Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
File:                     SBVxyrg7M5yGCR7HR8ITX85PZYc.mft (raw, json)
Hash identifier:          a+G9pyOIDnNeSXvzBdZ4YoWddhUPU3tSAVjOuKkICEk=
Subject key identifier:   74:43:EA:D1:01:5E:05:7C:E4:BB:CC:F3:A2:ED:D6:CC:19:BD:DB:6E
Authority key identifier: 48:15:71:CA:B8:3B:33:9C:86:09:1E:C7:47:C2:13:5F:CE:4F:65:87
Certificate issuer:       /CN=481571cab83b339c86091ec747c2135fce4f6587
Certificate serial:       01962F3D31D14EB40D8171D981AA87B809B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SBVxyrg7M5yGCR7HR8ITX85PZYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
Manifest number:          138E
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:01 +0000
Files and hashes:         1: SBVxyrg7M5yGCR7HR8ITX85PZYc.crl (hash: 5wU5OcRsLS+HTv+n5MPIznSv0Nrl7wmEdKiK8iXHyHs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:31:d1:4e:b4:0d:81:71:d9:81:aa:87:b8:09:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481571cab83b339c86091ec747c2135fce4f6587
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Apr 14 13:01:01 2025 GMT
        Subject: CN=7443ead1015e057ce4bbccf3a2edd6cc19bddb6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:76:2b:aa:17:82:3d:4b:db:78:63:5a:fd:56:
                    2f:fd:e2:44:c6:56:37:25:bf:25:a5:87:65:1b:c1:
                    2f:1e:9f:97:69:3c:a3:6e:ac:ec:df:f8:98:ab:17:
                    f7:16:39:2d:0a:13:54:74:5d:1c:13:3b:b3:a0:09:
                    c6:42:29:fb:b7:bd:11:72:c6:f2:a1:86:ff:29:5b:
                    a8:f6:18:55:48:8d:c0:b7:71:48:8f:76:b4:45:7f:
                    a4:52:96:7c:77:f6:03:9c:d6:ee:3e:87:0d:52:8d:
                    4f:6b:ef:5a:13:d5:4c:16:c2:ac:fd:8c:7f:59:df:
                    3e:c9:da:f5:27:56:58:bf:81:91:3d:74:bf:8e:ca:
                    7d:08:b0:b5:e8:e3:3e:39:f6:17:15:bf:96:21:bd:
                    4e:8e:84:a9:1a:af:0c:65:57:ef:8d:d9:ba:52:32:
                    67:ca:d5:98:e2:71:3a:fe:0c:bb:71:47:2f:1a:7e:
                    a5:1b:7b:e1:07:97:fc:01:7a:ae:7a:c6:49:43:e0:
                    d3:28:18:a9:0e:0d:c1:ed:29:7e:dc:0b:dd:08:df:
                    4f:a8:3c:9d:97:5c:4f:40:8e:9e:7e:22:32:c3:cd:
                    67:15:e7:1a:9d:d7:68:69:e9:12:33:3e:43:af:5f:
                    d2:f1:8a:20:26:81:7b:56:c7:a2:04:08:d8:9e:73:
                    7d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:43:EA:D1:01:5E:05:7C:E4:BB:CC:F3:A2:ED:D6:CC:19:BD:DB:6E
            X509v3 Authority Key Identifier:
                keyid:48:15:71:CA:B8:3B:33:9C:86:09:1E:C7:47:C2:13:5F:CE:4F:65:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBVxyrg7M5yGCR7HR8ITX85PZYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:fe:b1:ac:e5:51:ce:fa:42:d2:36:02:f7:7e:00:d6:68:a3:
         d5:76:67:4b:bd:17:71:fb:85:45:ed:3c:16:cb:4c:48:19:00:
         7f:7d:17:0b:ae:98:0f:75:b6:dd:d1:51:b2:48:d3:d3:a0:c9:
         cd:d0:dd:72:ef:32:66:ea:bc:72:68:5d:f2:60:1e:28:0b:d3:
         e3:dc:1f:41:73:3e:1b:27:a5:02:57:f6:82:a1:b0:de:59:2f:
         fa:0f:9e:81:db:f1:ea:43:be:fd:0d:49:63:54:d0:72:22:27:
         b1:cf:76:a9:aa:b3:bf:d5:e5:a2:5b:07:e1:2b:63:7b:48:10:
         90:29:d8:4f:e2:bd:6b:81:13:e4:ae:72:38:36:c9:75:fd:29:
         7a:a4:d3:04:b4:7f:21:3d:c8:84:63:d3:ec:c8:ce:68:34:46:
         db:db:2b:02:40:9c:15:72:ae:35:b1:33:24:f3:56:af:d9:5d:
         27:00:1a:e8:18:96:f6:27:a9:5c:d1:bc:6a:be:89:8e:0e:d9:
         20:87:12:bf:57:75:6a:6b:d4:a6:d0:66:3e:b7:c7:f8:a2:81:
         cf:91:85:e2:da:02:59:92:c3:72:10:39:96:a1:69:20:4c:69:
         a4:04:0a:df:67:49:e0:7d:f8:1d:3e:ec:a6:6d:f8:e8:57:0b:
         cf:d5:ba:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----