Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
File:                     SAa55i8bAPLPmNDcxYMpKvrLUi8.mft (raw, json)
Hash identifier:          7aF397shhacZ8+9vBTmOA4ajYsYfGROGcNLWE/l/v/Q=
Subject key identifier:   8E:AD:49:CD:D8:24:FF:79:52:CA:74:6F:37:C3:D2:C8:56:0A:6F:52
Authority key identifier: 48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
Certificate issuer:       /CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Certificate serial:       01962DF4475F37985C6B338BB878FFA88BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
Manifest number:          0FAD
Signing time:             Sun 13 Apr 2025 07:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:45 +0000
Files and hashes:         1: SAa55i8bAPLPmNDcxYMpKvrLUi8.crl (hash: lB3WwCWH9kdsbsNDv+4a2k8xnwXkvTkGG2AIfvt22lA=)
                          2: bOFB3LalOSOdSrbz-a4cUkkG03M.roa (hash: SZa6u36skxx1rALcmnxtRi0278XWZ89tCnch5FRpzoM=)
                          3: ipcAqlbQdh9QjilJG8UTA6cw-zw.roa (hash: RUMHng+Xlo2Ru6wmJaBAotc3mLSEqq30G4I26Jr98jk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:47:5f:37:98:5c:6b:33:8b:b8:78:ff:a8:8b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
        Validity
            Not Before: Apr 13 07:01:45 2025 GMT
            Not After : Apr 14 07:01:45 2025 GMT
        Subject: CN=8ead49cdd824ff7952ca746f37c3d2c8560a6f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a8:c9:a2:24:74:91:77:0b:a9:26:fa:8c:3e:
                    d1:ed:79:bb:8c:6f:21:77:a8:9f:7b:8e:3d:29:20:
                    79:65:54:bd:a7:0a:e6:70:dd:eb:ff:67:e8:2d:01:
                    f6:65:a8:58:d5:5a:15:5b:57:ae:f4:c5:29:f1:5c:
                    7c:2b:98:80:53:ab:2c:2d:b3:f9:52:b2:44:80:d9:
                    5e:aa:61:cf:02:f5:cd:29:2e:59:37:7f:21:0d:4b:
                    9d:2a:9e:0a:44:79:5d:10:6d:79:e4:9b:8f:5e:e6:
                    46:d5:e2:68:96:75:c7:82:5f:ff:8c:0d:1b:08:69:
                    75:a7:5e:b5:25:fc:da:b0:f0:95:de:21:3d:9c:ee:
                    2c:20:3a:4a:f9:1e:09:52:6b:59:45:5c:9a:ec:e0:
                    19:93:1b:ba:2c:bb:82:d1:00:36:4f:8d:a4:e4:b9:
                    9a:6e:d9:44:b7:f9:61:be:b1:02:2a:d8:3c:c9:08:
                    f8:fb:01:79:72:fd:9b:c4:02:b6:a9:c8:23:21:8f:
                    50:7b:37:25:75:e6:9e:9d:f0:d4:aa:65:fb:ac:2e:
                    71:71:eb:cd:4f:3f:da:47:aa:39:c3:88:ef:c4:6e:
                    1b:ff:87:96:51:02:b0:d9:4a:70:c7:9c:5a:e1:39:
                    49:d5:f4:47:f6:d6:52:e9:bb:a1:95:fc:c2:8b:fc:
                    7c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AD:49:CD:D8:24:FF:79:52:CA:74:6F:37:C3:D2:C8:56:0A:6F:52
            X509v3 Authority Key Identifier:
                keyid:48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f3:da:6c:45:d6:ba:28:4d:bd:74:fd:ad:03:5c:fc:5c:9e:
         dc:2c:0a:bb:be:35:6d:29:b3:6d:6b:aa:70:7b:77:54:d4:d8:
         4d:9d:e9:b1:28:eb:87:1c:eb:e7:e4:bc:e3:ac:3c:f3:f0:9a:
         04:b4:36:c8:4e:ed:75:85:97:f1:5a:8c:4a:df:eb:0d:35:8a:
         a3:82:ba:d9:b1:ac:dc:e6:4a:8a:2c:bf:e5:09:b0:6d:55:a2:
         0c:7b:7f:a8:8f:66:da:22:c2:7b:c0:52:7a:b1:4b:15:ed:f9:
         7b:6a:4d:2f:e7:47:2b:9c:af:37:8e:9c:bb:5e:47:3b:dd:0b:
         e6:c6:51:f2:b5:45:4d:bf:12:99:dc:d3:9d:ad:1f:93:16:bb:
         a6:fc:fd:9b:c0:17:ed:81:99:fd:3d:6d:4a:4f:4e:c4:b8:6a:
         55:1e:02:65:30:b2:35:b4:9e:65:d8:2f:3b:5a:90:08:46:1b:
         e7:9f:c9:4c:8c:3f:b1:e5:e1:73:2d:d9:af:72:19:93:79:36:
         1c:31:ce:56:18:10:c4:bc:90:9c:7d:87:43:dd:6d:49:c1:22:
         6a:60:17:74:7c:f2:4f:16:d4:f4:ce:78:ea:8d:d1:72:94:94:
         9b:44:76:56:84:a7:80:ce:5a:ef:f7:f3:26:d7:84:fc:78:55:
         8d:d2:80:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----