Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
File:                     SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft (raw, json)
Hash identifier:          p0YKOKvs4gSta8z9WbM0M9vbWOVTxSZBmG5ih4ejQvU=
Subject key identifier:   4C:51:7E:17:45:34:68:9F:E2:78:F1:19:0A:2B:65:AF:5D:C6:B0:B2
Authority key identifier: 49:29:99:FD:50:A6:9F:D0:41:20:65:49:0F:5A:CC:75:A1:59:DE:B7
Certificate issuer:       /CN=492999fd50a69fd0412065490f5acc75a159deb7
Certificate serial:       01962DF44726A9FA707A2B51289D27900E3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
Manifest number:          1444
Signing time:             Sun 13 Apr 2025 07:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:45 +0000
Files and hashes:         1: SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl (hash: HDsj3lsJVGBkVGb6XhrqpDswaAJ9aIJcMHFrIlSEVgA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:47:26:a9:fa:70:7a:2b:51:28:9d:27:90:0e:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=492999fd50a69fd0412065490f5acc75a159deb7
        Validity
            Not Before: Apr 13 07:01:45 2025 GMT
            Not After : Apr 14 07:01:45 2025 GMT
        Subject: CN=4c517e174534689fe278f1190a2b65af5dc6b0b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:6d:cf:ac:7d:59:57:24:a9:01:af:d2:7f:
                    75:64:63:b0:bd:f0:cb:9c:37:6a:e4:31:84:53:1e:
                    84:5d:36:d4:11:4d:22:74:8f:94:91:e5:93:c4:50:
                    80:0f:ed:ae:a6:0f:4a:18:8c:59:7b:3b:6e:06:2f:
                    06:1d:b6:63:92:9f:40:b5:44:29:2b:bc:7a:f8:f9:
                    10:74:c2:84:54:95:55:f4:f9:ea:2a:5f:03:c3:e0:
                    33:a6:2a:ca:bb:d0:4d:d0:7e:1c:fa:25:5d:ee:94:
                    67:72:5d:51:d4:ce:60:b6:9f:4c:d9:cb:e1:2b:3f:
                    56:22:75:7b:7a:f3:d7:ea:8e:84:72:f7:f1:2f:50:
                    5a:85:a5:6d:09:eb:46:c1:85:8b:b3:76:8c:61:4a:
                    8a:bf:20:4f:7e:fb:17:36:b4:77:c6:bd:8f:fe:c7:
                    aa:61:19:f3:4b:63:e9:5d:2c:ae:5b:ee:1f:c7:d7:
                    5c:cb:fb:40:39:6e:68:f4:bc:eb:e8:af:b5:9d:6b:
                    70:1e:4c:91:d8:c7:ea:a1:75:af:28:8a:48:89:81:
                    36:79:3e:bd:f4:8d:4d:25:4c:ae:e1:41:80:c0:52:
                    d7:2e:47:05:10:37:95:2f:37:db:24:8d:11:04:9c:
                    e3:2d:b9:18:eb:17:43:5d:a8:ec:37:d0:83:3d:0d:
                    bb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:51:7E:17:45:34:68:9F:E2:78:F1:19:0A:2B:65:AF:5D:C6:B0:B2
            X509v3 Authority Key Identifier:
                keyid:49:29:99:FD:50:A6:9F:D0:41:20:65:49:0F:5A:CC:75:A1:59:DE:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:8a:bb:39:43:14:d0:04:fb:12:83:36:cc:2c:65:27:3f:7f:
         8e:e7:61:a3:41:48:2f:d6:55:dc:04:a8:ca:8f:6b:4c:9e:33:
         12:15:52:9e:6c:71:0d:9a:b1:8c:99:f6:6d:c3:bb:25:03:6d:
         cc:83:65:78:70:d8:fa:96:dd:2f:f3:d3:f2:2b:aa:43:45:a1:
         89:0c:76:b3:23:6b:45:64:fd:ed:a8:ec:46:0e:9a:b9:07:30:
         fa:29:89:4f:04:6f:f4:87:79:d4:01:46:bc:7a:7a:3f:94:e0:
         2c:e9:97:71:c1:32:d0:92:c5:f1:07:2b:5b:85:73:cf:dc:0c:
         b6:52:4e:09:3e:59:b9:8f:11:60:cf:2c:e3:53:c9:ff:12:eb:
         83:54:db:4c:ed:e0:46:53:48:2c:6d:92:c4:ff:38:2f:a5:e9:
         8f:48:d4:e6:42:fe:35:6f:ba:c5:14:39:be:7e:48:0e:ac:5d:
         f6:46:fd:3a:f4:64:a1:11:c1:11:b4:10:ce:15:d9:bc:1b:e4:
         e8:84:44:42:18:28:6b:17:5c:07:97:99:9a:46:14:a9:e8:db:
         6b:5e:e3:8e:db:e4:96:65:b0:6a:00:95:c0:d4:1f:a5:e1:ba:
         a3:10:64:7f:90:2c:a4:03:a0:c7:a4:90:1c:4e:1e:8f:4b:a4:
         cf:76:7f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----