Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
File:                     SYbHOZTQLZH8l9kW6YCabZgeaxc.mft (raw, json)
Hash identifier:          1AzXY0t7xC5wol6nO/to+xblZEKFkZOD1QDA9W/0bjY=
Subject key identifier:   95:BC:F6:20:22:CE:2A:23:BE:ED:53:15:E9:DE:C2:4B:C9:7E:6E:EA
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Certificate issuer:       /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial:       01962ECFA2DE6AED26804717CA42CDF83A79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
Manifest number:          1558
Signing time:             Sun 13 Apr 2025 11:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:21 +0000
Files and hashes:         1: 0bnoilJqdREsxptDb-ivl7D9RO8.roa (hash: xwj9p29IkVHnJneRSxNDQqnx9KWrH7LG11fEPkl1kbA=)
                          2: Ix9O-i4_zw0G5oouxc3xseGA8Eo.roa (hash: c7xx1EFWXS87VmDm0MCiaBwoUVVt5kZzZI5Y7YpQiDg=)
                          3: SYbHOZTQLZH8l9kW6YCabZgeaxc.crl (hash: gMf+SN5+HjpCgZNyqtx7fIiy17b8yW1aFjXZO4pZnOU=)
                          4: dEkWV8xPj6ZjKfgx5t3dIacQr1A.roa (hash: ZOk1wKX5K0Mx4fspQclTvx+3kOne5shTmWgvCBY9O/Q=)
                          5: oUKk1uu7ErKDBDfczx8Lgvbp7JI.roa (hash: t2ZvndGBIUmYOKdZ5J5PYO1QlJw9JZWhDYTd72oUg3c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a2:de:6a:ed:26:80:47:17:ca:42:cd:f8:3a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
        Validity
            Not Before: Apr 13 11:01:21 2025 GMT
            Not After : Apr 14 11:01:21 2025 GMT
        Subject: CN=95bcf62022ce2a23beed5315e9dec24bc97e6eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ea:d3:fb:5e:13:47:bb:56:7c:ac:3b:ac:a8:
                    cf:7b:fe:d8:a5:90:e7:9c:1f:3b:af:bb:cc:a5:90:
                    f4:f2:ee:dd:7f:8e:a2:74:53:11:bf:2f:7d:88:7b:
                    51:f3:94:d5:ca:32:a0:5b:ba:80:4d:5d:fa:64:c5:
                    f7:f7:97:82:e9:81:ff:78:2b:fb:0f:54:2a:95:dc:
                    99:99:c5:ae:10:92:c9:26:84:03:44:4a:73:e0:81:
                    18:6d:ca:96:b0:a2:f2:88:c7:07:57:2f:fa:f6:fa:
                    d8:55:9a:6e:eb:a1:a2:10:8b:47:62:b7:77:84:14:
                    2f:f9:af:be:a1:90:d4:65:cc:4f:04:c9:7a:c2:88:
                    cb:64:8c:26:cb:98:cf:ed:77:fe:bb:22:b4:1a:aa:
                    e3:02:e6:a7:30:45:b9:0b:5b:59:ec:e6:84:2d:bf:
                    49:1d:09:56:a4:c1:64:2f:56:ba:58:58:69:5d:2e:
                    38:7f:38:8c:02:a2:3d:c0:b1:a1:a2:71:85:31:eb:
                    7b:a2:5d:14:ae:6f:6e:be:61:f2:5e:ff:e3:e8:ca:
                    46:f5:73:a7:49:f1:9b:61:6d:a2:0e:b7:96:46:0d:
                    8d:ea:fa:be:c1:8e:81:47:28:ad:ba:89:1d:35:52:
                    07:0c:d0:2d:f9:33:9a:2a:6e:2b:43:e6:66:26:6c:
                    b8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BC:F6:20:22:CE:2A:23:BE:ED:53:15:E9:DE:C2:4B:C9:7E:6E:EA
            X509v3 Authority Key Identifier:
                keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:68:d5:ce:c1:e6:0d:c2:31:71:05:7f:13:b0:31:59:dc:e1:
         0f:02:55:b6:32:ea:3f:a8:cd:3f:01:fe:44:c1:10:00:66:30:
         d8:e0:3c:59:3c:b7:92:33:34:b6:8a:da:9b:00:16:14:d0:c8:
         54:e0:fe:11:e9:aa:b4:20:0f:10:81:6a:77:32:79:74:52:e6:
         75:56:b0:e9:bc:97:fc:31:ee:83:5c:1b:c1:d8:64:04:1c:cb:
         2b:22:9c:1f:4e:7f:d8:93:c1:f6:77:cf:39:97:07:89:15:46:
         d8:31:64:b7:ad:52:9a:ff:05:4e:05:dd:fa:68:8e:15:5f:27:
         68:ea:4b:1a:85:1f:73:dd:69:4e:5f:dd:d1:cd:73:41:b3:47:
         7c:73:30:e6:39:9c:2e:b4:30:9b:00:f8:d8:60:6d:c6:4e:c5:
         4d:27:e0:17:23:25:ab:aa:a2:82:23:7b:f0:ea:44:3b:de:8b:
         cb:1e:02:98:01:20:51:10:ca:90:3f:63:8f:ed:f5:c1:c3:45:
         8b:af:f7:35:a7:f1:d3:64:ea:54:ff:66:cb:8e:2a:8f:30:48:
         75:8d:b4:25:72:14:07:67:d0:41:c4:2a:42:89:0a:06:8f:4a:
         c5:41:33:dc:66:5b:d3:aa:e1:03:07:f0:f8:e1:8e:67:41:a3:
         d2:2f:64:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----