Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
File:                     STeGYPXwGSOUbDXZS-XM19K3EFE.mft (raw, json)
Hash identifier:          zly3g09jDkeKGqBjlsI3O3AZwiTqIV9pvclpoUo32vQ=
Subject key identifier:   65:9D:F7:84:F6:94:CE:BC:ED:E5:CB:37:B8:F3:F4:25:CE:77:F1:C9
Authority key identifier: 49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
Certificate issuer:       /CN=49378660f5f01923946c35d94be5ccd7d2b71051
Certificate serial:       01962E2B24F324C39D0C2F41A38E61D23ACC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
Manifest number:          0A77
Signing time:             Sun 13 Apr 2025 08:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:41 +0000
Files and hashes:         1: 2ZvpZ0sZ6P6ydTiCDEFolKMvfh0.roa (hash: 1DssY9QtTEut1NYlrrYk3dvjYOvc/xqpRvFLT8I4S4E=)
                          2: STeGYPXwGSOUbDXZS-XM19K3EFE.crl (hash: cJBaMSUsxau0PX4Lcw8bpcS3qP1lM8CPugddyLGINXg=)
                          3: xHpXDv6E_1YUNoDN2LC9vwG7R2M.roa (hash: iKgnd8chs/jWQOV3iRdSagUM//dORmkxw4iMfLfQ7Gg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:24:f3:24:c3:9d:0c:2f:41:a3:8e:61:d2:3a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49378660f5f01923946c35d94be5ccd7d2b71051
        Validity
            Not Before: Apr 13 08:01:41 2025 GMT
            Not After : Apr 14 08:01:41 2025 GMT
        Subject: CN=659df784f694cebcede5cb37b8f3f425ce77f1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:32:45:30:a2:61:f8:ed:80:87:c7:0c:72:e4:
                    a9:de:58:36:82:5d:b1:1e:4b:58:33:7f:02:29:59:
                    9d:64:56:f9:a1:c4:a1:0b:e1:c0:56:8b:b5:c8:af:
                    99:19:a1:8e:94:ff:c4:5a:97:2c:0a:7e:37:ee:d1:
                    72:56:e7:e6:50:27:c1:dd:bf:77:4f:c8:9f:8e:5a:
                    ec:5f:2f:85:ee:35:5a:28:f3:a0:65:c5:c7:9d:15:
                    98:2f:d4:8d:be:e2:9c:46:08:8a:f5:a7:33:8b:a5:
                    d2:e0:34:de:ff:95:38:74:8e:a2:97:e7:c7:c7:7e:
                    67:a9:26:c2:62:c9:56:06:51:11:21:93:3a:60:ee:
                    f2:39:54:d5:7b:62:02:46:08:7b:64:e2:24:29:2f:
                    b9:e7:8c:de:ae:2a:c6:d9:49:ef:0c:50:76:9f:3b:
                    e1:97:84:7d:ca:62:15:98:24:64:a5:6c:26:6a:a5:
                    56:a3:69:44:1b:a0:04:b4:9d:fd:e4:7d:35:79:f5:
                    4a:90:17:86:56:9d:8a:85:71:44:f0:32:cc:d0:e5:
                    3c:82:9c:fb:03:0d:c4:9a:4e:92:a4:be:a9:70:26:
                    97:16:f4:35:70:70:dc:f9:e2:12:78:9b:58:bf:99:
                    5b:b0:a5:49:7e:5f:ec:42:e5:aa:f3:92:87:fd:fd:
                    77:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9D:F7:84:F6:94:CE:BC:ED:E5:CB:37:B8:F3:F4:25:CE:77:F1:C9
            X509v3 Authority Key Identifier:
                keyid:49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:8a:9a:b5:c3:21:8d:03:8d:53:fd:a6:20:b8:78:eb:c3:fa:
         63:f5:00:f0:85:34:7e:8d:4d:0a:4f:a5:0e:0a:af:75:bd:d2:
         06:2f:2e:f6:5a:df:81:01:04:5c:11:90:40:58:9b:00:55:b8:
         af:cc:35:32:04:cc:50:19:1d:cc:f3:c4:c0:80:14:4f:b1:e5:
         1c:ec:11:92:0f:f9:e0:d0:a3:51:b7:81:f2:bf:d0:47:43:c4:
         42:6c:89:8e:8d:b9:fd:82:93:72:22:d0:38:e6:a2:af:90:3a:
         43:75:89:58:84:23:db:6f:c5:81:ce:83:17:95:09:c9:7b:8b:
         76:e2:b9:80:9e:3c:b7:a1:f1:0c:66:cb:37:ab:4e:a7:eb:cb:
         a6:f1:d1:e5:43:59:60:56:61:9b:16:ae:d5:ab:36:4d:2d:ad:
         95:9e:0b:23:27:51:53:46:0e:64:6d:44:34:a4:e0:ea:99:b9:
         26:2a:6c:86:0b:b1:3c:db:32:2c:bc:3c:ab:14:98:27:f9:9f:
         40:69:b7:ff:66:bc:61:fc:b6:1b:e4:d1:28:2d:d7:9a:fe:07:
         6b:d4:75:2b:b6:98:14:ab:37:76:9d:c9:61:c0:6b:98:14:9b:
         9a:ab:87:f8:19:a8:71:dc:bb:2e:b9:23:23:b2:f4:40:98:6b:
         4a:1b:b6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----