Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
File:                     SwzK47EZgtZx464payKbCvw1mwc.mft (raw, json)
Hash identifier:          ++o040VpaQ2rfauAeHAiSf/TgKLZs+W/56YoG6P8msM=
Subject key identifier:   6E:64:2E:5E:4B:5D:E1:80:15:8B:76:32:F3:3A:BE:49:A4:09:12:84
Authority key identifier: 4B:0C:CA:E3:B1:19:82:D6:71:E3:AE:29:6B:22:9B:0A:FC:35:9B:07
Certificate issuer:       /CN=4b0ccae3b11982d671e3ae296b229b0afc359b07
Certificate serial:       01962DF3F8C6CAB0EE4C4B4C01E301537759
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwzK47EZgtZx464payKbCvw1mwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
Manifest number:          0EE2
Signing time:             Sun 13 Apr 2025 07:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:25 +0000
Files and hashes:         1: SwzK47EZgtZx464payKbCvw1mwc.crl (hash: J0DNczmMNeH95QWwICsFl8mBSxZP5XxzJ6mrQt7cElg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f8:c6:ca:b0:ee:4c:4b:4c:01:e3:01:53:77:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0ccae3b11982d671e3ae296b229b0afc359b07
        Validity
            Not Before: Apr 13 07:01:25 2025 GMT
            Not After : Apr 14 07:01:25 2025 GMT
        Subject: CN=6e642e5e4b5de180158b7632f33abe49a4091284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ad:ec:f3:ec:7f:d7:ae:2e:f5:c8:2c:24:a4:
                    62:f1:3d:56:70:8e:4e:f5:b1:b8:e6:0f:0c:20:47:
                    0e:50:e1:c9:96:57:14:d3:5e:53:1f:54:00:07:f4:
                    14:b0:c9:57:cf:d7:3d:17:74:59:94:98:1a:96:70:
                    26:03:1a:0d:80:00:48:05:35:3a:25:a8:29:7b:57:
                    f5:38:f2:20:4e:d9:86:69:eb:78:57:2c:fb:85:48:
                    fd:e5:5b:7f:8c:7c:ac:42:4a:40:34:29:89:8c:7f:
                    80:b8:73:18:14:b9:d6:7b:e4:3b:51:54:51:ac:f5:
                    d9:1f:bc:b3:f8:60:34:f5:d9:17:29:38:48:bb:a6:
                    e5:0f:c3:60:6c:b0:9d:d9:37:60:56:20:16:c8:96:
                    b8:10:8b:e5:79:ff:12:57:d3:d8:8f:08:5a:f6:15:
                    7c:26:04:f1:8f:13:b7:3a:55:92:04:ea:15:aa:bc:
                    5f:15:5d:f9:aa:a5:2d:9b:e0:4c:f8:8d:b2:3b:5b:
                    42:1c:fb:b2:90:b0:ec:b9:de:cc:ee:a4:37:2c:cb:
                    db:07:7a:8e:3c:ac:39:37:49:cb:3e:84:7a:25:2b:
                    b2:1f:eb:f2:51:76:72:85:6d:f2:7b:63:e5:ab:74:
                    16:34:d8:c1:0b:53:04:63:3d:80:d3:47:e7:8e:3a:
                    35:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:64:2E:5E:4B:5D:E1:80:15:8B:76:32:F3:3A:BE:49:A4:09:12:84
            X509v3 Authority Key Identifier:
                keyid:4B:0C:CA:E3:B1:19:82:D6:71:E3:AE:29:6B:22:9B:0A:FC:35:9B:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwzK47EZgtZx464payKbCvw1mwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e8:54:ee:06:93:53:d3:1a:73:6a:b3:34:79:9d:89:f0:19:
         49:f9:ef:53:39:96:de:c0:b4:d3:b1:9a:c5:58:70:ce:60:92:
         69:f5:f3:77:14:9d:e4:93:13:e0:cb:7b:2f:f0:af:bc:15:d8:
         2e:87:22:44:26:de:9b:76:6e:64:5b:05:e2:4a:30:92:14:b1:
         84:d7:20:e5:c2:a6:91:e8:da:10:03:41:8d:7c:bd:a2:56:82:
         9f:ca:37:ed:86:7c:12:dd:c9:05:5f:e2:4f:47:5d:09:ce:65:
         17:de:9c:bd:de:12:36:cf:0d:0f:02:cd:ec:e1:56:2d:c7:5a:
         0c:36:90:05:99:90:6a:67:6f:13:23:6c:02:f9:e2:04:fe:0a:
         a2:15:eb:6c:10:70:84:2a:21:a7:9b:a2:25:0d:96:0e:32:49:
         57:74:b7:46:a7:db:23:f9:71:d2:6e:a2:c9:f1:80:c8:aa:68:
         f7:b8:27:9d:6c:54:e8:45:b8:0b:7d:67:e4:27:19:4f:59:f8:
         f1:de:82:5d:39:4e:54:44:80:8d:69:ab:3a:49:19:43:00:ad:
         bd:f5:1c:55:65:6d:96:72:61:dd:af:d9:62:89:c5:12:a1:e9:
         2a:0c:1d:81:51:d4:de:a7:6b:b3:2f:32:80:9d:db:31:aa:46:
         63:63:89:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----