Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/743a50-d7f4-42d1-a09d-7ca93ecb2234/1/sgzLpAbArQxb4AB22ZgLNIhWmoo.mft
File:                     sgzLpAbArQxb4AB22ZgLNIhWmoo.mft (raw, json)
Hash identifier:          kogBTVfBCMa0el2HIMya3WJzvg082BaK5PiMIsZR/H0=
Subject key identifier:   A3:94:56:51:1A:E4:6F:AC:94:29:F1:C4:B9:D9:87:EF:1E:D8:04:6A
Authority key identifier: B2:0C:CB:A4:06:C0:AD:0C:5B:E0:00:76:D9:98:0B:34:88:56:9A:8A
Certificate issuer:       /CN=b20ccba406c0ad0c5be00076d9980b3488569a8a
Certificate serial:       01962E994A049F77850643FC80621461A6FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sgzLpAbArQxb4AB22ZgLNIhWmoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/743a50-d7f4-42d1-a09d-7ca93ecb2234/1/sgzLpAbArQxb4AB22ZgLNIhWmoo.mft
Manifest number:          0FCF
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: sgzLpAbArQxb4AB22ZgLNIhWmoo.crl (hash: IYPHGrdQun1PkZt1hxxwbyzmZCrU9cfJbH3vjtCvkKg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:4a:04:9f:77:85:06:43:fc:80:62:14:61:a6:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b20ccba406c0ad0c5be00076d9980b3488569a8a
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=a39456511ae46fac9429f1c4b9d987ef1ed8046a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:62:4f:d9:fc:b4:29:f4:f6:6b:87:78:b6:de:
                    60:1f:fd:52:53:c7:d6:68:3f:7d:c2:de:20:f1:e8:
                    e7:96:0b:01:e7:ac:22:15:ec:1f:b0:9b:b4:2d:cb:
                    6f:32:f1:0a:5f:86:b2:d8:c6:56:80:7a:9e:2d:30:
                    95:ac:3a:8a:8a:5e:f5:05:87:1f:a9:33:de:7c:08:
                    59:f7:76:ae:d2:8f:fd:44:7f:bf:2c:56:d7:bd:b4:
                    e0:37:55:30:77:72:b8:81:80:b0:4f:85:c5:48:7a:
                    35:e4:9f:9a:13:d9:f3:56:c5:da:2e:cb:8c:52:e9:
                    51:cf:47:c4:92:94:da:a9:04:e6:f7:0e:be:26:32:
                    45:6a:8d:2f:03:d7:16:09:9b:89:0b:e5:14:22:cb:
                    78:29:6c:1b:b1:47:fa:d1:b0:5c:bf:f4:5c:e1:04:
                    02:88:b5:c7:ac:33:99:d1:80:3b:bb:46:b7:2f:01:
                    c9:06:26:c6:d6:df:49:52:f6:95:19:01:4e:ae:3d:
                    c4:65:df:b1:4f:ca:54:41:0b:e0:91:15:c3:b9:32:
                    77:df:c3:0e:99:37:37:10:05:ca:53:9e:62:16:70:
                    86:7c:69:33:8c:4b:ea:d3:c9:b8:43:69:a0:6f:9d:
                    40:81:d8:f2:6e:9c:08:50:ec:27:ff:1a:9c:ba:19:
                    4e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:94:56:51:1A:E4:6F:AC:94:29:F1:C4:B9:D9:87:EF:1E:D8:04:6A
            X509v3 Authority Key Identifier:
                keyid:B2:0C:CB:A4:06:C0:AD:0C:5B:E0:00:76:D9:98:0B:34:88:56:9A:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgzLpAbArQxb4AB22ZgLNIhWmoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/743a50-d7f4-42d1-a09d-7ca93ecb2234/1/sgzLpAbArQxb4AB22ZgLNIhWmoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/743a50-d7f4-42d1-a09d-7ca93ecb2234/1/sgzLpAbArQxb4AB22ZgLNIhWmoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:2b:ec:0a:2a:22:80:a0:6c:ab:cc:05:12:6f:a9:81:d2:6c:
         81:08:48:97:f5:4e:d0:de:36:c9:b3:55:90:ce:3b:22:1f:54:
         c5:bc:01:3d:95:3b:98:00:89:fa:4b:e9:f5:e0:80:34:b5:44:
         67:5b:21:7c:66:72:2f:2d:9e:88:ec:9f:07:49:69:ba:e7:80:
         bf:e5:ea:82:94:6b:6c:a9:3a:35:65:6f:a1:6a:5b:7e:25:0a:
         29:f5:41:e8:e1:b0:88:bd:6f:ef:fd:19:35:ad:c7:71:cb:d4:
         1a:f2:01:5e:03:f5:13:25:ba:80:31:e3:ea:d9:b5:0a:43:b9:
         b2:a7:ad:bf:63:4f:99:1f:0e:93:7b:61:b3:3c:60:b2:72:a2:
         c3:63:0f:34:27:ac:e4:81:20:a4:ad:f0:6d:75:f4:90:c3:29:
         b8:cd:2c:88:bf:f3:2b:68:68:42:8e:41:b7:fd:9c:4d:7b:55:
         aa:d1:b6:83:a7:bb:33:b4:0d:22:53:95:f4:a6:7a:68:2b:77:
         c5:5d:ed:0f:04:16:51:ba:27:03:3f:f0:b2:2c:9b:6b:b4:f3:
         ac:08:fc:45:4f:f1:c9:19:d2:25:45:e7:d4:fb:d2:dc:09:01:
         d9:66:a8:90:61:c5:6e:70:a4:a5:b2:8b:35:9c:c7:73:0c:f2:
         de:9f:3c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----