Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
File:                     SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft (raw, json)
Hash identifier:          Qg6lDIZ1wA9N2Prsray7ZZxjm37c3bavpG3fZbXFFNY=
Subject key identifier:   3D:CC:8F:70:5A:F9:6E:DD:6A:93:AB:41:42:62:98:ED:C8:F3:43:3F
Authority key identifier: 48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
Certificate issuer:       /CN=485375191d1c2e50982108fdd407bbcf73e9795c
Certificate serial:       01962F073DDFA36495D7155EE13DBFA7CFBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
Manifest number:          0EB6
Signing time:             Sun 13 Apr 2025 12:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:05 +0000
Files and hashes:         1: JUMv7Yi2cpE5n4jH_daU8-Wkj_s.roa (hash: 8Ur2YBrwEIHwiqas+AFAXGNfkZXPANsLJAnLoARlVGk=)
                          2: SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl (hash: bKhBWabznEJhAi1orJ9Wb6Ax/Xu12EaDN1y+1p3biGE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:3d:df:a3:64:95:d7:15:5e:e1:3d:bf:a7:cf:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=485375191d1c2e50982108fdd407bbcf73e9795c
        Validity
            Not Before: Apr 13 12:02:05 2025 GMT
            Not After : Apr 14 12:02:05 2025 GMT
        Subject: CN=3dcc8f705af96edd6a93ab41426298edc8f3433f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d0:f6:92:a5:a9:7e:98:17:80:26:e1:9f:9a:
                    dd:1b:67:a1:61:fc:18:a4:e7:b7:87:ac:10:ed:f2:
                    2a:dc:f3:f4:59:f5:ab:cc:03:55:00:8f:aa:8a:dc:
                    fa:55:9d:91:fd:c6:35:21:d5:14:0f:7f:cd:94:68:
                    18:ed:fc:f3:1c:25:19:fc:fe:c5:59:07:a5:01:1f:
                    14:6f:40:ce:04:9e:74:9f:a9:75:cc:36:b2:a1:bd:
                    d5:08:e2:2e:cb:0d:ba:da:21:88:23:7d:e9:43:6a:
                    17:49:3b:e2:d5:d9:28:a7:8f:63:61:91:fc:df:af:
                    c5:69:de:a1:5d:dc:e1:9a:72:fc:26:77:7d:b8:0b:
                    fd:98:0a:f1:e5:58:ff:ed:4e:f7:9d:59:3c:56:3f:
                    31:47:fe:5e:20:49:b1:0f:09:3b:dc:e6:84:c5:6f:
                    c9:88:d7:86:f9:28:ca:a2:30:1e:29:c3:b2:32:0e:
                    b5:5a:1f:27:d8:32:d2:cd:ba:c5:f0:97:5f:a1:c1:
                    5b:c6:18:07:b0:6e:d2:9c:04:0c:15:5b:f8:a0:46:
                    59:2c:30:de:82:93:d3:fc:97:68:6d:3b:ea:a8:12:
                    83:e2:18:36:18:4c:e5:c2:73:14:99:d0:51:65:bc:
                    93:81:eb:05:92:ec:25:f4:d2:27:f7:c5:2a:52:d6:
                    a8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CC:8F:70:5A:F9:6E:DD:6A:93:AB:41:42:62:98:ED:C8:F3:43:3F
            X509v3 Authority Key Identifier:
                keyid:48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b0:04:72:0a:fe:cc:d6:3b:8c:af:c5:50:0f:f8:fa:dc:02:
         63:8a:e1:45:b2:b6:50:d2:79:d7:c0:d6:d6:c2:74:1e:a9:72:
         42:80:e9:af:2e:a7:9a:11:32:34:28:c0:8b:8e:3d:32:46:fc:
         2c:74:91:1c:3d:64:69:e2:38:bf:71:89:64:20:b9:2c:c2:14:
         29:29:1f:33:64:5e:a2:40:d6:70:67:5d:b8:de:5b:c3:2f:3f:
         81:61:3f:65:5c:41:3f:36:e6:1c:ae:45:54:65:28:2b:1a:e8:
         65:6c:e0:e4:35:88:f0:8a:8e:f6:b7:2c:78:08:45:62:3c:62:
         fc:77:eb:ab:28:56:90:be:3a:bb:95:3f:14:d5:44:bc:3f:1e:
         d4:75:a8:04:f2:ec:ea:e8:6d:75:57:ed:13:c5:49:e9:5f:f4:
         b4:78:51:11:b6:c3:4a:a9:0c:7f:97:57:b5:28:4a:a3:55:a6:
         2a:b5:c0:91:52:c3:61:a5:b9:26:8a:9e:3e:f2:03:f0:e0:38:
         a1:a5:70:d6:81:91:0e:f0:35:03:f3:a4:e8:e3:60:58:b0:4a:
         25:57:d4:c6:56:6d:09:43:c3:aa:dc:20:ff:12:47:7b:2d:3e:
         7c:dd:54:18:9b:35:49:e9:fd:bb:21:62:23:6e:67:e4:1e:c2:
         ba:a9:ea:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----