHwnmBtoE0+8bpmKJXKLgdj4pzteuqM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6c:1a:b1:30:5b:fa:5f:ef:29:ac:a5:4d:03:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=2a71ca0212822751a9c53e9b56a7c99f8087b998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f0:f5:a9:f9:09:c6:d1:36:9d:11:5d:b8:f3:
                    23:47:cf:24:1e:32:e8:1d:05:ba:47:af:67:c4:77:
                    15:78:97:d3:fe:dc:2c:01:20:97:3b:9a:9d:86:90:
                    03:b7:6c:1f:7a:a4:fa:d1:92:40:3a:8b:9a:8b:43:
                    37:3a:ef:6f:33:ff:75:40:76:db:a4:8d:2d:d5:bf:
                    95:3c:b2:0b:30:52:aa:5c:43:67:0c:52:6e:97:fb:
                    f7:aa:2b:a5:ee:77:b4:37:27:e1:16:1f:f6:94:06:
                    1d:d0:f3:0d:39:9d:5c:f7:c1:60:6f:74:87:b1:52:
                    4c:31:ec:ff:9e:0f:d5:d1:20:3b:a9:a1:8d:56:f7:
                    ac:f3:12:9f:96:44:3b:ed:15:8a:97:2f:a8:17:d6:
                    d0:30:d1:56:a8:76:34:53:36:bc:a8:13:2a:12:d7:
                    9a:a3:f2:73:60:6e:07:8c:bf:d4:f0:a7:e3:c4:1a:
                    c3:f0:3f:c9:95:d9:91:75:cb:44:bc:75:38:98:80:
                    f3:aa:d4:98:6a:a3:cd:cf:77:75:13:62:bc:5f:07:
                    3c:00:6f:fe:a6:6f:34:e1:d6:ff:73:1c:81:57:43:
                    a4:fe:67:d3:3c:35:07:07:43:4c:95:7c:39:91:6d:
                    84:16:1d:06:3f:12:54:aa:51:0a:49:0f:9d:09:25:
                    ed:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:71:CA:02:12:82:27:51:A9:C5:3E:9B:56:A7:C9:9F:80:87:B9:98
            X509v3 Authority Key Identifier:
                keyid:4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:57:01:df:90:02:0c:9b:b4:8d:f8:1b:2e:46:72:c5:44:13:
         4f:33:81:59:7c:6d:22:10:f2:b5:c5:82:af:95:7c:86:6d:37:
         3d:a1:b5:66:5a:78:a8:aa:eb:a4:59:8a:12:dd:a3:1f:d5:77:
         cc:2f:f9:96:63:0e:93:8a:81:af:bc:99:18:d0:c2:a7:95:0e:
         15:95:9c:2d:30:be:e6:d4:48:aa:b2:a4:6c:c5:7a:49:39:d0:
         80:66:08:81:a2:7f:82:b6:b4:fe:d3:5c:4d:3c:8b:de:12:28:
         74:17:5b:70:c6:fc:cd:88:59:e3:cb:7b:0a:eb:90:4d:5e:02:
         97:fd:53:6d:e5:5e:6d:8b:d4:34:9a:a7:06:fc:9f:50:82:d9:
         e9:2b:bb:61:05:85:78:b8:d5:44:05:24:48:1b:be:f2:29:1b:
         b5:3d:a7:b1:e3:64:b3:3e:87:81:b5:df:d4:b6:3f:8a:51:7d:
         64:00:4e:78:75:b5:86:2b:49:4b:2e:89:bd:7b:a4:55:b5:fe:
         8d:1e:0a:76:b8:2d:df:97:1c:5a:73:6e:76:e3:6f:e5:6f:8f:
         16:62:b6:40:7d:af:48:73:87:b9:50:45:dc:02:ba:32:0c:1f:
         88:e9:36:d4:e8:0d:83:2c:ce:c2:92:03:2d:39:d4:3f:e2:4f:
         43:94:b2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----