Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft
File:                     SdA41NOnW7-ev-owZGh7Xjs0b-M.mft (raw, json)
Hash identifier:          P6EAvvmVIS9B/hxj/lLVXeJO6gihu18EXHAO+uSFbc4=
Subject key identifier:   EE:9A:C1:AA:17:E8:4B:DB:B1:E2:F0:C0:D3:F2:05:0E:05:BF:6B:5D
Authority key identifier: 49:D0:38:D4:D3:A7:5B:BF:9E:BF:EA:30:64:68:7B:5E:3B:34:6F:E3
Certificate issuer:       /CN=49d038d4d3a75bbf9ebfea3064687b5e3b346fe3
Certificate serial:       01962E99E2ED5743C49D464FAFA2622B85F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SdA41NOnW7-ev-owZGh7Xjs0b-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft
Manifest number:          0B0B
Signing time:             Sun 13 Apr 2025 10:02:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:39 +0000
Files and hashes:         1: SdA41NOnW7-ev-owZGh7Xjs0b-M.crl (hash: 3HLxjp7YKEpXS5uCxKhucZf+vf7ZI2XNNdcTUWire3I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:e2:ed:57:43:c4:9d:46:4f:af:a2:62:2b:85:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d038d4d3a75bbf9ebfea3064687b5e3b346fe3
        Validity
            Not Before: Apr 13 10:02:39 2025 GMT
            Not After : Apr 14 10:02:39 2025 GMT
        Subject: CN=ee9ac1aa17e84bdbb1e2f0c0d3f2050e05bf6b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6a:dd:94:20:cd:6c:34:f3:68:d6:b5:a2:31:
                    72:13:7f:8e:62:73:87:de:26:80:98:f1:53:22:77:
                    0c:a0:30:01:e6:4b:46:83:4f:be:0b:01:c3:22:06:
                    da:d2:20:36:f3:02:86:fd:6f:be:bf:f7:5c:3b:30:
                    91:a3:77:e9:8f:a3:cb:6f:9b:d5:62:84:fd:c5:65:
                    db:d1:e2:ae:a7:38:2a:78:b1:99:f3:90:82:b2:87:
                    c2:60:b3:0d:53:7d:5a:a1:f9:87:71:06:7d:a6:61:
                    0f:d3:13:8e:17:ee:2a:ec:3b:2f:67:d0:38:3f:e7:
                    bd:af:fe:a2:11:d1:4e:f0:e6:2b:0a:5b:c6:ac:f5:
                    1e:63:23:be:be:c2:2a:9e:f9:69:cd:18:a2:f8:9b:
                    25:1a:d6:a6:55:a4:b1:09:39:40:b5:aa:0d:48:b5:
                    9a:54:6f:ad:29:5a:06:89:64:49:87:51:d4:64:c1:
                    72:f2:e8:59:ca:f8:c2:32:14:4e:90:1f:3b:32:d3:
                    18:d9:bd:63:e6:6b:f7:da:69:47:52:10:c8:f4:d9:
                    7c:12:6e:1b:5c:29:c9:24:00:01:82:86:26:56:91:
                    48:85:fd:b7:41:18:cb:9b:36:a5:31:16:c9:a3:95:
                    a1:b4:1c:9f:52:85:ec:45:df:5d:fb:41:be:09:28:
                    9d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9A:C1:AA:17:E8:4B:DB:B1:E2:F0:C0:D3:F2:05:0E:05:BF:6B:5D
            X509v3 Authority Key Identifier:
                keyid:49:D0:38:D4:D3:A7:5B:BF:9E:BF:EA:30:64:68:7B:5E:3B:34:6F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdA41NOnW7-ev-owZGh7Xjs0b-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:6b:11:93:ba:0d:89:ea:37:b0:ed:06:46:2c:ba:99:5a:53:
         e7:4b:45:3c:19:63:a9:9b:86:a1:5e:84:60:06:20:7d:fd:4c:
         b1:42:a2:8d:14:bb:51:ae:e7:0e:a3:f2:99:1d:a4:e7:1e:96:
         d8:ec:b0:47:da:85:b8:1b:9c:f1:08:35:4b:4b:40:6e:c5:73:
         9d:60:82:1d:0a:ed:52:50:f4:3c:c2:75:03:a4:c2:f0:4f:fe:
         2d:ba:07:53:f0:11:cb:a2:67:50:b1:dd:fe:27:20:a4:5c:41:
         ae:7d:3d:f5:01:54:d7:b5:0d:25:b4:b9:c1:55:d8:de:9f:f7:
         9a:bb:e1:74:88:bc:9e:63:94:7e:88:2b:1f:0e:e2:ba:67:7a:
         46:49:a2:a8:d8:6e:7f:80:28:0a:a8:ba:c8:cd:74:31:e8:d4:
         d9:5d:a0:d5:88:f6:26:ce:c9:24:9b:99:d4:7f:f8:12:7c:6d:
         b3:43:56:9c:82:e3:a6:6b:04:f2:90:58:3d:eb:b2:be:4f:36:
         91:f2:36:b1:2c:e5:fd:74:41:c9:45:80:43:90:8a:5b:cd:fa:
         5f:21:f0:4c:b4:c2:86:a0:9e:78:9d:fa:95:71:71:04:5d:ba:
         46:d4:95:a9:da:c3:8c:56:c7:94:e4:55:7f:ff:de:34:3f:81:
         0c:cb:23:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----