Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
File:                     SZ9dK32_UkSbASU7D4J_QBqKfIE.mft (raw, json)
Hash identifier:          ew2tLfNOLIWmcjo45U74HvyvwNP25HN4hXBAwZILe5c=
Subject key identifier:   E1:A1:B5:08:50:CA:22:26:5E:5A:6B:07:AF:04:7E:CA:15:04:4E:E6
Authority key identifier: 49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
Certificate issuer:       /CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Certificate serial:       01962E9934E3AF9BE3A32F50D2B134FDE5FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
Manifest number:          0828
Signing time:             Sun 13 Apr 2025 10:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:54 +0000
Files and hashes:         1: SZ9dK32_UkSbASU7D4J_QBqKfIE.crl (hash: bP4H/6dWrAJthyf0uPoyjZP3H0l3P5jcWfaF42/CIp0=)
                          2: sTQX2j9_L-RKxKJ-gpSAUcHW26c.roa (hash: SMZ74eYXgCBYRpcaMVOmXChoRcbWwRauRrg3+g+Vya0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:34:e3:af:9b:e3:a3:2f:50:d2:b1:34:fd:e5:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
        Validity
            Not Before: Apr 13 10:01:54 2025 GMT
            Not After : Apr 14 10:01:54 2025 GMT
        Subject: CN=e1a1b50850ca22265e5a6b07af047eca15044ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ed:3e:2c:56:1c:46:29:a1:83:60:fa:53:14:
                    1a:50:14:58:af:31:3a:24:5e:5e:d4:af:47:c0:02:
                    ba:d5:34:63:25:17:0d:85:69:03:47:48:ec:7c:f2:
                    f7:38:9a:b4:ba:ba:ae:47:d2:70:b2:c0:56:c6:8a:
                    b0:c8:9b:9e:3c:9d:c2:d4:9b:83:90:29:70:cf:2b:
                    59:ab:5c:f0:9e:f7:2a:a6:7a:1b:0f:90:6c:e4:f7:
                    cb:38:87:39:43:34:d0:63:6c:76:4f:3a:0f:08:5f:
                    c0:8a:e6:5f:79:06:9f:1f:6d:06:b5:db:9f:b9:6a:
                    bf:73:88:ee:90:82:fd:e4:0e:7c:8d:87:77:42:81:
                    4d:f3:3f:1c:15:96:3b:e1:39:9a:20:29:ca:0d:ec:
                    03:69:d6:e5:6a:ee:40:ae:6d:17:09:32:b7:6c:8a:
                    50:e7:b0:4d:9d:39:4e:8d:d4:c1:48:8a:08:89:22:
                    a8:08:9b:4a:24:db:83:c0:a0:8a:9c:6c:73:8c:90:
                    0d:e7:bc:5e:07:fc:e9:67:21:3c:d8:4d:7c:58:9f:
                    21:5d:2d:92:34:44:81:b6:4e:03:4b:51:84:7b:c2:
                    10:f1:a3:92:e2:da:17:f5:6b:30:d8:c3:15:b8:34:
                    14:f5:5d:c6:67:a1:8e:7c:0c:27:27:e4:cb:ca:a7:
                    78:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A1:B5:08:50:CA:22:26:5E:5A:6B:07:AF:04:7E:CA:15:04:4E:E6
            X509v3 Authority Key Identifier:
                keyid:49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:97:e2:d0:08:2f:f0:a2:5e:f7:22:f5:e2:46:96:95:4c:8f:
         e3:95:cc:d1:fb:72:1a:80:57:c5:17:e7:cc:5b:22:aa:88:7f:
         4c:4f:3f:f9:4b:59:6c:08:1f:13:e1:20:6d:77:78:cf:07:1d:
         09:81:a9:05:af:da:3b:5f:89:66:2c:61:9d:6d:60:ec:a4:3b:
         02:7b:75:74:17:b6:49:e0:cb:f4:95:9e:36:bc:20:41:ac:0a:
         92:2f:e4:85:ce:51:86:5f:d1:49:5e:c7:d4:7d:1f:b4:95:68:
         d3:14:7b:28:f4:7a:eb:0b:d1:19:8e:0f:5d:dc:08:8d:42:54:
         70:cb:c1:04:2a:cc:ff:93:19:96:4f:d8:a3:ff:35:03:23:0e:
         c2:e3:1f:f4:12:96:df:a6:5a:2f:46:fd:ed:b0:fc:ee:2f:a3:
         34:bf:a5:8f:45:b5:49:b4:4c:05:fa:fc:aa:bf:4e:ed:4c:f1:
         a1:50:93:ba:2a:6f:d7:a0:46:a0:37:db:df:3f:2e:47:b3:6b:
         4f:0b:c5:94:8e:2c:06:39:08:fc:3a:48:a4:0a:a3:c8:57:ac:
         8b:b4:8e:46:8f:1c:8a:37:bd:91:69:06:dc:a5:f0:03:a3:9f:
         78:1e:9b:3d:75:b9:19:12:46:bf:80:ea:78:ba:f3:3b:b5:1b:
         c8:82:00:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----