Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
File:                     Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft (raw, json)
Hash identifier:          8LVxFD4OugBM0ePVmhoE5L586pBtSX2dnO3hxDKXp5w=
Subject key identifier:   16:E0:92:B2:FB:6D:C9:E0:DC:5A:54:7C:94:74:E4:DF:E7:5C:43:66
Authority key identifier: 49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E
Certificate issuer:       /CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e
Certificate serial:       01962DF3B41A1C99A0678B6A695EAA90D6BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
Manifest number:          0F7F
Signing time:             Sun 13 Apr 2025 07:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:08 +0000
Files and hashes:         1: Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl (hash: TvNnmmQA4ZWfMue8rYl0cw9oUh/isEZEHCNARKf1aXs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b4:1a:1c:99:a0:67:8b:6a:69:5e:aa:90:d6:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e
        Validity
            Not Before: Apr 13 07:01:08 2025 GMT
            Not After : Apr 14 07:01:08 2025 GMT
        Subject: CN=16e092b2fb6dc9e0dc5a547c9474e4dfe75c4366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:80:55:fd:cc:a9:f8:87:f3:6b:f6:6c:d1:d2:
                    8f:d3:ac:f5:21:90:6d:81:7b:0d:55:c9:90:d5:db:
                    8e:94:c4:69:d7:11:23:96:b2:f7:ae:a2:ad:24:c3:
                    36:02:b3:26:cc:a6:ca:cb:27:69:2c:69:75:d1:18:
                    30:7b:d5:f4:2f:fc:8f:80:43:40:55:a9:70:86:62:
                    49:2c:53:fb:53:ab:b5:d1:bb:2f:d5:9c:57:0b:2a:
                    bc:06:53:93:82:96:fb:f1:bb:b0:7e:2c:7f:a1:15:
                    87:67:26:b5:27:e0:26:6f:e8:16:11:6e:ec:08:62:
                    23:1d:dc:30:ed:f3:68:9a:10:89:19:31:80:06:6a:
                    79:9a:b8:bf:df:a1:0b:91:71:5c:5b:d5:6a:d4:91:
                    1c:b9:74:e9:89:5c:2e:82:1e:fc:30:08:c4:00:93:
                    3a:4a:ea:c3:85:74:1b:fa:2f:65:b5:65:f2:99:4e:
                    b1:d2:4f:94:4c:39:ce:1b:e3:05:7b:3d:17:b2:b9:
                    4b:2f:34:e3:2c:96:98:44:6c:b4:3d:5d:03:4b:b2:
                    f9:27:18:e1:f7:ec:8d:19:f3:cd:1e:84:c9:5f:84:
                    1a:ba:7f:84:93:0c:24:5b:6b:3f:18:7d:15:10:d3:
                    8b:67:db:33:a0:50:2c:87:76:f6:87:03:bd:89:17:
                    de:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E0:92:B2:FB:6D:C9:E0:DC:5A:54:7C:94:74:E4:DF:E7:5C:43:66
            X509v3 Authority Key Identifier:
                keyid:49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:31:8d:68:f4:67:9b:67:47:0a:14:24:24:a7:db:8d:45:8f:
         13:83:c9:38:b4:55:e7:a4:f7:a8:94:f6:db:cf:0b:43:72:1a:
         23:b2:c4:b5:a8:3c:a6:da:c5:6d:2f:59:1e:2e:fa:b2:9a:16:
         08:1d:fc:b9:67:80:06:fb:24:15:02:cc:03:00:f0:be:be:bd:
         b5:0f:62:ec:6f:ed:66:cf:a1:23:08:77:e6:21:34:46:7e:6b:
         d2:ae:a8:95:ec:09:e2:2f:99:40:6d:53:2c:7f:98:4c:7d:63:
         53:c0:98:ba:89:45:31:4e:21:4b:5b:05:70:5d:36:e1:31:a9:
         e2:99:55:23:bd:f6:b7:59:82:73:c4:7b:cf:8b:31:38:6a:bd:
         73:2c:2a:13:b1:45:53:45:2a:a3:b4:39:54:4d:7c:b1:37:38:
         8c:8c:6f:27:15:e7:b1:09:6c:0b:a7:1d:3d:d4:7b:42:2c:59:
         78:1b:6d:36:76:45:09:9f:71:8e:5a:05:a8:19:87:1f:6a:93:
         3a:cc:dc:da:5d:41:e0:f6:bb:bf:c9:4a:7d:49:28:0c:74:09:
         3d:d2:ec:f3:7e:65:58:76:04:d6:9f:6c:95:80:7c:b8:b7:e8:
         ae:e6:da:46:3f:e1:bf:66:0d:2d:93:4d:e1:5f:e0:c3:56:9f:
         30:89:1a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----