Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
File:                     RwSF9erGdaJBq24C2OU90oVW0u4.mft (raw, json)
Hash identifier:          AhsoxOCxQvqoqg/IFfJieI2cgOaUSNmY0FrnNCfpKs0=
Subject key identifier:   4D:2F:69:47:A9:26:06:8C:06:93:C0:8D:E0:51:A2:70:E8:24:0C:EE
Authority key identifier: 47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
Certificate issuer:       /CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Certificate serial:       01962ECFF3E31DD4CC09E9DF4B3A82439405
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
Manifest number:          30
Signing time:             Sun 13 Apr 2025 11:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:42 +0000
Files and hashes:         1: 1-ytWl0hX9ynA9JXKT1kDTjFFd_k.roa (hash: SVFx2HIlhTnZm/5An2t1/eTf/PAIAECB7vLR+zIL0/U=)
                          2: NoJ1UKHiukde2mRT9-_nIR1Anh8.roa (hash: /+lwIce8p8YhYy+vTvo5y1ZD5U8+OHW9eM/9QYNo8AI=)
                          3: RwSF9erGdaJBq24C2OU90oVW0u4.crl (hash: rc6o9njzWvH6Q8eHc3CfvbVcusHh1LkXK7raFcbpOfY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:f3:e3:1d:d4:cc:09:e9:df:4b:3a:82:43:94:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
        Validity
            Not Before: Apr 13 11:01:42 2025 GMT
            Not After : Apr 14 11:01:42 2025 GMT
        Subject: CN=4d2f6947a926068c0693c08de051a270e8240cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:08:18:1f:7b:ac:75:65:3b:85:24:ae:36:f3:
                    28:2d:5c:05:55:2c:b9:50:a7:74:fd:10:34:a3:08:
                    12:c5:ed:a5:58:ee:62:e3:e5:54:b1:5d:d4:6e:ba:
                    55:3e:59:6a:07:ca:98:2c:7c:7c:19:05:fe:ce:c0:
                    7c:2d:71:23:a2:69:1a:ac:d8:9c:b5:86:80:da:9f:
                    be:cd:53:a0:75:a7:28:4a:4f:f3:62:79:fe:4c:8a:
                    1a:e8:ae:3d:9d:8a:ac:13:7d:fd:1f:b2:94:93:28:
                    a3:43:0c:7c:89:3a:25:9a:32:b8:31:78:20:36:fc:
                    3a:fc:4e:a4:53:7d:12:7e:1b:82:80:fc:60:7b:d6:
                    42:8e:87:8c:4e:9c:52:e4:bc:8a:84:d4:6f:ec:df:
                    25:73:63:16:4a:06:bd:b6:66:f2:a1:da:8b:ca:75:
                    92:be:79:1f:c8:58:3c:c8:fb:7d:10:c6:09:50:2e:
                    b8:d3:50:a3:81:90:84:61:cd:72:7a:44:8e:f7:74:
                    58:f4:ac:d4:3c:55:9d:42:e1:cf:da:9e:88:3b:12:
                    bd:4c:d3:dd:b6:00:f9:c4:0f:38:66:40:cf:1f:39:
                    0a:a7:41:95:ca:6d:67:ee:73:14:1e:ba:27:75:b0:
                    2e:5c:c0:4c:e2:1b:0c:db:89:49:d4:88:93:16:14:
                    f3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2F:69:47:A9:26:06:8C:06:93:C0:8D:E0:51:A2:70:E8:24:0C:EE
            X509v3 Authority Key Identifier:
                keyid:47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:3c:8e:7e:13:3f:ca:d1:75:c5:80:04:9a:6c:b8:f0:0c:68:
         2d:86:b6:7f:c7:c2:a8:ac:be:03:9e:c5:4f:cb:ca:1e:93:f1:
         3a:c2:00:9f:a4:50:60:99:2a:69:c7:03:39:51:c3:1a:af:51:
         0f:93:f8:b8:38:95:f3:6b:2f:dd:d5:93:88:37:3b:41:5f:46:
         3b:c7:a4:0c:8e:7c:cc:e3:d8:41:8d:76:58:2c:08:91:eb:f4:
         8d:07:bc:ae:28:21:d6:d5:7f:45:51:fd:c3:32:9a:9b:c0:2e:
         b9:68:81:5b:f0:cc:d2:a0:6b:4a:18:95:7d:f2:01:8f:50:65:
         6e:70:9d:05:8c:0e:ef:17:af:25:f3:0d:2e:60:1a:00:1d:0e:
         f2:21:d4:e9:94:87:6a:71:54:37:5d:32:9b:8d:0e:34:49:d4:
         18:bf:5d:83:54:ac:7a:71:f4:df:0f:c9:73:81:23:14:03:b7:
         5f:a9:21:2a:ca:4b:a4:d8:58:18:d8:fd:e8:5c:8e:eb:be:13:
         04:85:f7:38:d9:27:0b:fa:b0:da:5c:68:1d:08:16:2b:2d:cd:
         25:1e:f9:d3:4b:66:4e:15:87:18:cf:fb:b0:c4:14:3b:62:8c:
         d9:a2:e8:23:87:0c:ce:d3:ca:25:9f:93:7d:2b:32:f2:8a:10:
         47:be:f1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----