Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
File:                     SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft (raw, json)
Hash identifier:          jxAqES6YEeLxxHZy1bhs9wTQrwkOrXrp0mL4sT5dago=
Subject key identifier:   CA:59:7D:EB:FC:0B:FA:2A:04:70:FD:10:6E:D8:D1:3B:DE:9E:8B:91
Authority key identifier: 49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E
Certificate issuer:       /CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e
Certificate serial:       01962DF432C282CDE67E978C289AEE6F7CA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
Manifest number:          1200
Signing time:             Sun 13 Apr 2025 07:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:40 +0000
Files and hashes:         1: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl (hash: YqFM39tbXSP1cCAcy18OUHCsrOiyyNA296NLMyOAyG4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:32:c2:82:cd:e6:7e:97:8c:28:9a:ee:6f:7c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e
        Validity
            Not Before: Apr 13 07:01:40 2025 GMT
            Not After : Apr 14 07:01:40 2025 GMT
        Subject: CN=ca597debfc0bfa2a0470fd106ed8d13bde9e8b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e7:1a:3b:bb:5b:01:e2:f0:8f:55:78:53:45:
                    d9:8a:de:18:82:73:49:35:2e:d9:af:c2:87:28:1e:
                    1d:8e:ca:f6:d1:4a:fd:97:6b:9e:9b:3a:50:f1:c0:
                    14:7f:7e:c7:0c:dd:40:8e:79:f0:ee:49:f7:23:a9:
                    e6:7d:b1:c5:cb:4b:93:4c:37:65:ba:f9:ed:2e:d7:
                    74:3c:49:7b:c9:95:3d:87:b3:47:19:3b:7a:1d:21:
                    a8:f3:1c:0d:f6:c8:42:38:7d:9a:b6:eb:e4:92:2c:
                    33:e3:5a:2c:2a:97:7d:6a:c9:70:65:d8:b5:7a:a8:
                    9c:cd:50:4b:3a:9a:69:5a:a7:23:e3:10:47:45:95:
                    60:2e:8a:da:09:cc:75:7a:9f:37:b5:67:c7:12:51:
                    47:cf:ae:8c:94:a2:44:26:a5:22:b4:56:af:99:59:
                    76:71:89:06:64:36:85:4e:15:3c:0e:20:0f:39:fe:
                    e2:dc:18:fc:3e:f6:37:39:7a:96:cf:2a:47:cb:69:
                    33:fe:99:74:9b:28:e0:86:92:31:26:0e:62:85:df:
                    b5:b2:60:8e:ee:68:db:8a:42:43:86:bd:5d:b7:6e:
                    87:14:ea:59:bc:ca:ba:0b:d6:9b:fd:94:72:aa:ee:
                    0d:8e:4c:34:0f:c1:39:11:b0:11:eb:7b:1d:b0:1c:
                    ff:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:59:7D:EB:FC:0B:FA:2A:04:70:FD:10:6E:D8:D1:3B:DE:9E:8B:91
            X509v3 Authority Key Identifier:
                keyid:49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:14:bf:65:a0:45:88:21:5c:2e:79:80:36:ce:e8:b7:bd:0a:
         f1:1e:1f:07:9f:88:4e:1f:e3:69:99:0f:06:1b:9f:b5:56:0b:
         01:7f:9e:bc:ab:9e:8f:f6:e1:04:59:37:f3:05:4e:2c:5b:07:
         a3:dd:51:1e:70:ad:8e:7a:19:c9:f0:8c:fd:21:78:18:7a:bc:
         38:76:b5:20:d6:a2:3c:79:e6:08:24:1d:91:2e:8e:e0:e9:71:
         ac:9d:07:51:b8:70:55:b2:de:a4:ba:59:ad:42:ec:33:ed:e8:
         75:ee:a1:79:2c:15:93:54:c4:ce:ab:3d:23:e3:20:a7:f7:9e:
         c7:c2:94:67:ff:73:7d:5b:df:dd:94:a1:1f:22:90:84:c5:c7:
         b7:4d:f8:df:21:d7:f5:71:ed:03:e4:60:bf:2e:a9:43:98:d1:
         b7:46:28:75:2d:0b:e0:53:46:f5:b2:9f:9a:d1:2c:8b:6d:68:
         c8:2d:95:bd:7a:a0:8f:50:7c:ff:01:0f:fd:d3:9a:b9:7f:53:
         20:c8:4a:70:d7:6c:32:51:3f:46:81:f9:2d:e6:a1:ef:10:86:
         1a:06:5a:35:4c:1e:c4:58:e4:93:c1:9e:9c:60:71:88:3f:fc:
         0d:93:ed:a3:63:13:5e:ce:a6:99:e0:b4:dd:b4:d8:2d:cf:ba:
         88:25:67:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----