Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
File:                     SdhmPTuWngJTom1UJb7hxdRDs2E.mft (raw, json)
Hash identifier:          JnydMQw/ebvmQGBwD9NKs4YdqSYlP4FBnWqk+Sp3akw=
Subject key identifier:   23:B6:2F:6B:15:5D:BF:3D:64:5C:06:90:3E:DE:17:33:FD:79:7D:2A
Authority key identifier: 49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61
Certificate issuer:       /CN=49d8663d3b969e0253a26d5425bee1c5d443b361
Certificate serial:       01962E61D7CDAE14307C5988CC18310E71B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
Manifest number:          0648
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: 1-Sq9N9tDpqPpCxfnJu3FOlWH6ZA.roa (hash: Tpyvvdu3VZJ5oo8JL4qWFUonGAY9eL3r/UHvnFRq5cY=)
                          2: SdhmPTuWngJTom1UJb7hxdRDs2E.crl (hash: 1QHtfSz/+EdUTEsHqBJrXJB8e02zcs1eMfiJP3M2sYA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d7:cd:ae:14:30:7c:59:88:cc:18:31:0e:71:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d8663d3b969e0253a26d5425bee1c5d443b361
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=23b62f6b155dbf3d645c06903ede1733fd797d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bb:83:7d:34:c7:1d:71:8e:7a:96:23:68:ae:
                    77:ed:e2:2f:b4:23:ea:a1:8b:86:11:c1:84:3b:29:
                    18:4e:5a:84:36:b4:9e:0c:d9:21:5f:7f:1b:e4:f1:
                    bd:6c:5e:be:59:8f:95:b7:1d:0d:f6:81:a5:63:8e:
                    8d:b8:55:b2:2a:8f:1f:2f:1d:a2:79:19:fc:40:18:
                    72:1d:e7:a5:69:a6:f5:17:95:10:8b:66:2b:15:57:
                    b2:52:ad:9e:4d:87:8f:7d:b8:b8:f3:f4:d8:8f:1b:
                    e1:c8:19:86:cd:cf:e1:84:9c:0d:ee:f4:35:a9:f2:
                    80:42:1a:3b:68:c6:99:8a:0b:44:98:d1:b1:6c:6d:
                    84:85:a9:fd:51:88:85:bf:c0:86:4d:ef:17:6e:02:
                    7a:84:e4:e8:32:86:41:70:c4:99:7d:af:56:00:f5:
                    fa:1e:c7:7c:07:0a:5a:b9:ef:90:12:a7:75:e4:d0:
                    d1:25:a2:ab:11:da:14:9e:2f:41:4b:4b:00:09:98:
                    df:61:55:10:76:1a:c9:f7:25:c4:26:c5:b2:3c:a3:
                    e3:b3:7d:cd:be:19:ca:9f:df:fb:a6:8d:b4:21:d8:
                    d6:53:08:f3:2d:7f:ad:54:a5:9d:f3:ea:d4:bf:57:
                    9d:f0:4e:85:3c:85:23:ed:f8:20:0f:c4:da:bc:b3:
                    94:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B6:2F:6B:15:5D:BF:3D:64:5C:06:90:3E:DE:17:33:FD:79:7D:2A
            X509v3 Authority Key Identifier:
                keyid:49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:37:83:d1:76:de:17:e8:71:7b:85:87:7c:b7:8a:88:a5:b4:
         30:08:2d:fb:a0:c9:3c:c0:d2:10:78:da:06:35:c4:3e:90:6b:
         1e:06:07:91:43:59:77:4b:5f:cb:4c:78:ea:c3:8d:db:81:6c:
         26:61:df:0c:88:3c:14:f4:ca:cb:c4:21:9b:e3:30:c3:16:71:
         cf:39:99:ef:59:d3:24:ed:ac:c6:ca:ed:6f:57:81:f3:7e:36:
         e1:2b:8b:0b:2b:de:12:1a:9b:97:60:8b:c0:6f:a4:29:55:42:
         49:93:38:1d:e0:66:16:2a:73:7b:43:b6:0b:0e:54:90:0d:1e:
         46:49:3e:e4:35:29:ea:15:e2:d5:0b:7f:a1:c2:73:1c:df:5a:
         fb:7c:9f:94:99:bb:9d:8e:eb:40:2b:21:bc:91:1a:74:c1:f8:
         24:05:ad:27:2b:05:4a:34:9c:8c:0a:1c:0c:ce:32:4c:e8:57:
         ca:fa:81:db:c4:19:38:a6:f6:03:6f:d7:d9:14:98:09:54:7c:
         21:a7:4d:f3:ec:9d:72:34:fc:31:e1:ba:d2:bf:52:c9:69:a7:
         c7:8f:85:9e:24:7d:f9:80:a4:7b:be:62:77:3c:03:cf:e0:da:
         78:9e:68:77:b5:3d:49:94:b5:9c:c7:cc:78:35:73:3d:16:1c:
         39:2e:a7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----