Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft
File:                     SMdByd9bLkiZO5GDt5_zRrQxk4E.mft (raw, json)
Hash identifier:          kGPU8rxmxwI/LnmfX0OBqHsCeFedWRuhNtiAD/mrKc0=
Subject key identifier:   4D:97:EB:3D:13:DC:82:E5:0D:4A:02:F2:76:54:CC:A7:1E:AC:37:E2
Authority key identifier: 48:C7:41:C9:DF:5B:2E:48:99:3B:91:83:B7:9F:F3:46:B4:31:93:81
Certificate issuer:       /CN=48c741c9df5b2e48993b9183b79ff346b4319381
Certificate serial:       01962F06BF9C385E9DD4619CF59DC94B2C30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:33 +0000
Files and hashes:         1: SMdByd9bLkiZO5GDt5_zRrQxk4E.crl (hash: qdiDCQVNE7T2I3m8wlL3jXp0RubzD8qoJ2Vssr7EHMs=)
                          2: joaFEW-NdPhZyszfRS8lbScgqm0.roa (hash: 0utj+sPXgGZYWSm41u/aEZLOVRC1lSd5e6cU8LiAr60=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bf:9c:38:5e:9d:d4:61:9c:f5:9d:c9:4b:2c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c741c9df5b2e48993b9183b79ff346b4319381
        Validity
            Not Before: Apr 13 12:01:33 2025 GMT
            Not After : Apr 14 12:01:33 2025 GMT
        Subject: CN=4d97eb3d13dc82e50d4a02f27654cca71eac37e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f3:1d:a6:13:61:28:bd:dc:00:79:27:66:bd:
                    8d:ff:6a:a8:96:78:d7:0f:e3:a9:03:58:90:98:50:
                    0f:14:bb:c3:c0:46:60:cf:5e:c0:38:68:07:b4:2f:
                    f1:91:a1:26:11:42:79:ee:bd:77:b9:74:9c:a7:03:
                    32:fb:18:ed:7c:f7:df:b0:97:24:4f:c4:30:09:50:
                    68:c1:45:59:08:61:f9:9f:4c:fd:57:d5:81:a2:d4:
                    f2:8c:c8:e3:17:f0:96:c5:86:6b:88:51:49:75:e4:
                    d2:79:77:82:58:73:8a:c8:44:50:aa:39:6a:3e:b4:
                    87:56:3c:67:99:c3:bd:85:e0:e3:e3:8c:34:7a:5c:
                    4a:3b:cd:9d:e8:5c:d8:41:72:7b:16:fe:d7:de:1b:
                    2f:0a:67:2c:de:30:eb:91:1b:07:9a:86:dd:b7:84:
                    42:81:3f:e0:db:1e:32:0b:50:e7:6a:f4:78:9e:dc:
                    b8:02:ad:7c:cd:7c:9f:fd:cc:20:c3:97:1d:e9:aa:
                    9a:80:41:c1:a2:91:54:f0:c6:d0:1c:82:00:a6:17:
                    44:fc:92:e8:ee:a8:10:76:e0:5b:6f:be:23:3f:bd:
                    9a:ea:ba:a3:8e:60:70:3d:81:64:7c:b5:29:0d:07:
                    58:1a:b7:cb:90:89:58:57:59:a7:08:98:36:46:e1:
                    01:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:97:EB:3D:13:DC:82:E5:0D:4A:02:F2:76:54:CC:A7:1E:AC:37:E2
            X509v3 Authority Key Identifier:
                keyid:48:C7:41:C9:DF:5B:2E:48:99:3B:91:83:B7:9F:F3:46:B4:31:93:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a0:c4:67:83:c3:9a:6b:e5:cd:5a:84:65:55:66:e4:c7:5b:
         50:b6:a5:33:21:e8:a9:60:c6:d8:18:96:64:36:05:51:c6:37:
         2c:86:e1:95:65:c2:56:8a:b6:ef:a3:2a:4c:b1:3e:16:23:ee:
         2b:2e:64:f9:ae:ac:73:2b:64:48:dc:58:2e:50:c9:bc:c9:5f:
         6a:df:f7:3d:c8:28:c6:ee:10:de:7c:4d:80:34:2c:b3:5e:3c:
         96:f3:0b:7a:0a:52:4c:b4:b8:8c:2e:32:5d:a0:f8:77:c2:d9:
         2e:ba:b6:86:3a:8f:12:7c:e0:cb:f4:cf:e1:ec:1a:b3:5c:ef:
         12:61:de:64:d2:60:d5:16:7c:e7:b2:94:b4:50:6d:c0:0b:4b:
         36:fb:59:1d:77:a5:25:d3:e9:38:12:88:59:10:aa:40:4a:66:
         9b:ca:4e:1a:92:fa:12:d1:51:0b:48:5b:f9:2e:f8:0e:3d:50:
         73:68:a4:a6:0c:02:3b:cf:34:41:2e:75:ec:13:35:7b:3e:e5:
         a5:85:83:19:e0:a8:5e:49:32:80:62:3f:38:7c:a1:89:d5:7d:
         2d:19:e3:94:55:85:d1:8b:b9:20:2e:0c:a9:57:e6:2f:72:0d:
         81:c2:ce:31:37:d8:be:a1:8b:4f:f9:f0:29:9c:f9:c8:7b:38:
         96:b1:a1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----