Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
File:                     sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft (raw, json)
Hash identifier:          7ENr4qAls+XhoY/OX/j0KjEeG8HPNt94NGWBBw37vvQ=
Subject key identifier:   74:B8:37:29:42:ED:68:2A:5D:2E:B9:32:20:3D:AA:5B:18:00:E8:C7
Authority key identifier: B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57
Certificate issuer:       /CN=b1040bc251fe02669f57fea572743a37acfbd557
Certificate serial:       01962F3D5D9456C77FCAC9CC43464373AD56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
Manifest number:          0690
Signing time:             Sun 13 Apr 2025 13:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:12 +0000
Files and hashes:         1: sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl (hash: adb9s55Le4zhi0kXJqbYmZDUog5sYimzkzX0tSPQyyM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5d:94:56:c7:7f:ca:c9:cc:43:46:43:73:ad:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1040bc251fe02669f57fea572743a37acfbd557
        Validity
            Not Before: Apr 13 13:01:12 2025 GMT
            Not After : Apr 14 13:01:12 2025 GMT
        Subject: CN=74b8372942ed682a5d2eb932203daa5b1800e8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3c:a3:10:63:df:cb:44:96:8b:07:80:18:4f:
                    23:53:95:d4:02:20:24:56:79:e6:74:ba:fe:40:fe:
                    a9:d3:81:29:b1:f9:30:ce:ac:9c:63:8b:61:63:a0:
                    a2:40:74:a0:7b:0d:1e:b6:29:ef:cd:46:8c:b8:60:
                    88:4c:e6:0f:6a:4e:db:b9:6b:9a:64:b1:6f:eb:92:
                    8f:e1:18:2d:ac:f3:15:96:a6:92:ea:e2:c9:f3:34:
                    e2:16:b6:d0:2c:7a:1e:47:b3:b3:7a:0b:ed:40:e0:
                    eb:0d:28:6b:0c:d5:03:89:7e:81:09:e9:84:51:2a:
                    29:64:78:25:45:93:9f:71:0b:2f:12:90:63:59:d6:
                    e6:c3:0a:9b:4b:07:6e:11:a7:30:f4:1e:fe:62:11:
                    c7:74:cb:06:fe:90:cd:17:a0:4f:dd:cb:fa:a2:cf:
                    32:80:e9:e3:a3:35:b1:9f:0f:11:70:8b:12:a2:e1:
                    10:9d:4b:b7:4a:df:a4:d3:89:94:43:26:c4:63:0c:
                    df:a2:32:ac:4f:37:fe:bd:e7:50:f9:53:3e:00:17:
                    1e:40:a8:b7:b4:b7:46:5a:09:3a:a6:81:ce:45:44:
                    a9:f5:19:d6:3e:1d:cd:80:8d:09:0d:a8:26:cd:17:
                    d2:49:68:36:7e:17:92:8c:65:2c:45:be:c5:33:2b:
                    6c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B8:37:29:42:ED:68:2A:5D:2E:B9:32:20:3D:AA:5B:18:00:E8:C7
            X509v3 Authority Key Identifier:
                keyid:B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:c8:6e:03:0c:aa:6a:d8:44:82:a3:30:7d:18:79:a6:82:09:
         52:e0:e5:99:59:37:de:dd:01:fa:7c:3c:f1:c9:1b:e2:7a:16:
         17:73:2d:8d:76:17:23:be:f6:a4:d6:3f:7e:73:14:ba:94:81:
         ea:cb:47:7d:08:52:dd:1a:a7:4c:0b:c0:ca:83:3a:ed:a9:84:
         64:4a:30:60:c3:51:53:c7:2c:81:78:0b:9c:c0:db:d8:e8:a8:
         f5:59:c4:aa:a9:d4:01:fc:8c:6e:a8:93:dc:a2:e6:96:30:6e:
         0e:38:7e:d1:01:62:65:0a:80:0b:dc:a9:61:85:f5:51:b7:97:
         b8:b2:72:a9:e4:0b:b4:fb:6d:40:b4:9d:af:ca:a3:9b:84:91:
         4f:35:16:ad:f4:fc:fb:a2:63:d5:34:46:8f:3e:16:cb:cb:2b:
         92:be:9c:4b:b1:cf:f6:8b:b4:5e:4d:c5:f0:e1:76:7f:ad:54:
         d0:57:b4:8b:a0:47:aa:22:4d:87:b2:fb:ea:e2:a1:e7:51:70:
         e8:f3:f2:19:27:87:0f:f6:25:56:29:63:10:96:34:bd:1a:13:
         df:c7:2c:36:79:75:cb:32:a8:5f:e3:57:dc:bd:9b:e3:f5:92:
         bf:dd:67:0d:55:c5:38:11:4f:db:90:00:89:e3:4f:b8:f4:28:
         3c:79:b8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----