Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7c08f6-de48-4483-861e-309f30a63078/1/sxkSbzPdwqJ24LNRcv5c2qsaVBY.mft
File:                     sxkSbzPdwqJ24LNRcv5c2qsaVBY.mft (raw, json)
Hash identifier:          axtwRlanO3+zhYcQ0+ZQyyth/qnVUgG4zBS3ktsMsDw=
Subject key identifier:   31:9D:D3:5B:6F:68:B0:03:F7:0E:D7:63:92:52:8B:86:E8:56:B3:A2
Authority key identifier: B3:19:12:6F:33:DD:C2:A2:76:E0:B3:51:72:FE:5C:DA:AB:1A:54:16
Certificate issuer:       /CN=b319126f33ddc2a276e0b35172fe5cdaab1a5416
Certificate serial:       01962F7470D2F8E53ECFF4878BA8693A2209
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sxkSbzPdwqJ24LNRcv5c2qsaVBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7c08f6-de48-4483-861e-309f30a63078/1/sxkSbzPdwqJ24LNRcv5c2qsaVBY.mft
Manifest number:          068B
Signing time:             Sun 13 Apr 2025 14:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:22 +0000
Files and hashes:         1: sxkSbzPdwqJ24LNRcv5c2qsaVBY.crl (hash: QjKa2pnG/CrNeOty2vtSJtuwCDg4dDw6GzEkFWLsFn8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:70:d2:f8:e5:3e:cf:f4:87:8b:a8:69:3a:22:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b319126f33ddc2a276e0b35172fe5cdaab1a5416
        Validity
            Not Before: Apr 13 14:01:22 2025 GMT
            Not After : Apr 14 14:01:22 2025 GMT
        Subject: CN=319dd35b6f68b003f70ed76392528b86e856b3a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:00:63:15:4e:f8:9a:66:39:6b:01:9b:4e:44:
                    41:65:6d:a4:63:e5:61:c4:cb:49:c7:35:69:83:c5:
                    fe:9a:97:66:8e:08:ed:8a:11:78:1a:bb:51:5f:9e:
                    5e:7b:5b:40:a3:9f:f5:cc:bc:72:ec:27:24:d3:60:
                    21:82:68:5b:d4:57:10:11:02:c7:27:f7:c1:95:2d:
                    79:b7:db:86:26:72:dc:4f:b6:d2:59:c7:c1:eb:e1:
                    39:d6:8c:5e:e4:df:9a:fd:bd:99:b9:bc:a3:a8:bb:
                    90:93:9d:d9:b7:9a:6d:c4:92:5b:f0:13:6d:96:f7:
                    01:1b:28:11:e2:1c:93:ed:07:41:1c:8d:4e:65:03:
                    7b:83:9b:02:9d:cf:02:b5:44:be:ee:99:57:eb:f4:
                    d8:eb:36:38:8d:ee:bb:0e:3a:70:30:c4:d4:6d:90:
                    ed:5f:c1:36:31:e5:ec:d3:62:7d:5f:e6:73:34:64:
                    7d:33:43:8a:7e:0f:91:46:fc:af:f5:fa:87:3b:be:
                    53:f9:5f:6d:95:73:e4:e2:75:f3:c4:d5:cc:b4:86:
                    97:0c:f4:e2:43:a2:35:70:36:63:39:42:00:d0:3a:
                    26:df:48:3f:af:84:ab:a1:c2:77:d3:5b:4d:c1:72:
                    63:45:32:83:28:44:42:b8:e9:6a:53:aa:ec:04:75:
                    e9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9D:D3:5B:6F:68:B0:03:F7:0E:D7:63:92:52:8B:86:E8:56:B3:A2
            X509v3 Authority Key Identifier:
                keyid:B3:19:12:6F:33:DD:C2:A2:76:E0:B3:51:72:FE:5C:DA:AB:1A:54:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxkSbzPdwqJ24LNRcv5c2qsaVBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7c08f6-de48-4483-861e-309f30a63078/1/sxkSbzPdwqJ24LNRcv5c2qsaVBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7c08f6-de48-4483-861e-309f30a63078/1/sxkSbzPdwqJ24LNRcv5c2qsaVBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d1:f3:b8:a9:a9:d6:00:dc:00:5f:28:9e:57:7c:5b:53:11:
         35:94:cc:17:4f:8e:d1:eb:d9:71:5e:2f:ea:8c:1a:d7:fe:80:
         31:50:ec:a3:60:f5:9b:b0:6a:80:2c:f4:7a:c8:5c:b1:16:a9:
         2c:42:8e:36:12:6d:a8:69:b7:7c:4a:f3:67:33:be:46:13:b6:
         cc:ee:6d:1c:3f:09:13:24:84:bc:06:da:4c:c2:52:62:df:b8:
         98:72:2e:d7:bb:e7:a5:bc:50:91:a9:a6:0c:28:01:02:5f:cd:
         d9:f2:40:bd:fd:a0:1c:1e:b1:55:6f:93:44:52:8c:c2:82:c0:
         dd:38:99:df:90:88:68:69:bd:c3:b0:eb:89:5b:ce:06:69:03:
         08:17:b5:a9:63:ae:bb:f9:6c:cb:d7:39:86:25:9f:64:a1:db:
         d4:15:61:f2:40:ff:97:f7:cc:39:0b:66:5b:ca:47:8a:84:34:
         b9:12:f3:3c:01:3f:00:54:f4:24:6d:3c:72:89:b6:42:9f:e8:
         53:2f:9e:b4:f8:22:ef:47:c4:7d:85:a9:4e:27:25:30:96:7a:
         ad:62:25:92:52:66:5d:1a:85:d8:4a:88:2e:cc:97:6b:19:a6:
         52:04:3b:70:81:02:05:c7:45:ae:40:4a:ef:a3:7a:fb:11:53:
         22:16:bf:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----