Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
File:                     SeMF15ys2--_HoMrNNfAa7tfYno.mft (raw, json)
Hash identifier:          y1HPtwxjd1TpAZdueYYeMKvhS6qwEwVASB4ET8lw0v8=
Subject key identifier:   67:4F:A2:23:B9:3C:3C:22:49:BA:84:0E:D6:89:8C:EB:5E:2E:0E:FC
Authority key identifier: 49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A
Certificate issuer:       /CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a
Certificate serial:       01962E987CE76287FE7768602A4C51D8C7FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:07 +0000
Files and hashes:         1: SeMF15ys2--_HoMrNNfAa7tfYno.crl (hash: Nd1/5LFO1h0fi0HbSQOKMHiY02UE9kGzFkTResPltBk=)
                          2: aCk5yRvbKuue3ENXzksiDKszHOM.roa (hash: gF9bCRgORNZDjS/+hA/hEjcZSXZaNJqm2ogN9Lhnwwg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7c:e7:62:87:fe:77:68:60:2a:4c:51:d8:c7:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a
        Validity
            Not Before: Apr 13 10:01:07 2025 GMT
            Not After : Apr 14 10:01:07 2025 GMT
        Subject: CN=674fa223b93c3c2249ba840ed6898ceb5e2e0efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7b:d5:31:38:85:f4:05:67:50:e5:0b:1f:a8:
                    a2:51:b7:1c:79:0c:b3:13:42:fc:a5:6b:53:27:ed:
                    46:d9:73:65:52:05:c2:9a:cb:51:ec:6c:87:07:cf:
                    c3:77:68:f1:7b:fc:71:ef:a6:0e:10:ad:5b:d8:42:
                    f6:22:da:c3:3f:16:9d:e1:03:d9:69:65:30:72:39:
                    77:6d:e5:2a:c8:7a:05:da:b3:af:20:f0:a0:06:0e:
                    0d:a5:4e:26:8d:d2:0d:e8:a8:da:7a:8f:ee:34:e3:
                    d4:bd:88:05:1a:c4:64:ce:12:c7:bb:fb:b7:87:6d:
                    1e:49:3f:c2:09:0c:82:19:01:0c:a4:2c:ba:6d:91:
                    8c:73:f8:58:28:04:c3:7c:dc:a8:ba:b4:65:e7:3b:
                    4a:96:be:3b:1a:ee:25:01:06:d4:37:73:9f:fa:23:
                    b3:1e:9b:f2:18:9e:fc:79:1f:ab:8e:e4:fa:0b:49:
                    e5:85:04:67:b3:36:96:22:8f:7d:1e:10:8b:33:c6:
                    8d:4d:ef:55:0c:f2:e3:f5:fb:dd:a4:af:16:2f:9c:
                    f5:8f:73:0d:c9:11:97:70:62:ae:ec:fc:3f:e1:35:
                    22:49:b1:d3:e1:3a:c9:9b:4f:da:c3:41:79:71:cc:
                    42:8b:6b:9c:f0:7b:a4:0a:d4:24:0c:46:62:51:d3:
                    c0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4F:A2:23:B9:3C:3C:22:49:BA:84:0E:D6:89:8C:EB:5E:2E:0E:FC
            X509v3 Authority Key Identifier:
                keyid:49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ce:94:24:34:d2:53:3a:f0:47:b3:ca:68:01:85:2e:ef:e6:
         80:f4:4f:06:f9:8b:4f:9f:e3:29:e4:fe:51:bf:85:1a:59:a5:
         e6:30:70:41:e2:b2:89:06:54:4f:35:24:73:0e:89:49:bc:a9:
         41:c0:80:24:94:59:9b:bd:c0:4d:ef:7c:ed:15:72:68:18:ad:
         d7:f5:29:22:15:38:1d:e5:10:6b:af:97:84:4f:fe:b1:cc:ff:
         b2:2a:da:7c:c9:2a:a9:06:02:ae:af:bd:72:b5:28:48:39:0f:
         99:31:f1:fc:dd:82:af:9b:ac:c3:79:95:4c:01:e3:e6:8e:4b:
         91:8f:48:9f:20:e1:9f:f4:09:3a:59:da:49:42:c7:65:dc:ec:
         84:db:08:a5:02:58:ed:9d:04:ea:60:96:31:5b:46:88:03:71:
         4c:1a:a3:77:e6:12:de:27:60:0e:ae:85:f6:1c:17:43:b2:0f:
         6c:e3:12:90:55:8a:f6:55:2e:31:e0:78:35:9f:d9:11:61:19:
         8b:f0:19:53:b8:62:ea:d2:93:7e:11:0e:25:f2:83:a4:e9:22:
         98:68:99:fa:4f:20:b2:14:37:df:b6:26:a5:36:48:99:99:4f:
         d1:a4:ef:e9:c2:29:d4:1a:96:e3:3a:9b:30:70:d1:52:1f:13:
         6a:60:22:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----