Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.mft
File:                     SwGEomKzUJ4aumGpC-yrMrACVUw.mft (raw, json)
Hash identifier:          H8EaMaFamU+CDYmg7B8fAnGQmF5H4Z6fJg09SJc5YY8=
Subject key identifier:   AA:64:7D:F9:1F:2B:65:4F:06:63:74:3C:51:D1:94:C8:85:C1:43:8F
Authority key identifier: 4B:01:84:A2:62:B3:50:9E:1A:BA:61:A9:0B:EC:AB:32:B0:02:55:4C
Certificate issuer:       /CN=4b0184a262b3509e1aba61a90becab32b002554c
Certificate serial:       01962E988C605038A9DD2A069F2E53962FD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwGEomKzUJ4aumGpC-yrMrACVUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.mft
Manifest number:          1479
Signing time:             Sun 13 Apr 2025 10:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:11 +0000
Files and hashes:         1: SwGEomKzUJ4aumGpC-yrMrACVUw.crl (hash: Xu50daDHlriVErYOegKYf/bqg/pTanCMZAbtz6af3pM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8c:60:50:38:a9:dd:2a:06:9f:2e:53:96:2f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0184a262b3509e1aba61a90becab32b002554c
        Validity
            Not Before: Apr 13 10:01:11 2025 GMT
            Not After : Apr 14 10:01:11 2025 GMT
        Subject: CN=aa647df91f2b654f0663743c51d194c885c1438f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7c:fa:6c:25:9e:51:91:7b:23:e2:61:02:d2:
                    4e:87:5c:7c:1e:49:af:44:23:bf:b9:b0:79:fe:47:
                    3d:1e:eb:16:d2:ef:2d:35:dd:ef:06:61:25:bc:72:
                    f3:2f:f2:90:7d:10:02:24:3d:e5:85:fe:a9:1c:5e:
                    ca:2b:ae:ec:a4:63:5c:01:d0:bd:fa:cb:c6:13:c1:
                    56:16:91:ab:80:41:b3:73:4c:00:77:a4:9b:fa:5a:
                    e8:b5:d6:d1:72:70:d8:af:11:8a:37:11:f9:03:55:
                    94:23:16:a3:c4:56:7e:85:b7:7c:e4:1f:d5:c4:58:
                    27:88:18:94:a4:b8:c1:0d:5d:79:97:61:7f:6d:91:
                    68:32:2b:68:0f:82:28:93:fc:d3:aa:ba:a1:48:ad:
                    a8:9e:45:10:18:00:48:54:5e:9e:43:79:99:30:0c:
                    a0:a3:19:2c:9a:df:46:6a:59:23:1b:52:bc:a3:60:
                    c8:cd:99:d8:0b:c0:60:81:78:c4:2e:8b:d5:7e:bd:
                    94:57:98:01:50:1c:92:4f:8d:50:55:95:d7:61:d3:
                    1d:f2:b6:36:9a:ec:69:6a:bf:76:68:e8:06:d1:02:
                    e8:e9:9b:67:d8:51:03:01:ac:5f:b4:40:77:4c:3a:
                    71:21:71:b2:35:b7:c5:9a:e0:21:24:bc:83:d4:09:
                    b9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:64:7D:F9:1F:2B:65:4F:06:63:74:3C:51:D1:94:C8:85:C1:43:8F
            X509v3 Authority Key Identifier:
                keyid:4B:01:84:A2:62:B3:50:9E:1A:BA:61:A9:0B:EC:AB:32:B0:02:55:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGEomKzUJ4aumGpC-yrMrACVUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:7c:86:1d:5d:a5:9d:2b:04:a2:c0:59:9f:a7:bb:6f:06:de:
         b1:b4:0a:72:c0:61:61:18:14:c0:aa:d9:85:16:43:0e:1a:b6:
         b5:12:67:3d:a1:51:d9:7a:8d:4e:54:3d:53:07:38:03:bf:23:
         7d:1d:ff:89:82:66:75:5c:8e:17:ad:79:10:f8:fe:f7:07:a6:
         af:13:9f:ec:c9:42:2b:50:cd:1e:dc:e3:6a:73:f0:3a:32:53:
         0e:11:69:78:a6:14:e1:ff:30:b0:21:b7:bc:08:87:a5:b2:d2:
         d6:ee:f2:cc:29:63:bc:07:ed:7c:ef:13:93:d1:25:02:f2:71:
         cf:1a:9e:c8:ee:e5:ce:48:3b:9d:58:6e:aa:b6:27:de:f8:50:
         be:1e:ce:83:5f:65:3f:39:ff:53:61:22:08:72:7c:b0:b0:c4:
         45:6d:4f:3b:f3:42:60:75:ce:b0:ea:ed:66:3c:cf:36:fc:9c:
         5b:b9:a0:2a:97:b3:61:9d:69:63:a9:ae:03:ff:cf:7c:0f:6d:
         cd:1f:71:73:3a:bd:d9:3f:70:23:ab:8c:a4:f5:0a:03:43:c2:
         ee:ad:e3:85:3f:35:31:70:d3:c8:3e:53:38:5d:d0:ff:28:c9:
         1a:51:f5:55:0f:34:cd:77:71:1b:7d:ce:cf:b8:8c:3b:be:ec:
         b2:2d:37:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----