Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
File:                     rSRGM37TPO3jTe_1VxBdxxwDqRY.mft (raw, json)
Hash identifier:          YEhdbSRIz68aJLZPdP4ka1B7ISpVhFO1pfdns/ku7F4=
Subject key identifier:   6D:9D:90:F2:0D:5A:EB:0A:F2:3D:F3:71:33:D7:C6:53:74:47:CC:E8
Authority key identifier: AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
Certificate issuer:       /CN=ad2446337ed33cede34deff557105dc71c03a916
Certificate serial:       01962E98B8CEF928B9DF88A95734364BC88E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
Manifest number:          047B
Signing time:             Sun 13 Apr 2025 10:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:22 +0000
Files and hashes:         1: rSRGM37TPO3jTe_1VxBdxxwDqRY.crl (hash: gXaIueMhvhHrGyOkn1DoYm5wjvZK8JSsw7H28Rn79yE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b8:ce:f9:28:b9:df:88:a9:57:34:36:4b:c8:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad2446337ed33cede34deff557105dc71c03a916
        Validity
            Not Before: Apr 13 10:01:22 2025 GMT
            Not After : Apr 14 10:01:22 2025 GMT
        Subject: CN=6d9d90f20d5aeb0af23df37133d7c6537447cce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:66:e4:b1:c0:c4:a7:e3:bc:7f:dc:40:12:77:
                    40:81:f0:01:b9:bd:75:a4:21:d4:49:16:8b:8c:ed:
                    5b:59:68:f8:19:54:02:4d:8d:4f:ef:b9:dc:e3:c4:
                    a7:d9:ff:55:a9:41:40:1b:85:24:a8:fd:6d:d5:dd:
                    f9:5a:1d:3a:4a:a8:2b:fe:63:24:c2:35:29:87:70:
                    0e:fe:b6:5c:6a:9b:b2:fa:e3:a8:5d:3c:2c:c5:c1:
                    93:8d:6a:cd:eb:71:e9:23:ce:8a:72:3b:ab:dd:4c:
                    74:5e:35:24:d5:ee:12:eb:57:b2:20:92:ae:f6:40:
                    fb:9f:1b:9f:1d:eb:26:1c:5f:82:ed:7a:ff:54:ee:
                    5d:b9:8f:33:5a:31:97:cc:e7:b9:8f:d9:7c:2b:72:
                    0a:d9:ad:fb:ce:10:4b:b2:f1:e2:0c:74:f2:af:e2:
                    50:3b:18:54:7a:2a:80:54:bb:93:e4:47:f7:a2:ba:
                    9d:4c:de:64:c0:c8:1a:ed:b5:d0:03:fa:48:ea:f0:
                    43:de:42:7f:e9:0c:d7:ad:ae:8d:41:a3:73:fe:06:
                    c6:02:8a:ac:43:80:e0:c6:95:cc:61:82:50:49:67:
                    6b:fd:af:d4:6b:ac:21:20:2c:d6:ce:6c:a3:67:37:
                    c7:9c:2f:2e:8f:3f:79:ad:bd:95:c9:b2:9d:4f:ed:
                    5e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9D:90:F2:0D:5A:EB:0A:F2:3D:F3:71:33:D7:C6:53:74:47:CC:E8
            X509v3 Authority Key Identifier:
                keyid:AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:95:7d:bd:cd:c0:1e:bf:f9:ec:9f:78:5c:5c:ca:38:6f:80:
         45:db:a5:a6:b0:8f:85:28:65:91:f5:2b:a0:ff:5f:07:8b:3f:
         21:da:4b:1f:8c:c5:a1:35:39:a3:61:bc:2f:f6:af:08:c9:84:
         e0:f8:b0:2e:44:da:6a:6f:bf:7f:c7:a5:f1:7c:7a:a0:e1:e5:
         ab:e7:04:61:20:77:6e:39:59:55:90:99:aa:ee:0d:5b:c2:5a:
         40:ae:4c:62:01:80:32:45:a3:35:ed:29:be:2d:cd:31:07:49:
         28:13:ea:28:bd:cc:92:4b:d7:94:91:f7:f0:fa:b5:8d:cd:e8:
         f8:01:c2:c3:f1:cd:bc:50:1c:37:a4:5e:57:74:25:d7:da:ec:
         5f:01:b1:38:af:67:6d:e9:ed:e6:cf:1f:03:a0:30:68:89:98:
         0e:7c:14:76:cb:58:4b:6b:8f:8f:5f:54:78:64:85:c8:29:9f:
         3a:07:6b:04:d8:e1:a6:f0:f6:28:f0:ee:d7:bf:37:92:3e:64:
         c8:46:8c:75:14:d8:87:de:f0:f9:ed:4c:20:64:a4:7c:a1:3a:
         b4:19:77:c3:9a:d8:2a:e9:58:51:99:98:f6:a0:f9:22:8a:bc:
         ca:6f:3d:25:df:c3:73:37:16:3f:d2:06:0d:56:29:6d:c1:b3:
         b1:3a:91:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----