Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/SBSBzADX9j-XwTNtMriQXBUA_CI.mft
File:                     SBSBzADX9j-XwTNtMriQXBUA_CI.mft (raw, json)
Hash identifier:          aZcdV4Ha9dSDwvK6WjXTppD+rhyKPoeXK5i75NhY8t0=
Subject key identifier:   54:97:DA:49:8D:AF:34:41:45:8C:88:DF:28:BA:15:0F:3D:02:F6:4A
Authority key identifier: 48:14:81:CC:00:D7:F6:3F:97:C1:33:6D:32:B8:90:5C:15:00:FC:22
Certificate issuer:       /CN=481481cc00d7f63f97c1336d32b8905c1500fc22
Certificate serial:       018F7BB42052A5A6D3FA75699B38173B04A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SBSBzADX9j-XwTNtMriQXBUA_CI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/SBSBzADX9j-XwTNtMriQXBUA_CI.mft
Manifest number:          1172
Signing time:             Wed 15 May 2024 10:02:33 +0000
Manifest this update:     Wed 15 May 2024 10:02:33 +0000
Manifest next update:     Thu 16 May 2024 10:02:33 +0000
Files and hashes:         1: 9dwpiiaaj6KExiaa3NC6g2tooaw.roa (hash: yvXH63Ewyuzs4DiDHa7BXvurrXOtUn55NG/tcbSHqMU=)
                          2: SBSBzADX9j-XwTNtMriQXBUA_CI.crl (hash: 4ZvMgGeK9CotsizeJcZAt7fpg7E+TUUAHXMDa4GG/PE=)
                          3: eiusiTzYnZPoghDJbJyUmFYakgA.roa (hash: ifYg46Ba1fWz4cB0jE9OzNlxApYxM/qO7tWixa2tybU=)
                          4: rQxSem1-Kj3lg-5PuXfuF7SI9yQ.roa (hash: PeZFKxQ+WDQbNeE8rcL9c4ZvVFWR4TshAcX7Pq7P7tI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7b:b4:20:52:a5:a6:d3:fa:75:69:9b:38:17:3b:04:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481481cc00d7f63f97c1336d32b8905c1500fc22
        Validity
            Not Before: May 15 10:02:33 2024 GMT
            Not After : May 16 10:02:33 2024 GMT
        Subject: CN=5497da498daf3441458c88df28ba150f3d02f64a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:4e:c0:83:8c:65:4d:ff:51:a0:6e:8f:e2:
                    d1:fc:e7:c3:3a:0a:bd:e4:cb:b1:8b:ac:a0:7c:5d:
                    00:83:63:2c:49:9c:6c:5f:ed:ac:b0:1b:8f:20:1e:
                    fb:e2:35:15:67:f6:82:02:bf:9d:67:5a:54:91:8f:
                    b0:ac:ed:d3:86:0e:71:8e:5f:bd:eb:ca:5a:66:b9:
                    ea:5a:e3:14:f6:a8:fb:60:df:57:dc:64:d8:59:8d:
                    b3:2b:cc:f2:18:6a:48:8b:d5:9e:ce:f7:9c:ad:a2:
                    ed:3f:49:9a:6c:9a:fc:03:46:79:05:61:78:08:94:
                    79:88:c7:2e:ff:2a:cf:d8:a3:11:7e:88:45:d9:64:
                    76:9e:d6:f8:d4:30:d7:5a:83:79:1a:8b:3b:a9:30:
                    89:29:65:cd:2c:05:63:3f:0c:20:d7:c6:56:04:dd:
                    71:af:88:56:fe:4c:23:bc:3d:c6:89:2e:a5:74:d5:
                    57:54:3e:79:2e:13:a3:dc:42:9f:15:a5:88:63:43:
                    fa:5e:ab:45:a6:30:df:8c:1f:6d:0f:73:69:94:72:
                    4e:a3:b4:da:d2:28:b4:17:17:cb:34:82:e2:2f:fd:
                    6e:5c:7b:00:f4:31:16:a0:b9:27:7e:c1:d2:f3:e6:
                    5a:2d:92:56:04:59:51:70:62:b3:dd:c0:15:59:2f:
                    8d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:97:DA:49:8D:AF:34:41:45:8C:88:DF:28:BA:15:0F:3D:02:F6:4A
            X509v3 Authority Key Identifier:
                keyid:48:14:81:CC:00:D7:F6:3F:97:C1:33:6D:32:B8:90:5C:15:00:FC:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBSBzADX9j-XwTNtMriQXBUA_CI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/SBSBzADX9j-XwTNtMriQXBUA_CI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/SBSBzADX9j-XwTNtMriQXBUA_CI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d0:2f:fe:f6:c1:ae:b9:8f:2f:18:7b:4f:ff:70:92:7c:c7:
         c4:1e:e9:63:3e:56:d5:39:8b:7f:c2:bc:9b:aa:80:0f:a5:6f:
         1e:0b:9b:ee:ad:9e:5c:08:fa:3e:f4:7e:df:0c:05:bb:13:6f:
         ec:c5:aa:3b:8b:99:cc:f2:1c:c2:f2:1f:1b:d3:a9:89:92:45:
         2e:e6:b9:9f:f9:41:d7:ab:28:4a:4a:81:95:77:b8:7e:2d:75:
         d2:a1:df:e5:5a:69:01:8f:eb:47:20:81:42:c2:d5:ca:70:f2:
         16:ef:6b:a8:f4:f4:ee:36:8a:b5:ef:77:35:eb:08:9b:84:47:
         87:d7:c2:5c:7b:39:5a:6b:97:0d:88:e1:65:f9:d7:13:7e:e7:
         a8:8b:f5:5f:28:1b:a1:53:8a:1e:2f:1a:2b:2f:8d:dd:7a:4b:
         4f:50:ff:46:66:f0:8d:91:1d:d2:48:55:58:2e:1c:d0:f3:95:
         37:e6:4e:5c:9c:9f:71:39:26:1b:8d:8d:53:04:0d:72:fe:c9:
         51:87:f6:ad:4a:42:11:dc:f0:fc:db:89:38:51:1f:63:b9:c6:
         f9:d6:a1:c2:3c:8a:5d:7b:70:91:31:95:79:1e:94:79:cd:6b:
         01:01:88:98:5f:85:ad:ef:40:9e:99:7d:61:23:21:55:c4:08:
         9a:65:4b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----