Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
File:                     sworSE4m8w01_YKjRCf_IgHLUAM.mft (raw, json)
Hash identifier:          +mdYFrKk5vbfA96VG6w3u4brTMnPSGH4rcNCmcsqOk0=
Subject key identifier:   36:45:83:0E:CD:90:DE:CD:49:5F:23:18:51:1A:5D:75:99:BE:30:4E
Authority key identifier: B3:0A:2B:48:4E:26:F3:0D:35:FD:82:A3:44:27:FF:22:01:CB:50:03
Certificate issuer:       /CN=b30a2b484e26f30d35fd82a34427ff2201cb5003
Certificate serial:       01962DF411B2D0D4D765216B0032610D7F86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 07:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:32 +0000
Files and hashes:         1: sworSE4m8w01_YKjRCf_IgHLUAM.crl (hash: Tyt6MpGU1nKkYHwM1sVSN5ekh8faJ7AMNz59tgRof8c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:11:b2:d0:d4:d7:65:21:6b:00:32:61:0d:7f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30a2b484e26f30d35fd82a34427ff2201cb5003
        Validity
            Not Before: Apr 13 07:01:32 2025 GMT
            Not After : Apr 14 07:01:32 2025 GMT
        Subject: CN=3645830ecd90decd495f2318511a5d7599be304e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:d6:0e:53:9e:9f:c9:5b:4b:ee:bb:4a:f1:5c:
                    a6:f6:a1:66:b4:0e:dd:d5:ab:74:5f:e6:91:9c:98:
                    51:ac:0b:b0:98:13:24:52:37:ff:5c:e8:9a:7f:ae:
                    c8:d4:f9:36:06:c4:97:5d:a8:1b:7f:5b:f5:ba:fd:
                    c0:b2:85:e0:cc:92:81:14:bf:3b:b8:b4:66:65:bc:
                    56:27:0b:fb:2d:8c:1d:38:a6:bf:f3:d8:c1:8f:d1:
                    6a:26:fd:39:ef:29:c3:9f:21:c7:e7:36:0a:b2:2a:
                    34:55:d8:b9:2c:ad:f0:d4:9f:66:01:93:3c:55:c9:
                    a3:a7:f7:0c:c3:bc:45:8b:d1:85:be:79:4b:4d:11:
                    61:d0:3e:b9:22:5d:ed:db:68:99:ea:4b:60:79:c8:
                    65:c8:85:97:42:79:30:90:61:56:94:2a:94:d9:ec:
                    19:33:ac:09:27:66:35:4a:a6:6a:c2:d8:4e:b7:59:
                    86:01:16:9b:a6:04:96:bf:dd:5f:17:d3:c4:2a:71:
                    0f:13:6b:1b:44:b5:76:51:18:16:2d:c5:e3:a9:59:
                    27:a7:60:93:88:ed:d7:ec:42:bf:5b:4a:73:7c:7b:
                    d2:e1:28:00:fd:b0:75:c0:e1:85:03:57:14:cb:76:
                    24:b5:a4:28:2e:b9:42:31:d1:0d:27:7e:cc:3c:4b:
                    63:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:45:83:0E:CD:90:DE:CD:49:5F:23:18:51:1A:5D:75:99:BE:30:4E
            X509v3 Authority Key Identifier:
                keyid:B3:0A:2B:48:4E:26:F3:0D:35:FD:82:A3:44:27:FF:22:01:CB:50:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:82:a7:d8:b0:0a:83:45:70:4f:4e:54:4a:93:75:a8:21:5f:
         9d:94:5e:86:0f:da:fb:55:42:0c:28:92:34:db:12:61:c8:76:
         cb:81:2f:c5:9d:c0:76:6d:61:3d:aa:9c:aa:90:37:1d:dc:2d:
         d4:8c:55:af:17:30:8d:2e:bb:8d:e0:bb:ab:5c:99:bc:92:87:
         52:e1:98:e7:7d:5e:92:db:bd:47:4f:47:32:b6:b6:eb:e0:72:
         ca:7c:c3:a7:7e:9f:35:30:e1:f6:c1:1f:d9:80:69:97:19:80:
         c2:16:12:9d:fc:cb:f9:ac:61:e6:ee:23:14:b5:88:bc:4c:66:
         d4:1e:72:e4:97:b7:85:d1:02:7f:d9:ab:66:3b:e5:a7:d5:35:
         2a:5d:53:5b:83:5c:3b:97:d5:49:95:93:b1:6a:9d:bf:5a:40:
         c4:a1:98:cf:a2:5c:34:1a:e6:33:ba:95:e7:d1:ae:9d:4f:50:
         6c:e2:97:d3:8e:b1:9b:27:49:63:53:96:24:2c:29:7d:f4:bf:
         ee:84:66:1c:30:d0:c7:b6:09:7c:06:c4:be:5c:0e:2b:58:27:
         2f:f6:81:bf:a0:75:ad:28:49:c3:d3:6c:7f:ae:8c:3b:d3:02:
         f8:03:44:d8:5c:c0:b2:7f:4f:b8:c6:b4:ea:8d:0c:f2:b6:5f:
         f9:f2:d9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----