Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft
File:                     sxwNSGRgtxY3A-X_TYre2XiIx00.mft (raw, json)
Hash identifier:          w7Ss1kTY72fV8NuQdQpcQJKNeLCQGxiVeQP591roeFU=
Subject key identifier:   9D:58:4E:E8:71:F0:09:23:3B:8B:55:21:DB:5B:16:4A:FF:83:D5:A3
Authority key identifier: B3:1C:0D:48:64:60:B7:16:37:03:E5:FF:4D:8A:DE:D9:78:88:C7:4D
Certificate issuer:       /CN=b31c0d486460b7163703e5ff4d8aded97888c74d
Certificate serial:       01962DF44951CCEF34AABE6FBB53392DED3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sxwNSGRgtxY3A-X_TYre2XiIx00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft
Manifest number:          069E
Signing time:             Sun 13 Apr 2025 07:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:46 +0000
Files and hashes:         1: sxwNSGRgtxY3A-X_TYre2XiIx00.crl (hash: 66ms2qawu6R8GD69MqiBSsL4zivX8Z7MBuwdBWiD+qY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:49:51:cc:ef:34:aa:be:6f:bb:53:39:2d:ed:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b31c0d486460b7163703e5ff4d8aded97888c74d
        Validity
            Not Before: Apr 13 07:01:46 2025 GMT
            Not After : Apr 14 07:01:46 2025 GMT
        Subject: CN=9d584ee871f009233b8b5521db5b164aff83d5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:30:d6:90:ef:ac:9d:99:7a:92:53:fe:1d:bb:
                    9b:48:8a:73:c1:1b:b1:b7:0a:c3:7f:d1:51:03:41:
                    d2:a2:d0:18:2f:85:4c:69:a4:2c:6a:3d:0d:21:7a:
                    3d:14:21:4d:ae:2f:78:d5:28:e8:9c:90:57:4c:9e:
                    e8:7a:9b:32:ff:d3:67:8d:8e:93:99:99:e0:2c:f7:
                    1d:f1:34:7d:a7:de:a1:90:f6:48:e3:0e:a0:7a:ab:
                    e3:48:8d:7e:fc:1e:0f:ad:55:f2:1f:31:a4:04:f6:
                    67:de:57:0f:b3:b2:a3:5e:0e:04:a1:81:7b:a3:f0:
                    bd:03:63:21:fd:34:b5:c7:af:fe:37:26:02:47:91:
                    82:f2:75:8c:e7:49:8c:b6:5f:6f:01:a9:48:ec:ac:
                    78:98:f2:a3:45:87:59:17:46:00:d3:7f:41:ba:36:
                    0c:e8:d3:92:3a:2b:11:5e:92:92:b9:04:f8:11:a1:
                    99:93:db:3f:15:03:8d:ab:3f:16:89:23:5a:09:93:
                    71:21:33:35:be:74:7b:0d:82:1a:c9:eb:98:e9:93:
                    fa:b6:ee:ba:28:96:43:9a:99:75:3e:6f:62:b6:ab:
                    31:c2:43:54:01:fa:64:d4:d9:d4:55:3c:68:c6:75:
                    8c:33:45:e0:46:d7:b0:23:41:77:ff:3c:ab:0b:f7:
                    17:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:58:4E:E8:71:F0:09:23:3B:8B:55:21:DB:5B:16:4A:FF:83:D5:A3
            X509v3 Authority Key Identifier:
                keyid:B3:1C:0D:48:64:60:B7:16:37:03:E5:FF:4D:8A:DE:D9:78:88:C7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxwNSGRgtxY3A-X_TYre2XiIx00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:27:5b:5c:61:0b:49:6c:e3:35:67:e3:86:82:4a:8a:57:2c:
         d8:6e:3b:57:fb:ac:e3:d0:e3:ce:45:92:a5:02:d7:1f:dc:25:
         3a:3b:be:31:f8:c1:3f:7c:c2:05:dd:2d:43:8d:75:7d:c7:bc:
         2e:32:a3:a2:c7:ab:66:65:dc:31:47:8a:bf:50:ed:5d:1d:f1:
         72:8f:9d:e9:73:de:42:51:16:0c:28:fb:2b:c9:fe:13:69:bd:
         88:8f:e1:e1:70:b3:2a:ed:9a:43:53:29:75:a7:13:a4:2f:fd:
         87:0e:1c:e3:8e:e4:98:d2:b6:aa:63:eb:76:f6:d4:a3:58:15:
         f7:70:37:d1:35:32:06:36:c8:80:11:6d:df:cb:c2:78:18:54:
         a8:0b:2c:42:13:06:ba:24:32:b5:74:4f:01:c3:11:6a:fc:54:
         3e:43:53:cc:c6:db:a4:d1:0a:9f:f3:09:1d:58:39:51:1e:a6:
         e0:37:a2:e0:8e:11:cb:2f:9f:fd:b1:92:02:da:52:17:83:aa:
         79:a2:92:41:18:49:97:d4:8b:b8:27:8c:09:f8:af:85:c0:f0:
         3c:5d:b2:3d:7d:54:26:fb:92:e5:24:fc:61:a0:d0:78:b8:b3:
         55:83:29:5a:73:9b:71:6d:0d:0a:7c:79:b8:60:f6:69:73:b8:
         8b:ab:9e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----