Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
File:                     SMOd4l_6fq8CsqbYws9uLOtWK_M.mft (raw, json)
Hash identifier:          1djJ+ZViTPH3X3clKXEH0w/nr1H+BCOG0I+l8x0XSVc=
Subject key identifier:   91:F3:99:3C:CA:12:D7:49:C6:9F:B2:BE:73:CB:71:AC:67:5D:26:B3
Authority key identifier: 48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3
Certificate issuer:       /CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
Certificate serial:       01962DF45A5ADA742DFB13B770845F3FC5BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
Manifest number:          1146
Signing time:             Sun 13 Apr 2025 07:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:50 +0000
Files and hashes:         1: JtwVZJ2q-er-ZyfG4We1Ih9BT0U.roa (hash: xnd0jnisgvFr2C1BnV+wtzkH+5RWNTZh9FBZUZ5Hu3E=)
                          2: SMOd4l_6fq8CsqbYws9uLOtWK_M.crl (hash: c7TsyQJshXUoSFFrfZKuJ9qSE2lqcPjAT5Qi3Y8s/ko=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:5a:5a:da:74:2d:fb:13:b7:70:84:5f:3f:c5:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
        Validity
            Not Before: Apr 13 07:01:50 2025 GMT
            Not After : Apr 14 07:01:50 2025 GMT
        Subject: CN=91f3993cca12d749c69fb2be73cb71ac675d26b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:28:a2:a0:9e:80:a9:8a:2f:79:0f:e3:28:16:
                    d8:45:87:88:77:d1:e5:e1:d8:9b:68:6e:d7:dd:a9:
                    fe:98:43:e6:33:0f:de:6b:c6:4b:1c:f7:f1:4e:98:
                    3e:df:a4:ce:f2:d7:d7:93:68:1d:8f:a0:33:93:93:
                    76:45:e5:5a:32:09:58:61:e1:75:79:d6:e9:5f:9d:
                    1c:4f:27:f1:99:ee:41:09:87:13:a7:48:14:19:05:
                    a8:1f:18:bc:e7:65:83:c0:21:67:95:96:ff:6a:23:
                    7c:bf:bd:c5:ef:13:30:d6:0f:cf:55:34:b0:fb:8f:
                    56:dc:bc:d0:a0:75:d0:18:96:45:ec:5b:19:62:94:
                    86:3e:36:81:e7:d2:0c:c1:7f:0d:ac:b1:64:59:58:
                    be:00:f6:dc:79:4f:8c:bd:3d:8e:ee:19:9d:c9:23:
                    2e:af:f1:a7:9e:80:6d:b9:6b:a8:af:8c:d7:31:36:
                    a9:e8:e7:a3:cc:f3:6d:76:d3:55:56:c9:7f:31:01:
                    db:05:36:c9:66:29:0f:2b:16:95:5e:bc:1f:57:59:
                    38:7b:37:f6:3a:1b:67:27:50:c7:32:ae:23:be:23:
                    be:9b:73:8b:25:f7:96:2f:d4:05:6a:7c:69:3e:a9:
                    c6:84:33:94:a7:4f:9f:90:a2:f8:ce:2d:c2:59:b9:
                    8a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F3:99:3C:CA:12:D7:49:C6:9F:B2:BE:73:CB:71:AC:67:5D:26:B3
            X509v3 Authority Key Identifier:
                keyid:48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:29:f7:17:de:c4:59:b8:21:cd:e2:7f:5c:10:ac:0c:81:e0:
         22:26:82:be:e3:68:19:43:f1:9b:52:18:17:55:79:0d:75:96:
         ac:d4:6a:56:8f:39:68:82:36:90:50:06:2d:83:e7:5d:0c:c1:
         bb:c2:2e:3e:52:6c:46:2c:71:38:63:76:ff:ad:72:62:9e:bb:
         cf:2a:c8:b7:87:2d:02:de:21:80:0b:71:fd:f8:6d:96:be:ff:
         3a:ee:60:74:9f:08:81:3b:4a:ff:58:e8:65:b1:15:4a:63:e7:
         04:ed:22:10:62:40:20:94:22:fe:ab:de:a9:52:3b:d0:ed:79:
         88:83:4f:90:f4:eb:da:fd:bc:32:3f:ff:2c:32:a9:bb:38:d6:
         dc:d9:4e:fd:4a:b2:21:b6:99:ca:7b:4a:cd:c6:74:40:fb:28:
         3f:64:1a:d7:2e:67:4b:af:fb:97:db:28:cc:e3:4a:f8:67:1a:
         eb:d5:f5:71:7d:a2:8a:07:7d:50:81:6b:43:2f:77:80:9e:20:
         bc:a8:e3:20:a4:31:0b:9b:59:48:74:0a:48:28:57:a7:63:8e:
         65:d2:63:c6:ab:89:92:41:63:68:b6:80:a4:75:8c:b2:8d:3e:
         94:77:84:e2:d7:b5:b2:f2:73:7f:c6:2d:0d:4b:c5:e7:13:4c:
         95:1e:70:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----