Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
File:                     SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json)
Hash identifier:          /L/PaGME7euqezuiRx2j7RSsYeprF7n18k1VWs8orho=
Subject key identifier:   44:00:47:AA:30:49:32:73:4E:C9:AD:EF:C7:CC:34:67:48:36:5A:FC
Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
Certificate issuer:       /CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Certificate serial:       01962FAB8BE6D8734D10B10958C7E8947288
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
Manifest number:          04C9
Signing time:             Sun 13 Apr 2025 15:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:33 +0000
Files and hashes:         1: 2lzpTnWikk5WyPAHzu93iaXar3c.roa (hash: HljhXM+lqmgD41OyNTeAyYHbVlBeWswT04btlhRf0Vs=)
                          2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: n/p47ycNyUnixmSvCF7dLTNdZl0UBBH3vpOWN6FGahY=)
                          3: W0AAJRLr6gi2r74kS95DxTYGfTw.roa (hash: MH+HQqYFMBeGJJqR0jYHA1u1MAdvWa+AHHutk6W2MvA=)
                          4: r0aCHKZqLV95OV5gwTfYdhHbA6Q.roa (hash: xjRrpFDO8g9sZNIp8GQ1hogAG1em04ZcPXgm2d8N7a8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8b:e6:d8:73:4d:10:b1:09:58:c7:e8:94:72:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a
        Validity
            Not Before: Apr 13 15:01:33 2025 GMT
            Not After : Apr 14 15:01:33 2025 GMT
        Subject: CN=440047aa304932734ec9adefc7cc346748365afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:24:18:48:5b:30:00:59:29:a7:41:28:2c:f3:
                    85:4d:62:53:0a:8a:71:79:73:66:03:59:7d:cd:c3:
                    ca:83:68:4e:6c:fd:7b:4e:03:73:30:1b:c2:cf:b8:
                    f3:23:22:d6:bd:2f:12:94:35:a7:3e:05:e9:fb:7f:
                    15:1a:cc:a3:71:e9:a8:c9:1e:24:9e:d3:29:00:04:
                    db:f6:64:4a:7f:a9:02:0d:cc:28:51:e2:c1:f7:11:
                    20:e0:e3:99:04:dc:75:21:d4:cb:1b:87:0f:71:35:
                    9f:1b:24:ff:bc:a6:f0:bd:84:e7:f2:5f:be:39:2c:
                    81:f8:2c:75:41:2a:82:27:12:af:8d:90:11:11:62:
                    97:ec:cb:4b:45:4d:92:d8:bf:a4:a4:99:48:34:39:
                    ec:30:70:cc:ae:b9:d5:82:a9:86:2f:b5:e5:49:1f:
                    ce:1f:b3:12:df:6c:ed:c4:eb:83:ad:88:7d:39:47:
                    28:30:90:96:e4:e7:95:91:7a:50:3a:c8:07:d1:e6:
                    47:5f:f1:52:83:f3:5a:ac:9d:d5:0b:4a:93:36:79:
                    df:82:79:f4:d3:b2:35:b1:e8:f3:bf:16:8f:33:fe:
                    b6:18:e5:bc:b0:1d:9a:1e:ca:a2:83:cc:94:d6:7d:
                    8e:85:b1:d4:d4:47:80:c8:8f:fa:b9:8c:04:f7:e9:
                    af:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:00:47:AA:30:49:32:73:4E:C9:AD:EF:C7:CC:34:67:48:36:5A:FC
            X509v3 Authority Key Identifier:
                keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d5:ab:82:50:f5:1d:7f:15:ca:89:d4:65:dc:2a:ec:46:a2:
         e3:95:09:f6:e6:a7:f1:a5:a1:6c:0a:cd:90:73:a9:f6:c3:dd:
         36:33:57:41:6e:51:d7:36:01:53:78:bf:fe:8c:5c:75:42:28:
         f3:1f:7e:a9:eb:0e:30:f3:16:04:12:3b:13:2a:e7:bf:4a:36:
         22:71:c0:75:2c:be:21:db:b1:be:dc:a1:c6:ba:17:f4:66:16:
         36:ec:2f:07:c3:a0:97:ab:d7:d6:cf:b0:b1:16:70:5b:51:cc:
         9b:0c:e9:46:77:c0:c8:4e:d7:8a:83:62:3a:77:bb:42:68:86:
         03:7c:ef:3a:fa:39:90:73:2d:c3:cf:2e:06:b4:3e:02:18:40:
         00:51:8f:17:36:e7:ce:8e:43:3a:3d:f8:c0:02:8f:f9:db:a2:
         ab:b0:a0:9c:6a:7e:d3:21:c9:d0:96:69:a0:7e:ee:03:ff:a9:
         64:35:16:42:89:02:d5:c4:5e:95:0d:0d:46:a9:ad:72:e6:6c:
         5f:18:e8:26:0b:00:1d:fe:40:7b:ca:5f:76:a2:b7:5a:00:0f:
         ba:7e:3c:55:c9:de:43:88:68:02:39:bc:e0:36:0a:b2:cb:58:
         7d:67:50:59:51:47:21:45:79:d6:dc:e5:f7:45:6d:f5:87:32:
         40:39:11:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----