Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft
File:                     SYN20qIgPYbnmm1ESVq_xIkDFGU.mft (raw, json)
Hash identifier:          Z3tON1cbo2VOJywd90+BjKT65ucqhTpOPyLIbE49Qa8=
Subject key identifier:   38:8A:A3:D3:CD:D1:51:23:55:CB:E8:14:B4:B1:F9:C2:CA:4A:70:E0
Authority key identifier: 49:83:76:D2:A2:20:3D:86:E7:9A:6D:44:49:5A:BF:C4:89:03:14:65
Certificate issuer:       /CN=498376d2a2203d86e79a6d44495abfc489031465
Certificate serial:       01962F06AEC534C75DD3810C209E91A731CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYN20qIgPYbnmm1ESVq_xIkDFGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft
Manifest number:          0BCF
Signing time:             Sun 13 Apr 2025 12:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:29 +0000
Files and hashes:         1: SYN20qIgPYbnmm1ESVq_xIkDFGU.crl (hash: QRKoTF89ZqziS9486Js45HMUc8lDh/FAH8Bu7CPXlGg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ae:c5:34:c7:5d:d3:81:0c:20:9e:91:a7:31:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498376d2a2203d86e79a6d44495abfc489031465
        Validity
            Not Before: Apr 13 12:01:29 2025 GMT
            Not After : Apr 14 12:01:29 2025 GMT
        Subject: CN=388aa3d3cdd1512355cbe814b4b1f9c2ca4a70e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:34:96:b0:d1:b1:27:54:b1:23:1e:ca:ec:8b:
                    97:4c:03:72:ff:b2:fd:68:27:9c:3b:1b:dd:a3:c1:
                    c8:63:1c:71:17:7f:d7:41:97:10:86:1c:d4:d4:e9:
                    dd:74:eb:20:51:2f:f7:0c:fd:77:bd:1a:88:bf:be:
                    49:0b:6e:22:b9:b5:4a:af:fe:4d:98:4e:1e:ae:7a:
                    db:c6:c1:6b:26:a7:f2:af:01:40:d7:dd:29:9f:c4:
                    5a:ba:20:0f:ee:83:c6:5e:9f:a4:8e:e2:5f:ec:12:
                    5d:65:eb:f8:8b:8f:5f:87:e8:e3:7d:ec:ac:bc:4c:
                    c8:4d:61:62:17:5b:8e:81:2e:3b:d0:38:06:aa:13:
                    d0:f6:49:bc:56:98:42:1b:cd:17:57:65:57:97:8c:
                    e7:e1:1f:90:35:d0:6e:99:f8:1c:1c:81:7b:b3:44:
                    e7:28:82:c7:ac:91:d7:54:ac:46:28:95:2a:46:87:
                    e1:77:dd:2b:ae:0a:a0:22:3e:9b:75:7f:ea:30:ab:
                    54:11:fd:c6:52:4b:e6:12:08:09:c4:18:cf:9d:a2:
                    56:91:7f:ae:03:ef:20:32:9c:21:4e:c7:34:c7:92:
                    59:94:26:c1:e2:ee:a7:cc:79:ef:fc:96:49:26:86:
                    8b:58:b5:59:8f:2d:da:3b:b6:97:ab:1c:07:8d:69:
                    18:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8A:A3:D3:CD:D1:51:23:55:CB:E8:14:B4:B1:F9:C2:CA:4A:70:E0
            X509v3 Authority Key Identifier:
                keyid:49:83:76:D2:A2:20:3D:86:E7:9A:6D:44:49:5A:BF:C4:89:03:14:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYN20qIgPYbnmm1ESVq_xIkDFGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:3a:47:05:92:a3:48:74:f9:ae:17:1d:ba:f2:44:58:cd:cd:
         a2:c2:ab:fe:81:0b:73:ab:85:cb:47:fc:70:29:1e:e1:56:35:
         9d:75:7a:d2:9e:2b:f8:17:0b:37:29:0a:87:ef:6d:60:69:8b:
         a1:3e:45:23:96:87:70:52:7d:9f:64:aa:3d:bb:98:6d:29:fd:
         d1:79:04:72:d9:f4:39:f7:8f:94:0f:0e:37:66:37:cf:fc:bd:
         88:9b:82:bf:4e:36:ec:51:33:39:cc:76:ff:99:69:c3:4b:93:
         ec:cd:22:6d:ef:dd:d6:f6:38:f4:db:5a:3c:14:f3:a5:ab:35:
         c9:a7:09:5d:5e:63:d4:18:bc:70:11:66:54:27:c4:14:81:19:
         15:df:54:20:12:09:ce:71:c1:4f:09:e0:70:b4:c9:58:75:76:
         28:38:6c:6e:f7:6e:8c:4c:19:d2:da:ae:cb:f6:cb:79:b2:66:
         a6:e2:a7:02:51:86:3e:e9:39:59:31:8b:08:27:d4:9e:f9:24:
         2c:2f:dd:b5:b6:d1:9f:8c:eb:9b:49:df:89:6a:1b:16:7d:e8:
         62:7a:05:8d:ef:12:2c:7c:04:ef:cb:c0:b4:3c:e5:16:2e:66:
         5e:26:10:ef:27:5b:b2:dd:71:1a:1e:79:89:6c:c3:31:28:f3:
         4b:5f:0c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----