Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
File:                     SSFvXBZbgnp_1z2BB669L2PGPiQ.mft (raw, json)
Hash identifier:          zAZx18iLoMjtoQL2Y7x3df7J3Cy4hu9X8uyehdsAeEM=
Subject key identifier:   DC:58:2C:13:E9:D8:FC:6F:85:EA:66:33:F6:23:38:DF:8D:67:BC:BB
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Certificate issuer:       /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial:       01962E618F3FD9682DECDDE89BA248B411BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
Manifest number:          05D7
Signing time:             Sun 13 Apr 2025 09:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:07 +0000
Files and hashes:         1: GXJ3Jv70PYrpynFmfWJG-1U0AXA.roa (hash: gN7zf0hrnbDTgmLIPxtKMfQ1p2xryjgx0dj4x/WcdJI=)
                          2: O442f9rKCameMmZGS2am4On1RJE.roa (hash: Tjn+0NJyIaKfDErYElD/Vnb1U5GiOqlQwXo7lUYpajU=)
                          3: RigxE8CkNVH4KlaPlwQNra2xaCI.roa (hash: kb9oL+5E3TBU4Y3tK0vOv3TZyWxxjndNtV2AaTLhZUs=)
                          4: SSFvXBZbgnp_1z2BB669L2PGPiQ.crl (hash: qLmImjCnfpF7zIy4N6JJN1Xs5XEjibEvmOGZZUQORxA=)
                          5: oX3OGzwxfpoj75NeGxUgbWj5Nag.roa (hash: AUpPKp6STpZ3+I37dxgfx0DnwlKN78RdnPEKRCGUs1k=)
                          6: sOYCAyuX7LzRagR7dV1ERKJeeIs.roa (hash: iiijo1cG8pZw3FDcsviLunLX+iaQD6HA/SK+nYP/HCs=)
                          7: uk-wtBacjbnmJtVJFKDyHc0Hc5I.roa (hash: HApCgMYDLrukEiV9uvRZaOtEfZQVPrgBCSdgHoLxiLU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8f:3f:d9:68:2d:ec:dd:e8:9b:a2:48:b4:11:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
        Validity
            Not Before: Apr 13 09:01:07 2025 GMT
            Not After : Apr 14 09:01:07 2025 GMT
        Subject: CN=dc582c13e9d8fc6f85ea6633f62338df8d67bcbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:63:5c:cf:df:2b:11:3e:1e:2c:df:8c:3a:00:
                    a5:eb:e5:25:84:b9:c8:f1:e1:20:9e:3c:05:1f:1e:
                    c6:b8:ac:e5:c0:f5:4c:b4:4c:1a:20:6f:67:b4:56:
                    7e:47:9f:d8:7e:b0:0c:9f:24:1b:b3:a2:6d:11:c0:
                    ae:07:f6:fb:d3:82:23:1a:23:7f:64:54:92:ad:33:
                    12:5f:d5:23:74:7d:9f:04:1b:50:5b:65:a2:e8:c7:
                    35:59:9d:85:c8:0e:58:7f:cc:a4:49:3b:53:ef:07:
                    ee:88:74:c3:de:a2:42:ae:68:fb:1b:76:ec:6a:40:
                    86:5c:48:6a:57:7a:93:14:9a:c8:0b:7a:77:7a:b1:
                    ba:7b:25:bc:f0:85:b9:35:c5:c1:7b:77:65:fe:9c:
                    6b:8e:db:b6:d9:7c:b5:0d:79:dd:90:ac:56:dc:8b:
                    a5:b4:74:aa:7c:be:a4:21:87:38:ee:a4:ae:e3:a1:
                    8c:67:30:62:ac:60:8b:f4:e6:77:6f:08:f4:09:d5:
                    23:00:92:b1:ac:2f:68:0b:40:68:47:77:00:47:b1:
                    50:ee:97:1e:ef:92:4e:a7:0e:68:a8:2e:73:a5:66:
                    a4:66:94:f4:e0:1c:cc:a7:3d:a9:5c:a8:56:7d:ab:
                    c4:75:2e:c3:0a:30:2b:0f:fa:4d:7f:a7:b3:d2:2b:
                    b0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:58:2C:13:E9:D8:FC:6F:85:EA:66:33:F6:23:38:DF:8D:67:BC:BB
            X509v3 Authority Key Identifier:
                keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:fb:18:0a:ea:1e:04:32:78:3e:37:f1:b5:e2:0f:e3:30:09:
         8f:4b:d8:bb:c4:ff:f8:b3:95:1d:fa:42:8b:f2:04:bc:20:35:
         70:2e:12:3b:6e:96:ff:78:40:13:69:d3:cf:ea:6b:70:97:83:
         ad:b0:80:86:f3:b0:e2:f7:42:00:35:c0:4c:8f:0b:03:96:24:
         d3:97:9f:66:80:e7:9e:34:c3:3d:42:5b:c6:b5:a7:91:c4:5d:
         fe:97:06:4e:55:35:84:8a:f2:83:be:1c:60:2b:f7:18:43:66:
         ae:7d:00:df:66:2f:5b:ff:6b:82:44:57:60:a4:4c:51:9d:e1:
         f3:20:0c:4a:cf:33:de:fb:48:f8:a1:95:7e:ea:04:bc:5a:50:
         9e:33:b2:59:17:83:08:aa:fc:4e:26:48:7b:de:fe:19:f2:7d:
         95:a1:40:82:36:45:53:9d:91:c8:fd:77:9d:bb:19:15:7e:85:
         2f:a9:e5:1c:41:6d:66:eb:56:6b:be:9d:ac:ff:8c:74:e2:1b:
         a0:ba:eb:5c:62:e7:b2:81:0b:9f:f7:2c:26:18:7e:87:c8:d8:
         b1:88:10:af:c6:37:5e:aa:2f:5c:29:c6:00:58:cf:cf:8d:ec:
         99:d6:5b:df:99:eb:05:93:a3:31:78:7e:f1:d7:15:88:6f:72:
         69:a5:95:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----