Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
File:                     Sz1GYT0gKWKWebKwSi-chsq8dNU.mft (raw, json)
Hash identifier:          Mv3+1Zst+xcHc1TqKjm9d6Rf8iZlCNu1kwomx5KpbP4=
Subject key identifier:   6A:32:5C:69:0B:DE:8D:83:3A:F8:48:95:7B:DD:00:7C:44:B6:D2:98
Authority key identifier: 4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5
Certificate issuer:       /CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
Certificate serial:       01962E61729C40CC6A6B8A25FA2DC315F1FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 09:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:00 +0000
Files and hashes:         1: Sz1GYT0gKWKWebKwSi-chsq8dNU.crl (hash: wnT9WkCNY4cM1UK/Hs4x21FhTgO9TqjNVpp0cGLhiE8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:72:9c:40:cc:6a:6b:8a:25:fa:2d:c3:15:f1:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
        Validity
            Not Before: Apr 13 09:01:00 2025 GMT
            Not After : Apr 14 09:01:00 2025 GMT
        Subject: CN=6a325c690bde8d833af848957bdd007c44b6d298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:28:61:e0:b2:e9:e0:1f:bf:35:3b:65:be:ff:
                    d0:ae:b6:ba:b6:b4:16:21:ea:2e:77:15:d7:e2:f2:
                    b6:25:1a:10:6c:46:7b:48:41:18:b8:2e:a7:c7:f1:
                    cb:98:71:06:64:55:68:0a:22:6a:fb:5f:a0:fe:cc:
                    ab:9b:00:72:fa:4f:8e:67:7c:0b:d8:e7:ed:12:8f:
                    9f:83:44:0e:c8:63:75:70:8c:e8:fd:47:f0:4e:e4:
                    7a:5c:be:67:f6:3f:0b:03:82:81:ec:9c:dd:bd:8e:
                    be:e8:5b:e1:83:ec:9e:5d:e8:f8:af:e8:cd:bd:cf:
                    78:8d:e1:2d:cc:7c:5e:5d:a3:32:22:d7:ca:82:bd:
                    aa:75:41:60:ed:c6:cc:8b:83:4d:d0:01:3d:bf:96:
                    dc:99:fb:9b:0f:fa:c1:cc:b5:ac:61:7a:93:48:f0:
                    46:dd:b2:1a:8d:09:f2:06:f2:26:1f:a1:a8:a0:ed:
                    f1:de:79:cb:27:72:59:44:4c:f8:7b:ff:95:5c:bb:
                    51:a7:16:98:ab:9b:fd:1f:1c:54:12:01:a8:99:96:
                    36:fc:a2:29:f6:2e:ea:1e:89:43:05:00:28:4e:07:
                    5b:de:09:30:63:ad:02:c9:13:64:42:f3:da:ac:7b:
                    97:fe:d9:f0:42:d1:20:77:fc:81:8f:df:7c:b1:da:
                    f1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:32:5C:69:0B:DE:8D:83:3A:F8:48:95:7B:DD:00:7C:44:B6:D2:98
            X509v3 Authority Key Identifier:
                keyid:4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a2:49:25:fa:ab:5f:dc:e9:83:37:42:82:76:40:b4:d5:53:
         f1:32:58:bd:b3:0e:2a:46:69:da:8d:aa:dd:0d:73:d8:94:9e:
         93:d5:d7:4d:c2:a5:aa:c9:be:8e:b1:6f:41:ba:92:9f:40:6a:
         d0:d1:74:f8:b4:f2:15:10:a4:3a:89:ce:7b:74:4a:c1:3f:03:
         25:be:3d:3b:70:5f:cc:a7:be:f1:ea:6b:c9:ca:89:92:da:9e:
         4e:c6:a9:ad:b6:b6:49:9e:db:6d:28:13:77:be:29:54:b9:0e:
         c6:9e:f6:bd:4c:28:38:58:18:79:a8:4c:17:14:b7:ce:fc:cd:
         aa:75:6d:11:b4:1f:60:7b:05:e9:7e:b3:c5:93:db:1f:68:73:
         1b:7d:b8:c5:cb:69:18:f3:81:c1:af:d8:d2:a0:85:5b:9f:84:
         7c:a8:e9:f9:32:53:a4:7b:9f:f2:20:a4:e7:c3:5f:43:d5:6f:
         e6:de:a1:44:71:99:4b:99:5f:00:1d:db:ee:02:96:dd:e1:f7:
         f0:43:35:da:b3:ef:fb:6c:d0:98:7a:47:b2:a2:bf:1a:4f:fc:
         9c:14:79:a3:be:6c:f7:80:92:48:57:b8:87:d1:69:29:f4:bc:
         13:47:87:34:d9:f8:1e:d5:6a:c4:f7:de:bd:c9:d3:69:8f:f0:
         ac:1a:e0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----