Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
File:                     SxEEihpJFuExuM4Iji1v5OXF49s.mft (raw, json)
Hash identifier:          Ta1V+6cmMVbMvth5NTKGesINALozh0s7hLp732WsWXs=
Subject key identifier:   79:E4:E6:E1:38:1F:04:C8:C7:67:2C:A2:86:22:54:43:3B:79:07:CB
Authority key identifier: 4B:11:04:8A:1A:49:16:E1:31:B8:CE:08:8E:2D:6F:E4:E5:C5:E3:DB
Certificate issuer:       /CN=4b11048a1a4916e131b8ce088e2d6fe4e5c5e3db
Certificate serial:       01962E2AD8D5CD463A4BE45E3FC049230C6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
Manifest number:          0128
Signing time:             Sun 13 Apr 2025 08:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:21 +0000
Files and hashes:         1: SxEEihpJFuExuM4Iji1v5OXF49s.crl (hash: 6drOiv7qkwJ/cY12Oo31apeU/c1tvAoEbSQBVMjoX9w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d8:d5:cd:46:3a:4b:e4:5e:3f:c0:49:23:0c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b11048a1a4916e131b8ce088e2d6fe4e5c5e3db
        Validity
            Not Before: Apr 13 08:01:21 2025 GMT
            Not After : Apr 14 08:01:21 2025 GMT
        Subject: CN=79e4e6e1381f04c8c7672ca2862254433b7907cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:5c:18:ed:df:cd:95:9e:0b:87:5d:67:17:
                    3e:71:30:54:65:9e:60:b4:9d:af:06:c8:0b:d7:2a:
                    2b:23:6c:b4:69:17:45:65:28:2c:2e:c5:84:10:ac:
                    06:c3:06:4c:8d:f5:6e:76:94:4c:e7:d5:6d:ed:70:
                    35:10:a5:d8:31:a1:20:08:25:f0:cf:7a:e4:84:18:
                    be:db:86:ba:b7:fd:62:b7:88:0c:be:1e:93:55:3c:
                    82:0a:70:0d:2f:9e:b0:77:36:74:75:93:e0:22:5c:
                    20:49:a2:0e:51:13:41:08:1f:8c:3f:3a:62:2b:2a:
                    da:53:2d:95:63:20:36:d6:69:a0:36:21:2a:48:b5:
                    f3:00:2e:9b:4e:36:a6:c8:d8:33:eb:23:ce:35:72:
                    d8:2a:cf:d9:ef:4d:f3:52:17:e1:c0:7d:63:d9:47:
                    de:8a:dc:bb:c4:46:19:ac:06:75:44:79:4f:a7:07:
                    0a:04:e2:50:b7:ab:5d:68:ba:dc:a9:67:0e:1b:a4:
                    5e:37:16:3c:55:ed:11:57:47:3d:29:ad:a8:24:ca:
                    40:9d:87:87:c9:88:e7:e3:ff:a9:12:bc:4b:88:42:
                    15:94:64:1d:3d:ac:82:de:9f:23:90:7a:49:8d:26:
                    2e:06:5d:82:83:7b:69:c2:1f:8e:44:d4:c7:49:10:
                    ab:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E4:E6:E1:38:1F:04:C8:C7:67:2C:A2:86:22:54:43:3B:79:07:CB
            X509v3 Authority Key Identifier:
                keyid:4B:11:04:8A:1A:49:16:E1:31:B8:CE:08:8E:2D:6F:E4:E5:C5:E3:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:28:11:dc:3d:1f:64:48:b0:40:12:8c:82:af:ad:ec:97:3c:
         ad:fb:f3:e9:3f:e8:d0:fc:1c:58:1b:0a:ec:31:6c:5a:b3:84:
         12:bc:e9:13:84:7c:f0:52:3c:e4:86:86:19:3d:ab:57:2b:97:
         38:9a:3c:a5:1d:94:72:84:b4:8d:2f:87:bf:45:7a:2a:7b:20:
         3c:b6:18:ef:1f:3e:e1:8a:64:db:64:7d:29:54:26:38:fe:bc:
         45:ca:ed:87:66:70:1b:fe:fc:d9:84:fa:52:c6:f0:63:d3:08:
         f3:0d:e0:82:ec:40:11:d8:fa:bf:48:8f:5a:2d:7b:bb:57:e4:
         01:15:fb:5d:43:87:5e:e9:d4:f3:38:32:14:90:ab:e0:2d:83:
         1a:1f:2d:e6:b2:69:07:e9:04:ce:04:19:2a:32:17:73:80:87:
         d0:a2:8d:40:19:47:82:d1:33:b0:88:8d:5d:b2:49:29:93:69:
         9e:b1:28:d9:ef:34:0f:6b:33:e6:ea:13:0d:00:79:47:5f:28:
         e6:1e:05:24:02:52:96:9c:4d:36:a8:93:26:7b:ee:94:4c:fc:
         06:eb:a2:e1:c2:09:89:40:89:17:fd:32:83:46:1c:9e:db:fe:
         a4:8d:28:08:9a:2b:8e:3e:68:81:8a:14:81:4b:21:11:a9:b9:
         fb:66:80:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----