Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
File:                     SKvTlzl8CmIzcipFkF6MZzEgx6w.mft (raw, json)
Hash identifier:          j8dipS5IkaPjs+ZCWmis8XNl1pBMP3MHkZ6QnwERTUI=
Subject key identifier:   06:CB:17:34:9A:05:4B:2E:6C:A0:8C:E7:D0:10:F3:03:CA:CA:99:B7
Authority key identifier: 48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC
Certificate issuer:       /CN=48abd397397c0a6233722a45905e8c673120c7ac
Certificate serial:       01962F3D742F25D935938CDCC82C6AFA8ACC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
Manifest number:          026F
Signing time:             Sun 13 Apr 2025 13:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:18 +0000
Files and hashes:         1: SKvTlzl8CmIzcipFkF6MZzEgx6w.crl (hash: /Zu7RS+dFhDS5jpGynY/YkW8WjXLmHy8hBqJx8gFt/M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:74:2f:25:d9:35:93:8c:dc:c8:2c:6a:fa:8a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48abd397397c0a6233722a45905e8c673120c7ac
        Validity
            Not Before: Apr 13 13:01:18 2025 GMT
            Not After : Apr 14 13:01:18 2025 GMT
        Subject: CN=06cb17349a054b2e6ca08ce7d010f303caca99b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:56:32:f5:c6:42:df:39:d1:3b:33:6c:70:40:
                    1a:9c:48:5d:32:fb:16:1a:80:e9:de:d1:af:25:14:
                    20:1a:c0:4b:59:ce:f3:6e:17:1e:e5:15:a1:52:88:
                    da:2b:ea:28:f2:5b:52:ca:c9:4f:61:dc:89:12:d4:
                    9b:7e:e6:ab:d0:69:21:33:93:cb:f5:ac:4d:d9:59:
                    62:4d:fd:6f:a3:2c:10:d4:1a:a4:8f:34:84:41:37:
                    05:a6:82:70:ea:51:74:6e:78:cf:51:9e:98:1b:8e:
                    06:71:f6:40:9f:2b:c9:84:24:97:57:dc:1d:b9:ed:
                    e7:86:ab:74:48:73:05:f4:d0:15:2a:fd:5b:b2:f2:
                    65:2b:55:4e:da:b6:5c:8e:e9:b6:37:42:11:15:a1:
                    0a:8a:7c:f5:45:c7:30:b7:e2:e1:48:9b:c7:91:a1:
                    ee:3c:51:6c:30:66:00:ab:ad:8e:9f:a2:1c:c9:c5:
                    cb:89:11:27:aa:19:12:59:38:16:c6:63:ed:c2:23:
                    19:17:84:6a:a5:b4:c7:07:90:48:76:1f:40:a4:d0:
                    a6:08:27:aa:b8:bd:e6:dc:86:25:8e:3d:ee:fe:83:
                    0c:e0:ae:6a:38:63:34:26:0f:09:08:4b:86:ae:13:
                    a3:4e:fc:00:81:d4:0b:42:1f:75:f5:1b:b4:74:6a:
                    a4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CB:17:34:9A:05:4B:2E:6C:A0:8C:E7:D0:10:F3:03:CA:CA:99:B7
            X509v3 Authority Key Identifier:
                keyid:48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ee:1c:16:e6:f1:be:a5:68:9e:ec:65:e7:4a:98:74:a0:23:
         a6:7c:c5:e6:d3:3e:4b:4a:aa:e3:97:ad:3d:db:40:b1:0b:2d:
         99:32:ff:1f:af:3a:59:c2:33:60:b6:67:a7:81:84:11:e9:4d:
         d0:5b:24:fc:1b:3c:49:94:f8:ca:26:72:63:6e:b3:fe:78:76:
         5c:ed:12:16:91:d5:6f:ca:33:5c:e1:c0:da:19:8f:14:19:44:
         e1:73:55:75:29:f3:8f:a4:16:01:a9:7b:b1:e3:97:b4:99:cb:
         e6:57:7b:7d:d9:f1:0b:14:62:88:0f:38:c8:a5:fb:ea:f6:c7:
         7b:f4:e5:c1:43:f2:9b:fe:39:93:73:33:1b:6f:97:92:62:01:
         4e:db:50:a3:10:5e:4a:59:a7:be:a9:0a:a4:68:bc:a1:5e:d7:
         9f:7e:56:4f:1e:b5:40:cb:e8:44:a9:06:38:8d:a7:a3:4f:31:
         8f:98:7d:95:f0:3b:02:76:ea:fc:34:c1:7c:ed:a5:bb:2d:48:
         e6:ec:ad:37:ee:33:5f:b7:ab:e8:00:1b:0f:46:19:c4:ef:bc:
         6f:db:5f:a7:0e:46:e1:17:8e:e6:b5:42:15:a5:ef:19:62:dd:
         22:d4:6c:6f:a4:ed:9f:1b:b1:df:de:4a:ae:4b:0e:b5:f7:2a:
         db:57:43:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----