Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
File:                     SDletMDuLapTks2Z_EXvvEp1TpA.mft (raw, json)
Hash identifier:          6lWZjgDb+LaSlYGwha0gBZ5wUVipqeegtC5vimFXYsU=
Subject key identifier:   A0:30:21:2B:22:88:A3:84:E0:DE:EC:99:B7:00:7C:38:83:9D:B2:35
Authority key identifier: 48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
Certificate issuer:       /CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Certificate serial:       01962E2B02FE5DD794E7791A2CA679B4F7D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:32 +0000
Files and hashes:         1: SDletMDuLapTks2Z_EXvvEp1TpA.crl (hash: iDIRGcLsrtsXkdofrByM1SFSswZX/4lOV6KI8j/lEaY=)
                          2: TLZicJ-oF3y9XbymZF6MTAhyYvk.roa (hash: 4HeSyTBfKiFSQT/0BeZ4MVQL/epSIUIfB43B7ezWkA0=)
                          3: kB2vNLIHiz3zrtVPA7_yVuKTR5I.roa (hash: 9AzHx/X53rT3duIhqykEiCb52nN9gduGX1KbZI/pxcE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:02:fe:5d:d7:94:e7:79:1a:2c:a6:79:b4:f7:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
        Validity
            Not Before: Apr 13 08:01:32 2025 GMT
            Not After : Apr 14 08:01:32 2025 GMT
        Subject: CN=a030212b2288a384e0deec99b7007c38839db235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b0:34:88:8f:e1:ba:d3:45:5c:19:b2:00:fd:
                    69:5d:f0:e8:ee:34:47:ad:f5:1c:d9:3c:81:df:b8:
                    70:5d:f4:d7:1b:9c:54:5b:6d:cb:f0:7a:30:50:1d:
                    b4:29:de:59:ec:cb:82:41:af:ac:a8:87:3e:92:12:
                    ca:fe:40:6b:e3:ab:86:ca:7d:33:4b:d3:23:a5:d5:
                    3e:99:09:3f:cd:c7:9b:b9:fb:b7:93:1e:7e:8d:2f:
                    e0:ef:a9:3d:11:fb:6e:53:d0:c1:c4:70:bb:ab:a8:
                    49:ff:74:11:ca:f5:dd:e4:41:a7:6e:66:ac:5c:47:
                    1f:2b:5b:94:1d:d4:96:c7:1d:08:5a:73:b9:22:c6:
                    81:8b:43:82:f3:15:f1:10:81:8b:ca:f6:b4:89:1c:
                    69:7b:04:7c:82:76:f4:77:d9:25:24:71:d6:a5:c1:
                    c4:cc:4a:5a:85:35:c5:1b:7a:b2:3f:35:40:dc:da:
                    71:fe:e2:19:0c:40:36:53:b9:d8:25:18:b8:e7:1e:
                    6d:42:7f:f3:b6:92:a5:b0:28:dd:13:6f:6d:f3:e1:
                    bf:71:aa:e3:3e:93:60:f7:aa:66:30:fc:20:3d:a1:
                    46:9e:71:d0:9f:0d:0f:34:35:0b:45:de:f3:85:6f:
                    62:cf:bf:21:c5:5e:66:e9:5c:bf:66:9c:71:42:b7:
                    7a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:30:21:2B:22:88:A3:84:E0:DE:EC:99:B7:00:7C:38:83:9D:B2:35
            X509v3 Authority Key Identifier:
                keyid:48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:aa:15:8e:b4:05:de:a7:32:0e:cd:c3:f4:51:88:ea:5b:2c:
         3a:32:7a:e6:c9:ef:ad:ec:07:a3:27:86:9a:d2:ad:94:e9:b4:
         c9:0e:a7:f6:cc:cb:f6:22:df:70:50:97:e1:4a:54:7b:17:eb:
         11:67:48:e9:2e:0e:51:08:d6:44:f3:25:cb:65:e3:8e:28:c7:
         e7:2a:b3:4d:bd:dc:e6:67:3e:8f:e0:22:f7:7e:58:8d:63:ab:
         92:17:8e:e1:16:4c:cd:4a:2f:d4:f7:ff:9b:51:72:fb:b5:ce:
         5c:4a:0e:c0:50:0e:1b:bc:4f:6c:98:d7:f9:97:6b:90:45:b4:
         30:ea:6e:f1:b2:55:11:72:cb:c0:7a:de:1a:5c:f7:6b:2e:ba:
         73:37:b1:b5:94:c9:09:20:10:89:34:4c:1b:f9:8b:eb:1a:77:
         8a:c5:81:73:90:f0:dd:1e:98:fd:a2:bf:dd:ed:c5:4a:7b:6c:
         21:64:ec:6e:ab:19:63:04:13:4b:75:6a:0f:12:5e:d5:cc:b8:
         ed:2a:b2:4e:60:b1:b4:86:38:6d:d4:64:3f:fb:15:86:e0:54:
         ad:dc:b4:eb:af:5a:e4:26:10:dd:a6:35:98:ad:2b:f4:66:71:
         a5:97:6b:48:4f:2b:91:b7:43:92:6c:95:a7:80:e9:58:6b:2e:
         b4:a0:60:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----