Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
File:                     SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft (raw, json)
Hash identifier:          geh7uSZVLVz8lnvlc+AgybPHIod2HO5wBczqxA41pmI=
Subject key identifier:   C6:2D:4E:71:54:0C:E3:7F:05:A0:65:67:2F:A3:34:0D:AF:DA:A3:60
Authority key identifier: 4A:60:F3:8C:F3:6F:CC:9B:C5:13:29:35:12:B4:6B:91:1E:DF:5A:C5
Certificate issuer:       /CN=4a60f38cf36fcc9bc513293512b46b911edf5ac5
Certificate serial:       01962E98913263FE92B8B5E5E4EF37CC6077
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
Manifest number:          0CDD
Signing time:             Sun 13 Apr 2025 10:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:12 +0000
Files and hashes:         1: SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl (hash: pUcNda4MxMTbC7DNV0w9zPXpK1W+G4XKYHPseQhS7QE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:91:32:63:fe:92:b8:b5:e5:e4:ef:37:cc:60:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a60f38cf36fcc9bc513293512b46b911edf5ac5
        Validity
            Not Before: Apr 13 10:01:12 2025 GMT
            Not After : Apr 14 10:01:12 2025 GMT
        Subject: CN=c62d4e71540ce37f05a065672fa3340dafdaa360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:63:d6:11:ce:7f:ef:09:fc:bc:df:9b:45:ec:
                    61:77:6c:cb:e5:69:96:b5:c1:8e:7b:1e:86:77:58:
                    bc:35:21:b0:42:c8:8e:d9:9a:d1:a0:6f:58:76:a6:
                    ab:4f:54:1f:6f:76:c1:57:fe:d1:96:0d:b1:42:b6:
                    13:22:58:99:cc:0f:86:50:42:0e:2a:78:87:57:4e:
                    59:14:64:a0:3d:c6:37:67:2e:95:ce:f6:63:0e:69:
                    81:85:cd:f1:eb:02:74:f8:e9:e4:0e:14:88:5d:8d:
                    8a:da:6e:d3:6f:73:46:5e:d6:41:a9:8b:b6:32:f2:
                    f9:61:50:e7:ce:b2:33:70:06:8f:7d:ad:ed:23:29:
                    f3:62:98:00:2b:12:2e:29:1d:fb:f2:35:a0:8d:ae:
                    c5:81:e3:b6:50:b5:07:d3:0e:08:3b:88:3c:2c:88:
                    6d:79:a8:bb:38:67:f8:2b:b1:47:3c:4b:62:b4:89:
                    7b:e8:16:65:82:74:37:77:6f:5d:bb:15:af:f3:3c:
                    b7:85:67:65:a2:b3:fc:65:7b:93:3e:f9:c4:2d:35:
                    7f:6d:dd:ff:3b:d1:7d:bf:92:4e:22:e2:39:8b:80:
                    18:24:b3:04:b1:3e:53:43:44:da:da:7f:71:3a:78:
                    5e:41:68:84:a1:52:9f:43:78:38:23:07:d2:d3:f1:
                    66:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2D:4E:71:54:0C:E3:7F:05:A0:65:67:2F:A3:34:0D:AF:DA:A3:60
            X509v3 Authority Key Identifier:
                keyid:4A:60:F3:8C:F3:6F:CC:9B:C5:13:29:35:12:B4:6B:91:1E:DF:5A:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:99:3b:4f:ad:71:09:db:52:c4:c1:d3:71:76:fc:b2:7a:98:
         c3:2a:06:f5:b1:62:45:81:b9:47:68:6b:12:66:7a:21:ef:3c:
         83:11:8b:ad:26:b7:99:cb:fd:f6:ca:62:e9:05:05:2f:52:11:
         4f:f7:10:a8:ae:63:48:c7:7a:ed:34:3a:1c:ba:1e:bc:06:60:
         01:7f:e5:b9:4e:6f:b8:e2:08:28:31:78:29:a6:25:4b:06:c0:
         a1:87:9e:f0:4b:12:5b:26:09:32:6d:e2:91:eb:e7:d1:22:a9:
         10:cf:a6:00:96:a8:19:3a:b2:c4:f4:31:8b:cc:f5:5c:5f:38:
         c4:2e:62:8e:20:02:6d:65:80:5d:8b:12:c8:ae:ac:b9:17:d7:
         17:31:40:0f:cd:c6:04:70:a3:a4:7a:0a:24:95:f9:53:4b:a5:
         64:b1:5a:bc:c4:e8:64:4a:02:4e:80:26:71:cf:0a:5c:42:18:
         38:c0:29:94:b7:cb:a7:07:db:fa:4d:c0:d3:b3:b9:b7:aa:e4:
         b2:2d:8c:77:b4:b4:99:68:a6:e2:5e:2b:c5:64:fb:66:b0:db:
         fb:21:3a:92:18:5b:cb:53:e8:9e:d7:72:0b:0c:c4:1f:dc:a6:
         a5:6b:b6:79:68:e1:31:10:04:74:b2:e7:5b:3b:b3:66:a7:05:
         de:f8:4a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----