Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
File:                     sjQvyZcw8qNNCe5LXukheHVs1NE.mft (raw, json)
Hash identifier:          ZYZ2aXWfpOSRUNwYnLcTReRyOy3B5j3YyzwTV09mxmI=
Subject key identifier:   25:CC:44:F5:47:F2:48:E1:7E:FE:CD:15:25:10:D0:BB:00:02:B8:0F
Authority key identifier: B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
Certificate issuer:       /CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Certificate serial:       01962E991D3D387B2BC2195D1EA024A5F00D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
Manifest number:          0596
Signing time:             Sun 13 Apr 2025 10:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:48 +0000
Files and hashes:         1: sjQvyZcw8qNNCe5LXukheHVs1NE.crl (hash: 1J6K2KsEKp/osxnQJqd25oaC9cHjXp+6OQy1kDzw67Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1d:3d:38:7b:2b:c2:19:5d:1e:a0:24:a5:f0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
        Validity
            Not Before: Apr 13 10:01:48 2025 GMT
            Not After : Apr 14 10:01:48 2025 GMT
        Subject: CN=25cc44f547f248e17efecd152510d0bb0002b80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:72:ce:c2:1f:f4:08:e4:68:0f:04:80:81:80:
                    04:10:bb:5d:9f:41:ef:57:63:0f:05:4d:03:d6:13:
                    1b:d9:a1:ee:45:b1:cf:7f:09:4c:5b:80:f5:73:50:
                    a8:f7:82:b7:79:61:07:08:c6:44:1c:e1:68:8d:70:
                    d4:ae:af:75:3e:0a:b4:08:94:4d:78:18:23:70:6b:
                    b3:32:35:2d:f3:e7:68:86:20:26:ff:d8:39:26:b3:
                    e4:e5:64:1f:7a:0f:9d:05:8d:68:7b:d2:10:5b:71:
                    41:96:4a:26:93:1c:78:95:ae:ef:50:67:54:c5:55:
                    4b:c8:57:c3:60:34:58:e7:3e:3d:03:90:ee:ba:27:
                    d8:23:99:61:62:20:fe:02:72:c4:57:5d:df:d5:78:
                    c1:85:dc:d4:02:75:9d:b8:d0:ab:4f:05:f3:a3:71:
                    1c:2c:61:bd:9b:f3:f4:50:e6:a7:97:c5:a2:f7:c2:
                    66:5e:26:59:8e:5e:bb:eb:cd:5d:4f:ea:44:61:82:
                    c9:7e:5c:a3:a6:ae:80:b6:d1:85:47:99:b4:60:55:
                    26:c2:29:f1:d4:83:ab:25:c8:6c:11:81:5b:f0:80:
                    4e:85:74:06:b6:04:4f:7e:b1:e2:1f:7a:4a:35:20:
                    3d:e6:00:3f:e1:f6:13:38:53:db:05:23:63:a8:4e:
                    d1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CC:44:F5:47:F2:48:E1:7E:FE:CD:15:25:10:D0:BB:00:02:B8:0F
            X509v3 Authority Key Identifier:
                keyid:B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:62:85:a9:17:a8:01:60:43:24:ca:58:1f:cb:03:05:e8:96:
         6c:c8:25:de:ac:53:ab:fd:0a:0b:98:af:28:b5:d9:49:2f:c3:
         ed:e0:58:6b:7d:08:de:bf:3e:85:a8:7c:e0:e2:c8:a8:c0:63:
         ac:ef:d2:5b:d7:95:0e:cb:14:91:8a:62:71:16:83:cd:3d:a5:
         d6:6e:80:34:10:6f:a3:5a:2a:33:4e:1b:24:35:40:31:20:a8:
         ba:4c:c3:c8:67:a6:9d:0e:2b:cf:51:6b:4f:dc:60:3c:a2:13:
         91:39:a1:46:81:ae:ce:7a:91:2e:9b:6b:ca:e7:94:f3:bd:b9:
         af:ae:f5:2c:21:85:51:ae:a0:85:c5:55:3b:8c:0d:59:7e:b3:
         c9:1c:f3:98:a7:73:ec:19:17:15:cd:a8:a6:4e:dd:1d:6f:dd:
         00:20:f5:5d:4f:24:a3:34:f0:7e:6f:bc:99:5b:49:66:17:18:
         52:b4:43:41:85:4a:cd:bc:03:bb:dc:ef:1e:fa:3c:c3:e8:59:
         fd:64:0f:b7:ac:19:12:d8:5c:77:5b:c9:06:08:86:40:c7:cb:
         bb:f3:a1:2c:ed:b4:f3:8a:1f:15:77:f8:d4:7a:b9:74:80:96:
         75:1d:a0:a3:8e:3e:f9:11:85:9a:04:09:be:e8:e7:6f:13:5f:
         69:cb:10:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----