Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
File:                     SSs6_XmlHZow5zpYnajjdkH0dRo.mft (raw, json)
Hash identifier:          kizsovFX5IHQunEZsbt7bZWUA1yyoRVDT8P9EV11EgE=
Subject key identifier:   A1:BE:8B:E6:79:DE:C8:36:97:16:B0:92:61:D4:13:40:E9:D3:CC:B6
Authority key identifier: 49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A
Certificate issuer:       /CN=492b3afd79a51d9a30e73a589da8e37641f4751a
Certificate serial:       01962F3DB9532E75FA35437A65591C772DB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
Manifest number:          040C
Signing time:             Sun 13 Apr 2025 13:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:36 +0000
Files and hashes:         1: SSs6_XmlHZow5zpYnajjdkH0dRo.crl (hash: gPumdJO1I9SbdzsDKu2CkMVUgH2/HV89Vgxht4pDmBU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b9:53:2e:75:fa:35:43:7a:65:59:1c:77:2d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=492b3afd79a51d9a30e73a589da8e37641f4751a
        Validity
            Not Before: Apr 13 13:01:36 2025 GMT
            Not After : Apr 14 13:01:36 2025 GMT
        Subject: CN=a1be8be679dec8369716b09261d41340e9d3ccb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:33:2d:9a:47:67:1e:29:14:51:66:2a:61:d9:
                    2a:4a:ba:17:48:c1:2c:1a:96:87:da:bf:5d:be:ff:
                    b6:cc:c8:19:3d:8f:dc:36:7b:5c:4f:c6:e5:47:b0:
                    ba:02:e3:dd:2e:65:ff:23:a8:8f:a5:94:01:b4:09:
                    ce:5e:71:9e:63:0a:11:ce:3d:0a:fc:70:a3:03:72:
                    ad:67:1c:17:d7:66:0c:5d:c0:ae:39:cd:47:84:7b:
                    9b:5e:0a:51:73:64:49:d7:a9:5f:c7:bd:09:0c:63:
                    4a:69:66:18:0d:03:59:f4:a3:04:60:ca:f5:01:fc:
                    78:1c:f6:26:ad:7a:4b:4f:c7:64:5d:ae:69:1c:32:
                    19:c3:f4:a8:e4:e7:83:96:8b:a0:a7:ce:3b:e0:a7:
                    71:6f:12:b1:c5:0b:e6:5b:b3:c1:9e:1f:15:d2:1f:
                    4a:4f:18:7c:0a:c9:c5:8e:c4:4a:5e:a0:fc:c6:a6:
                    1d:4e:ef:57:ae:43:dd:fd:70:34:57:64:c2:89:d2:
                    a6:15:51:92:12:a6:cb:6a:45:d6:22:ad:09:6e:4c:
                    f5:af:14:97:14:03:0e:a5:5f:7a:72:51:49:d5:08:
                    fa:10:a1:90:10:48:18:ce:7b:cb:96:ff:ec:9e:22:
                    7a:f8:d0:8f:6a:cf:3b:51:32:06:18:2f:d3:cf:52:
                    0d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BE:8B:E6:79:DE:C8:36:97:16:B0:92:61:D4:13:40:E9:D3:CC:B6
            X509v3 Authority Key Identifier:
                keyid:49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e3:bf:e1:d7:1a:b0:95:22:d8:d4:63:3f:33:2f:81:ec:cc:
         4d:21:f4:2e:51:9f:e2:ac:5c:90:1f:75:20:e2:e6:70:94:1a:
         f7:db:00:33:8f:c0:8c:fb:6c:c6:58:38:e3:0d:7f:69:73:ae:
         d6:11:55:e0:64:30:81:06:d5:2a:1b:59:49:86:0a:04:96:f9:
         27:6f:dd:3c:14:b0:04:4e:57:7c:1a:e8:e4:eb:ba:0c:2a:b9:
         ff:1f:e3:68:c6:b7:dd:29:c4:55:d2:4e:a5:6d:cf:c9:bc:8a:
         81:87:42:5b:42:e8:13:39:88:af:b7:57:cd:ee:0e:1a:01:7e:
         26:10:42:7c:f5:91:37:2e:63:85:46:b0:f4:1d:30:57:98:85:
         97:71:ed:67:ab:8e:9e:c0:de:ad:fb:ac:39:69:cd:8c:f9:1d:
         9d:11:f1:37:cb:b2:96:05:fe:67:15:17:50:70:7c:a5:71:1c:
         62:ba:55:04:f2:f8:aa:b3:93:4c:b2:4f:fe:fa:a6:0c:45:7d:
         9a:83:a8:f7:4d:2b:df:de:c1:a5:a9:6d:50:49:03:03:be:22:
         f0:16:25:8c:ac:6b:09:43:ba:5c:52:85:1a:7b:44:8a:bf:03:
         1f:43:59:67:dc:1b:72:fb:3a:4b:31:90:69:70:3a:7d:a6:47:
         22:80:c8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----