Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
File:                     ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json)
Hash identifier:          ygaq7RHcobZjxFYr2jW+ixghlLKkn9zo3SY8xT8QEW4=
Subject key identifier:   68:66:47:21:C0:99:70:F7:38:CF:67:EE:0F:4E:5E:CD:EE:5F:5B:0D
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Certificate issuer:       /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial:       01962F3D3462A0E9F2CF0F9EBFE3517BAA12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 13:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:02 +0000
Files and hashes:         1: 6ZwG_Y60Ty5PTqTrDlKsyphblXQ.roa (hash: vR97+OeUXCCOXRpSdGW1/Y4Sp/FefDWwnMJQ9Jni4rk=)
                          2: BGdD8LDEAedO7LkZulNO0on6BtA.roa (hash: 5JKMac3WduBMBCnJzqk90kK6WJ4PSh8kMPbmsKHD+wc=)
                          3: Bs46C8G9Xvlaiic-U_vabhAJhco.roa (hash: 3sJguMlQk0GQr3vKdqIN2WvzrXMmi6x68HlsMnn5UuM=)
                          4: D5iZPHtIHYKSLlUoRqhHam3z4fw.roa (hash: iQxb5JVe2tNY+bNton8d20CXKpbqyN/eHLh+5EoqEaI=)
                          5: Rl9152Qvb_u7j8K6moXvloqlxuw.roa (hash: 7VxgCsm28hyqe3FM8bfzznGaU0K/XnvaJIfEnQlGvZI=)
                          6: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: X20TqAm5Is6bHbIUUwXBfcJ9fDdxQSiYyQqcfXQ/WTg=)
                          7: bkbeFY-foKd3saHxL2Ms4IvaWZI.roa (hash: Pb5Tubkcy9LxO6t4tf4Rf3p3iIfsYoVtUzwvSZ29zs0=)
                          8: h13V4d_ekYYA6uv0-jBvE7ljXgg.roa (hash: 64VEKJzZ2W6+uSgCoWExxMNGZCghiQUddh02slxkwlI=)
                          9: y4ffehEhJcuHU2W4RqSmsYxzQlg.roa (hash: stMeXk1cas0IbSmXY2+Qqlw++LVpL1MZDKLPTnxrrwY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:34:62:a0:e9:f2:cf:0f:9e:bf:e3:51:7b:aa:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
        Validity
            Not Before: Apr 13 13:01:02 2025 GMT
            Not After : Apr 14 13:01:02 2025 GMT
        Subject: CN=68664721c09970f738cf67ee0f4e5ecdee5f5b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a5:6b:f8:5c:46:92:a9:69:43:1d:95:94:36:
                    23:f6:99:70:0a:8e:18:ea:05:df:de:4c:36:84:eb:
                    cb:c8:90:89:75:a9:ad:3d:85:51:22:7f:dc:9c:16:
                    8e:4e:ec:57:0c:32:93:ff:33:dd:76:11:1e:0d:99:
                    ca:42:b8:cf:ce:5c:80:86:09:16:79:00:10:6f:6c:
                    c6:c9:35:7a:dd:fc:f5:a6:85:d8:66:92:32:a1:00:
                    df:22:4b:28:be:1b:6a:da:65:5f:0a:06:43:7c:e3:
                    d8:84:28:68:b2:b8:77:78:d0:40:19:85:5f:c3:84:
                    5d:13:b1:87:f0:6f:58:60:49:4b:f6:03:9c:78:2e:
                    d8:4a:14:df:b3:5c:86:ba:dd:1a:93:26:11:f8:2f:
                    1c:0d:d9:16:bb:6e:06:fe:41:5e:1d:80:f9:5f:ec:
                    9a:1f:fe:a1:75:97:a4:b7:6a:21:28:f1:a9:cc:6b:
                    89:b7:d7:75:7e:7b:45:9b:04:97:3f:3e:f3:cc:41:
                    7b:e5:3d:21:cb:82:6c:b9:02:3a:39:01:04:66:d4:
                    3a:dd:37:3c:68:e8:98:bd:d7:b9:07:21:17:82:18:
                    b4:f7:22:87:f7:21:b4:50:f5:18:cf:b3:35:7f:9c:
                    26:fb:1a:e2:59:b4:ce:5b:7a:45:81:3c:4a:cf:3e:
                    6d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:66:47:21:C0:99:70:F7:38:CF:67:EE:0F:4E:5E:CD:EE:5F:5B:0D
            X509v3 Authority Key Identifier:
                keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a8:75:8f:33:32:ee:36:03:49:c1:d2:29:fc:9b:6c:2d:8c:
         2b:72:57:56:61:46:9e:f2:fc:c0:a9:e7:38:a6:0b:4d:74:a9:
         28:4f:6d:4d:66:e0:26:ca:9b:73:be:21:de:f9:18:63:19:f1:
         98:dd:7d:f6:e3:fd:ee:34:b4:38:0b:8e:ad:2b:f5:1d:9a:35:
         ef:2e:4a:24:96:da:01:33:07:e4:98:12:19:b4:c6:18:79:09:
         f8:b2:27:f6:33:b9:ac:e5:ad:b5:47:c7:cf:3b:22:5d:a9:36:
         d8:f1:a2:97:7b:cd:9d:b9:f7:5c:86:79:18:b3:b4:a1:e4:7d:
         6c:b0:5a:f8:cb:46:05:a7:ce:f2:86:ae:68:f9:08:39:25:27:
         88:19:1d:7d:b1:09:20:b0:63:2c:a7:83:a4:ee:8f:1d:e5:49:
         db:5d:c2:e1:d8:85:42:52:e9:0d:18:09:92:60:3b:9f:8e:d6:
         31:d9:7d:ae:89:15:28:95:38:56:b4:64:cc:4c:95:9c:df:b1:
         f7:38:cb:ee:48:04:38:41:99:80:e9:ba:ec:0f:61:34:da:88:
         af:0f:c7:db:6c:4f:c7:8b:87:24:99:8d:47:31:e7:a8:7b:04:
         50:25:19:bb:b5:af:d8:e1:ba:ba:9e:14:29:b5:74:f5:9f:fb:
         8d:f2:4b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----