Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
File:                     SReefPYEiMPvW3cNIa6xR9pMfO4.mft (raw, json)
Hash identifier:          1xupKT6D7/BdIIiWoBG3kqmhvS7IIBDBpoIQGCSDjcs=
Subject key identifier:   D7:83:33:02:EA:71:4B:C5:3B:95:6B:6A:3C:BE:A8:F7:A6:62:DF:00
Authority key identifier: 49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
Certificate issuer:       /CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Certificate serial:       01962E61B858117FDF7F78DCD69893B0EA11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
Manifest number:          11D0
Signing time:             Sun 13 Apr 2025 09:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:18 +0000
Files and hashes:         1: 1PfCogsrcmO4yMFx3i7dWcicxiM.roa (hash: QSA42PQDSQu+Rjvywm1NdoufERvHtIOdqRGsBA5DYb0=)
                          2: SReefPYEiMPvW3cNIa6xR9pMfO4.crl (hash: RgS1h8la4phIsq9L7Hi4nBKjL4MbL0JQ9LUcBWCALKs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b8:58:11:7f:df:7f:78:dc:d6:98:93:b0:ea:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
        Validity
            Not Before: Apr 13 09:01:18 2025 GMT
            Not After : Apr 14 09:01:18 2025 GMT
        Subject: CN=d7833302ea714bc53b956b6a3cbea8f7a662df00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:91:34:e6:c1:16:3d:7e:3f:99:7a:a1:86:d7:
                    b3:65:ee:6d:d3:de:e9:13:bc:55:30:fb:de:bb:a3:
                    3b:6c:71:d2:43:f2:82:e8:31:a4:76:37:a0:68:39:
                    80:8c:78:57:2a:30:64:c3:f4:60:e8:52:95:62:61:
                    22:05:fb:ab:f0:8e:11:7b:ea:b2:db:30:a0:74:c6:
                    5d:98:2b:5d:0a:c4:64:0b:2e:69:28:08:bf:4a:ec:
                    14:6c:66:99:c7:43:40:e5:55:e1:04:03:61:ae:32:
                    59:30:32:04:de:c8:f9:a1:61:4f:c0:7c:d3:43:44:
                    ef:cc:d9:4d:41:a0:37:34:7a:04:d4:ac:22:51:dc:
                    26:e7:ba:1e:71:4b:0a:e0:54:c1:65:27:9b:c2:94:
                    c3:22:98:2c:47:5e:40:97:ab:43:d3:f6:d3:3a:50:
                    a8:59:fb:0a:c3:94:fe:bf:ba:2d:45:c8:04:f1:2b:
                    2b:fd:19:d0:c0:f4:e0:25:4c:06:59:f5:2e:f6:b6:
                    c5:e2:34:b9:74:e6:fd:00:db:46:e1:61:aa:76:ef:
                    cd:ba:a1:53:61:f9:ef:c3:99:0c:4f:4e:50:54:96:
                    85:3d:e1:9c:5f:a6:d0:a8:b1:93:f9:c7:9e:d6:ef:
                    be:4f:ee:48:79:a3:bb:7f:0a:fd:9e:dc:a7:2d:ef:
                    86:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:83:33:02:EA:71:4B:C5:3B:95:6B:6A:3C:BE:A8:F7:A6:62:DF:00
            X509v3 Authority Key Identifier:
                keyid:49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:1a:7a:25:a7:a9:44:ab:b0:07:cc:0b:b2:5a:9a:31:62:fb:
         df:d6:8e:75:3a:4d:4b:c7:51:bb:0d:90:dd:56:65:78:99:1b:
         6b:82:9e:e5:a8:6e:83:c4:a8:38:95:14:49:d8:e4:e0:44:12:
         b7:fc:9f:4b:94:16:65:90:3f:50:94:a6:fe:d2:a7:7d:2e:ab:
         cd:71:d5:e8:b1:23:f8:a1:ce:a4:ae:e1:c4:b2:68:8e:b4:45:
         3d:0a:88:63:3c:e4:77:91:57:02:f4:3b:8f:43:f7:bd:8c:8f:
         18:ea:1f:7d:88:ba:18:d3:b1:a2:d7:e2:15:0f:6a:b7:d3:73:
         da:4f:39:4d:2b:6b:2e:4f:2d:61:8c:c2:87:03:a0:41:50:3c:
         59:76:ea:eb:97:66:93:96:e8:a2:cf:11:08:dd:6a:27:e9:da:
         2f:04:c9:d9:7b:7f:1b:53:38:10:a5:8b:40:fe:1e:66:b6:21:
         35:22:35:de:54:d5:ef:99:4a:34:e9:57:78:c6:42:1e:8e:23:
         81:14:99:cf:cb:a5:7a:8d:3c:c6:e3:35:2d:f2:6b:ee:75:67:
         55:ce:76:b0:c3:65:2e:bd:62:d1:91:7b:ba:fb:72:f5:c2:b3:
         bd:77:f6:f6:a9:1f:1f:e4:0a:b2:9e:ef:2b:3d:a6:59:fb:7f:
         75:b8:dd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----