Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
File:                     SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft (raw, json)
Hash identifier:          DMU7bNHvsjRvMWG44cizOG402wM8123vfL+5QmKG6yI=
Subject key identifier:   2A:BB:EC:AD:5D:79:9D:5E:19:76:6E:83:72:FE:C8:6F:83:8E:0C:7B
Authority key identifier: 49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
Certificate issuer:       /CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Certificate serial:       01962E98FA8E62C5AA48D422043AD18374F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
Manifest number:          0E9D
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl (hash: phkuoQdXUkg60semQiq1yu7tTjhiA0tHShMX1KgdHLM=)
                          2: loSCgoJ4hKRK0jtudHBRcmTN9d4.roa (hash: URCezxxo5xLAhnqyK4BChNtSek6R2eu9KtpYGfArpvI=)
                          3: nggdnA4mAiKLiw6UHtzESJ0klE0.roa (hash: pHSsRZvm29dKmGcn5inpqu8Q9t703aQ9huVnyG7i37U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fa:8e:62:c5:aa:48:d4:22:04:3a:d1:83:74:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4940cf778dd9817657cd8d4feedd423d46d1a965
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=2abbecad5d799d5e19766e8372fec86f838e0c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:db:35:af:d4:45:f8:02:b2:52:5e:38:d5:22:
                    5c:67:91:b4:56:bd:18:21:70:2e:2d:33:16:93:c6:
                    c4:82:98:bd:37:2a:0e:f0:21:bd:fe:24:c9:39:4c:
                    ac:eb:ce:5e:ca:8d:79:2f:8d:07:7d:63:10:ee:8b:
                    c9:33:b5:7c:66:a6:e4:40:69:99:4c:77:28:3c:1a:
                    6c:33:4b:91:93:eb:ff:03:82:ab:5d:dd:aa:34:aa:
                    9b:d0:a4:b2:8d:f6:4d:96:ec:c4:82:1e:bc:21:a7:
                    7a:fc:8d:c5:bf:fa:a1:67:3a:39:d7:bc:dc:0e:fd:
                    a8:c2:e6:7d:23:34:03:f3:55:35:6d:06:4b:04:a0:
                    fe:aa:f9:cb:a0:62:f0:76:ee:77:d3:80:29:91:8c:
                    db:af:5c:65:1f:23:12:49:5d:b3:59:f2:bd:bb:5d:
                    38:10:87:de:78:0d:06:3c:b9:60:33:81:2e:b1:31:
                    3b:d7:f0:d0:6b:8c:03:7c:4a:62:27:10:7e:e2:8a:
                    82:ca:d8:d4:39:29:e0:38:ad:23:3e:38:69:ed:ef:
                    ea:17:9c:b1:07:ac:1f:e3:80:bd:ca:b5:d5:87:fd:
                    e7:90:fe:2b:4b:3e:08:24:d1:41:25:43:b1:47:08:
                    b1:62:b9:23:12:09:95:52:18:92:9a:22:b4:a4:9e:
                    e0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BB:EC:AD:5D:79:9D:5E:19:76:6E:83:72:FE:C8:6F:83:8E:0C:7B
            X509v3 Authority Key Identifier:
                keyid:49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e2:ff:41:81:e3:09:d8:54:33:01:06:1a:0b:1b:1e:3a:12:
         b0:5e:b3:36:b4:60:d6:9b:cd:8c:ca:5c:1a:15:4b:fb:7c:48:
         4d:80:b3:df:e8:f4:d7:b7:42:76:5b:70:92:e1:89:92:61:84:
         dc:14:05:8a:23:97:ac:6f:0f:06:39:e6:ca:51:c1:db:e8:09:
         66:f6:fe:3c:1e:7e:c9:0f:73:53:a4:00:35:f8:4c:a0:2b:a1:
         97:99:a5:bf:7d:93:f8:7a:fd:3d:60:ff:95:69:b8:ce:a8:2c:
         f8:8e:39:eb:08:7e:d0:a5:f8:9f:56:90:bf:9a:c3:85:12:3b:
         af:ff:9e:ee:1a:95:8a:7e:7a:1a:df:f3:e6:9e:b4:e1:f1:7a:
         ea:d6:9b:a2:f8:31:89:08:39:6c:6c:6a:da:8c:e3:f8:1d:57:
         2b:3e:b7:22:ed:ce:10:33:be:b1:37:e7:89:23:fb:28:6a:a2:
         ec:58:ed:1b:c6:f7:68:b7:a4:9b:37:d4:3f:67:63:4a:f5:33:
         1a:b0:e0:3a:e1:c6:cd:5f:8e:79:85:87:10:98:5d:2d:cf:3a:
         3a:a6:d6:25:40:35:4e:3b:68:cc:84:70:53:45:31:3e:8e:f8:
         88:85:b7:2d:c7:85:10:1f:1c:a4:f6:65:20:36:f5:a9:bb:d3:
         0f:6d:26:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----