Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
File:                     SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft (raw, json)
Hash identifier:          Gqcpn0TmuKo177Po4E4nJlEXm+sJaXUA6P+V9u1nXh4=
Subject key identifier:   B5:6D:DA:05:6A:65:89:1D:6F:12:4F:98:08:36:29:B9:B7:0E:7E:0A
Authority key identifier: 48:55:90:18:AD:FF:16:EA:DF:55:51:B2:CB:74:D8:F6:86:0C:D0:44
Certificate issuer:       /CN=48559018adff16eadf5551b2cb74d8f6860cd044
Certificate serial:       01962E2AC42B6D342D36ECE2C60CEF560B93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
Manifest number:          0916
Signing time:             Sun 13 Apr 2025 08:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:16 +0000
Files and hashes:         1: B5U5hiuj472vo3lxpeeTGMOW5Ps.roa (hash: 5BiNFG9KLdrNVXjd/lTiLpF2pyPe+QUD5bM50jqM//w=)
                          2: DlNfl6KgR_MUNI_dJxw9ErXDeIE.roa (hash: eSCVIU9rH872alqy7/aU0fAeLMAeeiberdc7Lc5APRo=)
                          3: SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl (hash: 0EkMbDl8yY2UZIOErZZwfJy4w1dmp999w7Z8HBCxP4M=)
                          4: SM7IhaAEsmGDuZlqZRpqw-w85LY.roa (hash: /+5Lzb4i3irljEq7HlV5I6aQL6bwOiyhOurXz6ixdIM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c4:2b:6d:34:2d:36:ec:e2:c6:0c:ef:56:0b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48559018adff16eadf5551b2cb74d8f6860cd044
        Validity
            Not Before: Apr 13 08:01:16 2025 GMT
            Not After : Apr 14 08:01:16 2025 GMT
        Subject: CN=b56dda056a65891d6f124f98083629b9b70e7e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:02:98:c9:c9:c0:16:99:41:dd:02:c5:07:ad:
                    d5:52:63:80:43:52:4f:a5:c0:eb:b2:a5:8e:7a:eb:
                    f1:a0:1b:2f:62:8d:62:e5:cc:83:4f:70:08:92:d6:
                    26:a3:e2:9a:2a:99:54:44:bd:b9:99:33:71:a5:9e:
                    56:7b:b9:68:48:23:2d:70:3e:27:85:53:6e:3e:d8:
                    1a:56:a6:6b:6c:e1:6b:b1:51:2a:03:2e:1a:d6:a4:
                    5f:9b:a4:41:3f:f3:dc:d8:57:df:14:bd:91:05:99:
                    4a:8c:ce:fd:97:d7:50:84:b9:13:24:f0:b6:91:16:
                    9b:99:b8:88:d0:69:7d:78:41:a4:32:f8:bf:9b:5a:
                    62:bd:4e:c9:08:38:b4:35:78:cf:ca:b8:a7:55:46:
                    ce:f0:5a:b2:42:ad:8f:cb:0f:cb:f2:46:1b:92:60:
                    2a:d2:8e:60:17:bf:b4:5a:d7:f0:9e:03:c2:05:92:
                    61:2d:dc:49:f9:42:dc:71:c3:51:12:18:c4:0c:05:
                    dd:01:09:92:4b:29:e3:20:67:d5:7d:b7:0e:1a:3a:
                    b2:1c:d6:b2:70:ae:58:99:e5:9e:44:0d:f0:5a:33:
                    4f:f2:d7:84:7a:19:fd:33:f7:86:e1:1e:84:a2:af:
                    ec:52:be:ee:07:59:d7:7b:c7:ac:11:af:76:38:ec:
                    ba:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6D:DA:05:6A:65:89:1D:6F:12:4F:98:08:36:29:B9:B7:0E:7E:0A
            X509v3 Authority Key Identifier:
                keyid:48:55:90:18:AD:FF:16:EA:DF:55:51:B2:CB:74:D8:F6:86:0C:D0:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:32:28:9f:e6:20:5d:25:12:77:8e:d5:fa:4b:c9:c4:04:66:
         61:71:72:34:ba:d4:fb:72:78:58:81:5b:55:3c:e1:65:e0:5f:
         fb:95:b5:c3:3c:d2:10:6e:8b:ff:e1:6e:31:b3:6a:d4:1a:e0:
         f8:1a:49:c0:49:bd:46:5c:64:89:14:f6:a5:ed:37:6e:19:e2:
         0d:95:6c:92:60:c1:15:18:21:71:9b:d1:84:e8:89:f3:6f:74:
         87:1e:44:51:39:7e:10:4d:23:10:2e:08:d5:07:a9:9f:3a:00:
         b0:8d:4a:8e:67:d1:a0:b7:16:9c:5d:c1:66:83:da:27:c8:b1:
         62:59:81:1f:77:95:b8:fd:35:3c:eb:72:ec:9b:5b:49:0d:ed:
         51:63:bd:96:38:0a:89:aa:b4:8f:f5:fa:dc:9b:1b:50:8f:2c:
         40:34:e7:83:8b:2c:24:a8:17:18:5e:a8:55:31:f4:20:8a:44:
         68:cd:e9:f7:98:ee:c6:cc:91:69:fd:0a:cc:b4:aa:f5:17:d5:
         eb:ff:43:b4:e2:5e:e9:37:13:e1:60:16:29:00:14:be:c8:2d:
         e8:f1:95:d9:1d:a3:93:22:49:98:b3:64:e4:23:a0:ca:ca:72:
         e5:c1:e7:de:24:8a:80:a0:89:01:eb:ad:39:97:cd:99:51:6d:
         6e:7d:eb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----