Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File:                     saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier:          Woye66+kkds8r+vgd6uQxzodiYQaR7PV6InrDcPV/q8=
Subject key identifier:   30:FB:6B:1D:B4:47:22:C9:A7:4B:77:FD:19:07:08:7C:10:D6:55:DA
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer:       /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial:       01962ECFAB7BCDC50E50668AD277A5F631DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number:          14F7
Signing time:             Sun 13 Apr 2025 11:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:23 +0000
Files and hashes:         1: 9PRjxeCqIjFBKjj9ZCsSUjWebm8.roa (hash: RUbumQikWEUJw86fkVBXkNxglUvMLn5BU1sBdU5SK10=)
                          2: Bjn95uhuPOZfmvC5Hlwb47V9emA.roa (hash: eI7zCms4yUIVsMumVhbxjLkGPCR2Oes6ouNTkj3JCYQ=)
                          3: fMf7eyqEUG6wDxNfLym83Kyd4aQ.roa (hash: 1Tc3rrxlFqoaEb/zNF3iOU0XDowc7uiSsGwcEKpC398=)
                          4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: EWBFUtB3fiwUJqH4BswEYJY44MS71zGZYzQFULc+rlA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ab:7b:cd:c5:0e:50:66:8a:d2:77:a5:f6:31:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
        Validity
            Not Before: Apr 13 11:01:23 2025 GMT
            Not After : Apr 14 11:01:23 2025 GMT
        Subject: CN=30fb6b1db44722c9a74b77fd1907087c10d655da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1a:40:54:dc:57:e4:55:27:6a:97:9a:1a:85:
                    fe:88:9a:eb:ac:2a:62:c4:13:b8:1d:c4:b7:3d:fe:
                    9e:d4:43:a7:8b:cf:10:76:b1:a6:7b:b1:8b:31:c5:
                    6e:48:28:49:b7:b3:57:3c:ae:c6:4f:ef:38:b2:f4:
                    25:f9:e4:72:35:74:57:15:28:d0:54:ce:6b:08:22:
                    2c:e6:ce:2b:ba:80:b4:99:38:93:29:28:9a:7f:ce:
                    b2:d5:03:d6:42:85:91:c3:4b:65:27:a2:9d:27:a4:
                    1c:04:62:9e:2e:7a:0f:e6:ff:91:4d:28:f7:e3:b0:
                    41:7f:03:91:33:4b:8c:18:cd:81:db:7e:b1:30:bb:
                    80:9e:70:98:bf:45:9c:af:ce:61:cf:61:d1:b0:82:
                    7b:43:cf:7c:1b:11:f9:87:da:69:2a:9a:b8:51:3d:
                    37:35:bf:54:a3:0f:51:fc:f5:dc:51:07:77:20:da:
                    74:3e:47:b2:fd:78:10:7e:52:73:8d:65:f9:82:bb:
                    38:68:a4:d0:14:17:f3:97:9e:fc:05:ac:53:80:7b:
                    29:1e:45:b8:4a:7a:fa:53:22:66:12:cc:76:f1:89:
                    77:db:d3:15:7d:fa:f6:1c:7f:d1:83:eb:b9:b6:f7:
                    c2:dc:ac:29:22:38:72:53:4e:b5:a3:8b:df:3a:f2:
                    90:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FB:6B:1D:B4:47:22:C9:A7:4B:77:FD:19:07:08:7C:10:D6:55:DA
            X509v3 Authority Key Identifier:
                keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:49:2e:07:26:48:2b:0f:53:e3:68:2d:84:38:a2:2d:87:a0:
         b3:e4:cd:17:e5:d3:e7:12:bd:1f:49:d6:a4:13:92:82:63:64:
         ca:57:af:56:b7:3b:59:7e:91:cc:a3:4a:ba:af:b6:21:64:64:
         58:0d:57:0a:c3:58:bc:35:b7:55:7d:23:d6:6c:fe:8b:16:83:
         55:0e:b1:70:d9:64:84:98:95:d8:ec:78:87:4b:e7:67:25:a0:
         8f:77:bf:c0:5d:0a:1d:d0:ca:7c:0f:c9:18:fe:71:a5:f3:c2:
         a4:0a:aa:f1:d6:e2:d3:ae:ab:b5:9a:af:a3:89:10:14:b2:cf:
         97:e8:94:5a:b7:4c:fa:ec:3e:de:8a:73:f6:06:64:e6:eb:be:
         db:d2:bd:08:91:e3:2b:81:0d:51:a8:63:47:bb:cf:80:ef:38:
         96:4b:cd:3a:86:07:18:25:f1:8f:a8:c3:ad:62:e0:7b:3d:60:
         bc:b2:f1:71:09:8e:04:93:f3:ec:c0:4a:64:06:65:d1:44:ff:
         c6:c2:68:45:29:7f:51:e2:6a:af:b5:00:4b:35:98:ed:90:37:
         af:c9:74:b8:cf:33:b5:d3:73:d8:3f:1b:4b:b5:d0:f4:5c:fe:
         57:e0:10:1d:27:b7:70:ab:b3:96:54:52:0c:21:c5:0c:07:50:
         b8:ae:db:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----