Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
File:                     a-SeWhSwy_QQTANLVyoPnxVKmXU.mft (raw, json)
Hash identifier:          YlZ+ZPigw9fhkRW0A8JVctw58UQNnxczRyQS0LSjKPs=
Subject key identifier:   9A:84:E5:86:CD:41:1B:9A:05:C3:B0:1C:3F:AE:54:34:95:F1:0A:BA
Authority key identifier: 6B:E4:9E:5A:14:B0:CB:F4:10:4C:03:4B:57:2A:0F:9F:15:4A:99:75
Certificate issuer:       /CN=6be49e5a14b0cbf4104c034b572a0f9f154a9975
Certificate serial:       01962F3DAB0B3A713363CC41A4661C8C094B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
Manifest number:          038F
Signing time:             Sun 13 Apr 2025 13:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:32 +0000
Files and hashes:         1: a-SeWhSwy_QQTANLVyoPnxVKmXU.crl (hash: zi5pddcNhvN6wA7mGUwCB5nQoTyTLhMtPm1nnA1ywQg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ab:0b:3a:71:33:63:cc:41:a4:66:1c:8c:09:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6be49e5a14b0cbf4104c034b572a0f9f154a9975
        Validity
            Not Before: Apr 13 13:01:32 2025 GMT
            Not After : Apr 14 13:01:32 2025 GMT
        Subject: CN=9a84e586cd411b9a05c3b01c3fae543495f10aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a5:ba:50:7b:67:7a:93:ff:b4:eb:76:fb:9f:
                    68:5a:c1:41:68:1e:15:26:42:e2:c1:1a:b9:54:53:
                    36:22:92:5c:7d:2b:7e:3d:52:30:f1:21:96:0b:14:
                    a7:0d:2b:5f:12:f9:f6:e8:07:64:9e:ae:fa:28:53:
                    26:8a:c0:30:65:16:8f:7c:6d:90:c4:91:a7:20:60:
                    66:83:ec:b5:e1:7f:2d:fc:03:e8:90:05:d1:ca:5f:
                    96:79:8b:8e:3b:ee:7f:f2:b6:f8:49:65:2b:7e:9d:
                    9d:4d:9f:41:12:38:79:47:6c:79:51:5c:14:85:6c:
                    09:ca:07:3a:2e:0e:da:16:7f:39:80:fd:25:ae:20:
                    23:c0:49:7f:92:91:a8:1f:c3:57:02:3f:6d:ed:eb:
                    d6:71:ab:96:f0:d6:b2:54:1c:ad:62:ee:80:e5:a6:
                    b4:7c:6f:51:0a:55:ea:99:7b:56:39:d6:a1:e2:36:
                    17:de:f9:0d:10:cf:c5:fc:3f:3c:08:20:6b:8c:01:
                    f3:65:dd:74:45:dd:2e:56:31:24:55:66:e4:ac:57:
                    5e:11:d1:79:c7:02:36:a3:67:ce:5e:66:7a:17:25:
                    d8:e8:34:7b:e2:6e:3c:ce:7e:ef:16:18:5d:82:89:
                    b4:f1:e9:b2:1e:4d:fa:e6:8e:ca:5a:a0:f1:76:9f:
                    e2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:84:E5:86:CD:41:1B:9A:05:C3:B0:1C:3F:AE:54:34:95:F1:0A:BA
            X509v3 Authority Key Identifier:
                keyid:6B:E4:9E:5A:14:B0:CB:F4:10:4C:03:4B:57:2A:0F:9F:15:4A:99:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:31:a3:63:d0:59:15:b8:c1:b5:cb:4a:eb:32:c4:95:8e:3c:
         ff:ce:0d:e2:5e:4f:62:a2:9b:52:6c:95:7b:41:29:f3:ff:83:
         f9:21:a0:52:6b:7f:a2:2c:8b:19:e5:15:1f:28:ab:47:7d:03:
         9f:14:64:8e:8a:c8:b3:e9:b1:93:14:75:23:e3:e6:f5:0f:f2:
         f5:d8:42:96:69:97:08:1f:74:79:e4:4f:98:e0:f2:b8:76:93:
         01:03:3f:dd:84:da:9b:44:90:31:dc:2a:19:9a:c5:ed:9d:4a:
         70:90:83:d9:36:19:da:1e:50:eb:23:7d:cd:df:9d:fc:f0:54:
         2f:5b:80:16:dd:13:2e:6f:33:82:d1:a8:6e:87:69:f5:47:b3:
         85:6d:44:74:b7:39:56:ca:f5:82:bf:73:41:75:02:36:ba:a9:
         c3:47:40:7c:0d:f6:79:8a:90:d8:cb:28:af:06:70:7a:10:2e:
         9b:3b:89:35:1c:cb:4a:f4:9e:35:cb:e3:49:0d:70:91:10:af:
         ad:e1:f5:a0:90:71:2a:54:ab:01:0b:9f:55:cf:ba:1d:c5:f4:
         dd:38:c2:57:d5:1a:a4:39:d8:ce:7b:7a:9d:b1:90:21:89:d1:
         ec:69:3c:e0:af:76:42:b2:93:be:ec:6f:2e:b3:86:48:c8:1b:
         9a:95:3f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----