Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
File:                     S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft (raw, json)
Hash identifier:          ULP15d2/AFJYRp1I6xOzHIp73SG4JDAokStZU6PYBDM=
Subject key identifier:   24:75:4C:DE:5F:1A:96:CD:FB:5D:93:43:D0:06:B5:7A:6B:70:6D:8C
Authority key identifier: 4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00
Certificate issuer:       /CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
Certificate serial:       01962E61B988DE98EF4C68974684E8F544EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:18 +0000
Files and hashes:         1: 3pyVDwp0x3hY9oRPcp-pG8Phtr0.roa (hash: Qs6GoxmPBIC7HGNuig2kfn3Fl73wnKTFpil8h4rBNO4=)
                          2: RrQG9mTNvqijfpK9hxxi5arQQl8.roa (hash: 68l7WOhFiSwMdfEHVW7iQtxBS25LLIy1s/fmM858aaI=)
                          3: S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl (hash: s4KmwFAwdPNSKjzqc7v+PJ1NbiQyJf6DqQSzOUFlNx8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b9:88:de:98:ef:4c:68:97:46:84:e8:f5:44:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
        Validity
            Not Before: Apr 13 09:01:18 2025 GMT
            Not After : Apr 14 09:01:18 2025 GMT
        Subject: CN=24754cde5f1a96cdfb5d9343d006b57a6b706d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c8:75:da:ff:12:56:71:01:b4:0c:73:69:cf:
                    a2:40:2d:6a:d7:b2:27:57:7c:5c:e5:a5:ee:46:f8:
                    4a:74:d5:3c:71:b5:32:b8:16:de:8d:aa:84:7a:21:
                    76:44:de:19:6f:20:33:51:ab:d7:2f:11:fb:d7:e2:
                    8d:08:3d:f6:56:ea:c4:de:6e:6c:84:12:0c:a4:76:
                    56:f2:e1:eb:7b:0c:11:8d:19:c6:96:3a:e6:8a:88:
                    5f:98:6a:92:85:8f:4f:7c:27:9f:69:9b:aa:f3:de:
                    6b:f2:e4:aa:ad:a9:40:bc:51:f5:69:ab:a4:f8:14:
                    50:f0:71:51:74:c1:ab:d9:1f:76:f6:ec:e6:24:c5:
                    f6:8c:cd:76:d0:7d:f7:e8:98:55:46:0b:6e:b7:2b:
                    8d:53:58:17:79:67:b4:cc:9d:93:31:dc:61:ea:f9:
                    d6:7f:da:ce:13:a2:46:33:86:9f:ac:38:a2:29:2a:
                    3a:74:50:da:31:65:ad:5e:0e:55:d6:cd:a8:af:be:
                    3e:74:57:ce:2b:f2:62:fe:d9:f3:38:d9:f7:4c:b7:
                    28:5a:ca:24:ec:d4:7e:71:5a:c4:63:b5:90:90:c9:
                    da:15:20:60:63:de:36:4b:08:e9:f7:8a:65:9e:ae:
                    30:f9:e7:df:6f:b3:04:a4:d9:33:5e:90:43:b2:b2:
                    07:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:75:4C:DE:5F:1A:96:CD:FB:5D:93:43:D0:06:B5:7A:6B:70:6D:8C
            X509v3 Authority Key Identifier:
                keyid:4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:8d:64:f6:df:79:01:fc:70:40:d1:6b:fc:57:51:6f:99:a3:
         3a:21:b9:62:bd:ee:7d:90:a1:a5:0f:8c:0a:4a:ea:32:22:a6:
         1d:b8:b1:a9:39:74:08:26:5e:f6:81:eb:14:21:fe:7b:83:e4:
         cb:80:f3:8f:c8:47:a8:81:e3:b1:bf:61:c6:a2:b7:b3:58:b4:
         e4:43:da:a4:b8:ed:ec:37:b4:86:67:ad:21:2b:bb:6f:60:7b:
         ba:03:f7:ce:9c:80:95:dd:fe:cf:69:46:d5:41:e5:31:0d:fd:
         69:30:20:d5:06:a3:37:48:3d:b8:bc:b3:f1:5c:87:b6:16:13:
         d7:ec:0f:85:d9:69:3f:51:78:c3:44:f1:7a:38:d6:5c:cb:27:
         eb:df:6a:06:52:93:6c:c7:2c:b9:05:c2:51:cb:ce:2d:41:fd:
         19:c2:0e:f3:e7:a4:ae:80:29:e2:a3:8a:8d:ae:1a:fd:b2:1d:
         1c:a5:39:c2:36:5c:9b:87:3c:28:a4:30:d9:e5:ed:b0:a1:9d:
         41:1e:1b:1a:56:40:a2:1e:19:59:36:28:92:56:d5:3f:e7:14:
         3a:3d:9b:43:28:17:71:87:c8:bd:04:22:12:a0:63:3b:3a:65:
         55:4e:31:cb:e7:59:d6:80:03:d6:cf:0a:a6:c3:57:01:4f:bc:
         72:5a:02:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----