Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
File:                     syznolxromOxucmrdrjS3DoNaAY.mft (raw, json)
Hash identifier:          JqxwktkxnCaYFZOhHorSpB+cqQ3O3Jl2yk7Xxk+9H2w=
Subject key identifier:   83:7E:95:83:4F:E2:67:7B:99:A3:DC:30:A4:60:DD:0D:3C:A5:2B:72
Authority key identifier: B3:2C:E7:A2:5C:6B:A2:63:B1:B9:C9:AB:76:B8:D2:DC:3A:0D:68:06
Certificate issuer:       /CN=b32ce7a25c6ba263b1b9c9ab76b8d2dc3a0d6806
Certificate serial:       01962E991A57FDD0D3905D077FB656D0CB4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syznolxromOxucmrdrjS3DoNaAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
Manifest number:          039B
Signing time:             Sun 13 Apr 2025 10:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:47 +0000
Files and hashes:         1: syznolxromOxucmrdrjS3DoNaAY.crl (hash: Hy1BEJ9JlRfdkDJs/nTSq/d6dpsGP5AcBIt1TGp0nMU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1a:57:fd:d0:d3:90:5d:07:7f:b6:56:d0:cb:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32ce7a25c6ba263b1b9c9ab76b8d2dc3a0d6806
        Validity
            Not Before: Apr 13 10:01:47 2025 GMT
            Not After : Apr 14 10:01:47 2025 GMT
        Subject: CN=837e95834fe2677b99a3dc30a460dd0d3ca52b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7a:a9:39:ea:9f:2e:a0:fd:3d:2d:38:ff:67:
                    10:7f:42:29:1e:61:d4:97:ae:6e:d9:d8:0a:e9:e6:
                    ba:09:9d:95:41:94:cc:e6:f9:8a:54:79:4a:ad:ef:
                    97:77:6c:51:b1:9a:de:7c:2a:83:3f:7f:e2:46:4c:
                    9e:dd:70:83:7b:69:98:78:35:d5:64:a6:e7:50:8e:
                    7a:bd:fc:36:d7:04:8a:a4:22:72:1a:da:e3:ac:eb:
                    b6:8a:3f:7b:b9:ae:ea:11:ee:c3:57:09:95:97:57:
                    96:6b:5a:53:38:f4:f9:10:8c:0b:93:7f:62:5d:48:
                    53:e4:cf:7e:f1:cf:de:eb:12:69:41:df:e8:b1:27:
                    95:4e:c6:3e:ca:32:63:f5:13:17:7e:02:7c:c8:fe:
                    3a:58:ae:18:b5:71:d2:37:f8:15:0b:f4:a0:55:c0:
                    85:55:21:d7:65:24:8b:cb:bd:af:bd:b9:38:0c:26:
                    86:81:e2:24:2e:6c:bb:a6:8f:09:8a:01:02:ec:e9:
                    cb:28:05:58:c0:0c:10:2a:a2:12:80:fc:8b:73:87:
                    51:78:03:de:ad:8e:c6:45:bb:64:bf:c5:11:88:32:
                    d5:aa:21:74:29:68:eb:41:ea:01:5e:70:17:36:d5:
                    f6:86:14:21:b8:1d:8f:89:d3:76:2b:48:0c:bf:df:
                    1a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7E:95:83:4F:E2:67:7B:99:A3:DC:30:A4:60:DD:0D:3C:A5:2B:72
            X509v3 Authority Key Identifier:
                keyid:B3:2C:E7:A2:5C:6B:A2:63:B1:B9:C9:AB:76:B8:D2:DC:3A:0D:68:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syznolxromOxucmrdrjS3DoNaAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ed:28:74:95:87:e2:53:56:6d:f9:16:4b:c0:37:c0:53:5c:
         1b:a8:d2:21:ed:99:95:74:78:a4:30:d3:4e:aa:40:b5:37:32:
         b8:59:a2:c3:d3:f3:e1:d1:2d:45:fc:37:29:0a:23:3f:49:6f:
         38:25:fb:33:e3:50:54:46:4d:9a:7c:30:2c:4a:88:25:ab:67:
         bd:2d:4d:c2:b2:d3:ef:94:29:3c:c5:fe:c9:25:c9:ab:31:d2:
         f3:af:f1:e1:11:b8:3e:93:e8:be:d5:73:a2:c3:56:7f:72:e9:
         31:8c:5e:fd:5f:65:4f:3f:07:74:a9:e5:91:fa:9c:91:33:cc:
         fd:cc:4a:b1:b1:10:45:69:50:05:0d:c6:fb:32:20:17:d4:02:
         85:5b:9b:df:63:4a:7a:f4:d8:5d:3e:3c:ea:29:04:09:83:fe:
         dc:d5:78:73:7d:8f:90:9e:f0:37:8c:98:e4:27:98:3a:64:6a:
         0f:9b:10:d5:4a:8d:32:13:ac:40:5d:40:14:2b:88:ac:7a:a8:
         12:6d:51:7c:0b:c4:f1:72:1c:47:7f:31:9e:36:88:b1:5d:e1:
         c2:9b:fb:e1:ae:8f:73:70:21:8d:95:d4:26:87:49:12:08:91:
         af:de:11:20:aa:44:6d:f4:70:80:e4:87:51:4c:7f:84:59:d2:
         23:90:de:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----