Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.mft
File:                     SXoXzvuUeLbK6PZdWfsepdB2LWg.mft (raw, json)
Hash identifier:          x6VGwsxv1TpoV4CPCP3MPl0vEAW1iSGAyQVD42RlR7U=
Subject key identifier:   7A:7E:D2:2F:7B:53:CB:E5:6E:78:1C:9E:6E:FF:ED:16:3C:E4:39:69
Authority key identifier: 49:7A:17:CE:FB:94:78:B6:CA:E8:F6:5D:59:FB:1E:A5:D0:76:2D:68
Certificate issuer:       /CN=497a17cefb9478b6cae8f65d59fb1ea5d0762d68
Certificate serial:       01962E990CD5CD628A8A212DE9B0AA0ACE08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SXoXzvuUeLbK6PZdWfsepdB2LWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.mft
Manifest number:          0925
Signing time:             Sun 13 Apr 2025 10:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:44 +0000
Files and hashes:         1: SXoXzvuUeLbK6PZdWfsepdB2LWg.crl (hash: iAHis88LaNQaDWj3rYQPFR0KwoPonDwk6B2xWPq5IlI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0c:d5:cd:62:8a:8a:21:2d:e9:b0:aa:0a:ce:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=497a17cefb9478b6cae8f65d59fb1ea5d0762d68
        Validity
            Not Before: Apr 13 10:01:44 2025 GMT
            Not After : Apr 14 10:01:44 2025 GMT
        Subject: CN=7a7ed22f7b53cbe56e781c9e6effed163ce43969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:51:b7:06:9a:8f:8c:29:f0:19:74:ac:e3:45:
                    46:f5:1f:2f:80:9c:73:74:d4:34:cb:8e:2f:77:df:
                    39:08:cb:39:d2:3d:8d:ba:70:09:2a:ef:1f:97:a4:
                    df:7c:d8:83:43:58:1b:49:ce:31:b6:3c:9b:32:43:
                    4b:99:eb:ac:0e:a4:aa:3f:a5:80:20:9c:7c:92:7a:
                    a4:cf:82:4c:f1:b4:89:1a:64:1e:b9:59:41:c8:66:
                    d1:f1:0c:42:98:be:10:9a:07:fd:4d:8d:b3:cc:10:
                    23:f9:7d:f3:76:c0:60:bc:c9:b5:52:f6:1d:e2:5f:
                    93:06:61:32:60:03:7c:0e:20:f9:af:80:ba:d7:45:
                    a9:eb:ec:c3:0e:33:af:0f:eb:0f:a1:77:46:ea:2f:
                    fd:e0:08:48:c0:a9:c4:e1:7a:02:8f:7c:d9:87:db:
                    5b:54:fb:8b:ec:7f:aa:47:5b:3f:47:ab:06:48:59:
                    9a:25:b3:8b:4a:f8:5d:e8:06:62:69:9a:3a:59:09:
                    0c:15:52:c3:e2:6f:f2:5a:e2:30:0a:ce:ec:57:b0:
                    5c:ef:e2:0b:fe:f1:bd:5f:0f:ba:cb:0b:1e:c5:5e:
                    dc:7c:51:50:d4:bc:1a:20:31:67:76:7f:36:14:ba:
                    72:c9:6d:98:c8:f5:eb:53:1d:3e:a2:08:05:48:1e:
                    48:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7E:D2:2F:7B:53:CB:E5:6E:78:1C:9E:6E:FF:ED:16:3C:E4:39:69
            X509v3 Authority Key Identifier:
                keyid:49:7A:17:CE:FB:94:78:B6:CA:E8:F6:5D:59:FB:1E:A5:D0:76:2D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXoXzvuUeLbK6PZdWfsepdB2LWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b5:92:04:90:9c:86:c5:2d:b0:25:b1:02:18:28:29:79:a7:
         d5:04:bc:3b:fe:e1:73:bd:7b:b1:40:5d:45:d9:13:4e:ad:ac:
         4a:f7:ea:ed:e2:c2:3d:37:68:29:2f:3d:41:ad:53:99:24:97:
         a5:e4:3a:ae:50:2f:ff:02:66:21:e2:03:fa:2b:34:01:4f:4e:
         7e:d0:23:16:ca:cc:1b:70:e3:6e:df:1a:6d:18:db:cd:fc:40:
         44:df:45:14:8f:30:5a:6c:04:e5:6e:47:8f:1c:83:d3:d5:42:
         e5:58:a0:25:46:6c:d7:f3:91:0e:56:2e:1c:09:6a:9d:78:f6:
         f1:68:d9:58:e8:a0:a2:48:3e:bc:56:ab:4a:a0:e1:97:ec:5f:
         df:37:c6:cb:27:09:13:ac:fc:5d:f2:58:df:1c:d7:35:2e:52:
         71:5d:d2:76:24:eb:60:04:ca:bf:e9:b1:be:6f:75:7b:76:e3:
         e5:f1:8c:3c:12:b4:c1:8e:b6:e8:a5:89:66:d6:03:c4:47:e8:
         20:1c:c7:68:ed:c5:79:fb:8f:9e:1a:16:fb:f1:ca:ca:31:c1:
         09:9a:b3:6e:a1:e9:60:07:30:0a:08:0c:43:07:59:60:dd:67:
         f7:b2:e0:9d:b0:22:4a:f2:12:20:fa:be:b1:ad:a4:2a:a5:93:
         a5:62:8b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----