Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft
File:                     SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft (raw, json)
Hash identifier:          qgfzXEX5xtQ0fxBlaiWKEABYY1hKNedd5PwDhQp/pz4=
Subject key identifier:   C0:1E:3F:41:C2:8F:DD:5F:26:47:7F:AF:CC:41:72:49:A1:82:3D:08
Authority key identifier: 4B:20:D5:C7:8C:10:7B:CF:9C:71:54:53:D2:14:44:F6:96:E4:4B:11
Certificate issuer:       /CN=4b20d5c78c107bcf9c715453d21444f696e44b11
Certificate serial:       01962F7432D0B66650E31EBDF8641369FA1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft
Manifest number:          1407
Signing time:             Sun 13 Apr 2025 14:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:06 +0000
Files and hashes:         1: SyDVx4wQe8-ccVRT0hRE9pbkSxE.crl (hash: Z0XidmbnZaBtwXaOXNThma74kS9Ee7sUOTOFzqPZdFI=)
                          2: tZ9Z4ML8zhMNBVa9E96Yi9Jnntg.roa (hash: XsJXQI0tWIE+GAb6s9yORtZWbA379GfbGqFGrJ0uG8Q=)
                          3: vLGEnXeHKe1JvyRbs81GFKJa9lI.roa (hash: y85TW0QR8RD5vWjjj7XBtsfhuTrNhwWb7DCnCsRHfMk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:32:d0:b6:66:50:e3:1e:bd:f8:64:13:69:fa:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b20d5c78c107bcf9c715453d21444f696e44b11
        Validity
            Not Before: Apr 13 14:01:06 2025 GMT
            Not After : Apr 14 14:01:06 2025 GMT
        Subject: CN=c01e3f41c28fdd5f26477fafcc417249a1823d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9e:a8:e9:1a:84:c5:ca:70:cb:d6:44:d8:23:
                    7e:06:a2:0f:cf:e3:d3:e6:89:e2:dc:43:4a:e0:78:
                    bd:b4:f4:ba:8e:1f:79:fe:f2:eb:fb:34:23:40:68:
                    ce:9d:11:9b:34:74:6b:c7:e6:c8:62:25:29:83:d0:
                    49:68:fe:9f:96:38:8c:88:39:6f:e1:c2:ec:3d:50:
                    33:63:89:7a:6f:0c:40:0e:19:98:2f:d2:29:94:37:
                    6f:6b:28:92:b3:a1:f1:5b:dc:33:cc:13:bb:39:78:
                    03:48:a8:ee:30:70:39:11:31:89:7f:92:39:38:0c:
                    64:85:81:bb:ae:4b:d1:50:fa:e7:74:37:db:9b:f3:
                    ea:e6:e7:9e:c4:da:3a:47:35:57:f2:6d:27:07:2e:
                    c2:ac:e1:11:03:8a:a3:e7:cb:5c:b8:e4:1f:cb:2f:
                    c0:93:5a:81:68:b7:ff:36:1e:9b:a3:b6:4c:d9:18:
                    bf:1a:14:1d:54:4c:07:17:83:7c:e2:85:9f:41:01:
                    f4:05:4a:17:53:cf:cb:7b:da:d7:9a:b2:04:26:47:
                    aa:5a:14:96:56:03:fc:a9:30:85:cf:52:2b:7a:79:
                    c4:98:7c:da:21:0d:56:20:f2:f8:47:c7:65:45:9b:
                    1b:66:21:7d:a1:70:a2:cd:52:fc:be:50:4f:88:40:
                    bf:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1E:3F:41:C2:8F:DD:5F:26:47:7F:AF:CC:41:72:49:A1:82:3D:08
            X509v3 Authority Key Identifier:
                keyid:4B:20:D5:C7:8C:10:7B:CF:9C:71:54:53:D2:14:44:F6:96:E4:4B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:76:5a:5a:d7:2b:00:41:07:34:eb:d0:48:97:8a:27:8d:a5:
         3b:ea:1c:9e:cc:be:df:36:ff:43:20:52:33:bf:2c:c0:05:e5:
         32:88:d0:53:66:a9:c6:ad:81:99:29:a7:f7:f6:11:7f:95:5c:
         07:1f:5b:85:2e:45:35:a6:b3:03:d7:1e:ca:12:f0:0e:4a:98:
         10:7c:fb:3a:81:b8:1f:bd:54:fe:48:9e:b2:78:7b:73:8c:90:
         30:5f:12:73:c1:1c:30:0c:45:ac:d8:c0:af:b6:42:b1:f1:ff:
         dc:90:0d:8b:35:f6:8a:e3:48:68:c0:4d:5f:a2:74:0e:d0:44:
         8e:e6:32:ee:d4:04:cc:67:93:cf:e0:dc:37:fd:9a:17:3c:64:
         6a:67:f6:2c:32:28:17:c5:d0:cc:ed:59:d6:56:f2:45:0a:f6:
         86:aa:2a:55:a7:1f:de:5e:a6:bc:a9:14:0e:57:50:db:01:77:
         99:c7:53:86:71:fc:60:bd:b2:89:45:5d:5b:8a:71:28:3a:45:
         b1:f2:a0:0c:15:2e:d9:14:cc:78:cf:83:78:b1:a0:5f:bb:6d:
         b3:13:b0:5b:9e:63:10:91:91:31:73:67:f6:f3:fa:59:07:e3:
         d3:28:44:24:00:19:13:b4:50:2a:27:c4:0a:6c:bb:58:2b:40:
         ce:5d:f8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----