Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
File:                     snSbyc0s-N_88v_teIT7wTyz5F0.mft (raw, json)
Hash identifier:          ULp/vsam0M19M++obMSUcIoPrbyq0dbtv1I8bZYR/Ic=
Subject key identifier:   7F:7D:A5:18:0D:93:CB:32:75:E4:FD:3C:03:65:4A:13:26:39:FF:0B
Authority key identifier: B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
Certificate issuer:       /CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Certificate serial:       01962F3D726A0B54FDE53ECFAF451FB3B219
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
Manifest number:          1120
Signing time:             Sun 13 Apr 2025 13:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:18 +0000
Files and hashes:         1: OaynJV0qbIIk7EsSxRIucNannDI.roa (hash: rLhfi7PeZU4mZH9NTsaCKUtzejxWWyeiOXooqE3dPpU=)
                          2: ZsJ1p0f-2YgNmBDafzu2GWckT34.roa (hash: kKQedLsISeBKSivLfM6tlDNDN9VJMt9n4EQssMfjNOQ=)
                          3: snSbyc0s-N_88v_teIT7wTyz5F0.crl (hash: 2O+LhzAtWO9qcJg1eHnxRhDnbPudKBRbPw57itjMTKI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:72:6a:0b:54:fd:e5:3e:cf:af:45:1f:b3:b2:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
        Validity
            Not Before: Apr 13 13:01:18 2025 GMT
            Not After : Apr 14 13:01:18 2025 GMT
        Subject: CN=7f7da5180d93cb3275e4fd3c03654a132639ff0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:67:10:6f:61:2e:66:7e:f8:c8:dd:c2:42:08:
                    cf:b4:59:a4:fc:00:8a:84:e4:99:af:81:4c:14:58:
                    47:6b:a7:d8:f3:df:d0:40:03:8e:a7:86:57:39:98:
                    09:a8:af:42:df:e1:5f:33:ef:d7:4a:1d:af:4f:c3:
                    a8:6e:ac:98:a7:87:9c:45:df:bc:44:fe:c6:5f:02:
                    44:3d:c0:ee:72:50:57:93:e7:47:cd:b8:d9:b8:ef:
                    18:a2:25:e4:f2:1d:13:0f:80:a6:0a:ff:cc:b1:0a:
                    25:b9:ee:6d:e4:cc:31:f9:29:a2:85:4e:3b:0b:93:
                    10:a5:3c:fb:2c:9b:ba:6e:bf:1a:18:3c:cf:ba:10:
                    1f:2e:5e:39:62:29:41:15:58:2d:61:58:54:21:14:
                    db:b4:9c:9c:94:86:1e:77:93:4b:e6:34:c3:a2:63:
                    53:b6:92:e7:8a:28:80:c1:43:88:a9:b8:25:98:5f:
                    59:6e:5e:7d:3f:52:1b:98:02:cd:60:c4:24:ec:bd:
                    d1:40:ce:c0:60:6f:e4:31:40:c0:db:4d:45:e1:8b:
                    12:65:1c:46:07:53:0d:61:5a:e6:de:50:89:1e:be:
                    a9:e2:f8:cd:75:9e:c0:cc:ba:73:0b:36:fd:3c:3b:
                    55:41:9e:03:06:40:a1:e2:ed:05:62:59:61:01:67:
                    9e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7D:A5:18:0D:93:CB:32:75:E4:FD:3C:03:65:4A:13:26:39:FF:0B
            X509v3 Authority Key Identifier:
                keyid:B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:94:75:13:7b:4c:58:1e:50:ef:24:de:40:1d:15:03:9a:60:
         9d:b2:42:c7:53:c8:4a:5e:6e:68:af:4d:87:08:96:5e:89:a1:
         8b:64:72:3a:18:69:7c:71:d1:58:99:23:67:a5:fd:98:8a:ab:
         cf:63:a7:00:70:22:07:4a:a5:e0:26:54:10:61:4c:25:bb:86:
         2a:03:27:cd:33:c9:87:33:20:b8:88:44:80:b8:4b:55:90:46:
         46:06:c7:61:bb:b5:8f:d9:7e:c8:88:ea:3b:c1:a0:03:6d:01:
         6b:35:c8:23:00:ad:be:31:b3:97:09:da:a7:27:70:57:c7:ac:
         54:52:1e:34:f6:5f:93:7e:4d:a2:ef:27:72:02:b5:27:b9:d0:
         ac:4b:65:17:93:99:13:b9:1c:f2:7c:fc:ab:e1:f5:02:bd:fc:
         70:56:25:06:05:96:55:e1:d8:f1:b1:de:cf:3f:ff:0c:d9:0d:
         90:86:fe:65:b2:b0:64:17:10:78:7c:cb:dd:d6:12:0b:a6:1f:
         16:78:ee:86:59:ea:94:de:c7:52:88:db:09:2c:83:f1:ee:fb:
         5a:69:7e:4f:1d:24:81:93:05:28:78:06:5e:18:fc:2d:20:9f:
         7f:95:9d:44:f3:0d:f9:36:b5:56:11:fa:3b:40:58:2a:2c:57:
         ba:9d:b2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----