Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
File:                     SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft (raw, json)
Hash identifier:          OYjGUcFlkR/I4a99rpcOJb5euuzQMZ4rGsi6U3qc+Mg=
Subject key identifier:   B7:D9:E5:B4:02:20:41:E6:BB:98:C2:B6:A2:8A:E1:34:01:AD:AD:2A
Authority key identifier: 49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
Certificate issuer:       /CN=490957f79e6c28146643f49d9fe17fc4f163776c
Certificate serial:       01962E9903EF0256C4D44635C13B7818B55B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
Manifest number:          0BCD
Signing time:             Sun 13 Apr 2025 10:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:42 +0000
Files and hashes:         1: SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl (hash: 5xdL3BlslwqwOZb0iMjt2k2I3rVbfDtwQwhisg/Iav8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:03:ef:02:56:c4:d4:46:35:c1:3b:78:18:b5:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490957f79e6c28146643f49d9fe17fc4f163776c
        Validity
            Not Before: Apr 13 10:01:42 2025 GMT
            Not After : Apr 14 10:01:42 2025 GMT
        Subject: CN=b7d9e5b4022041e6bb98c2b6a28ae13401adad2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:97:49:b3:6f:85:22:76:9d:14:ef:6b:a4:ed:
                    db:4a:9b:b1:76:6e:2e:e5:28:d8:64:32:e0:a4:73:
                    a2:82:2b:22:08:08:33:e0:41:2c:d2:08:2c:84:d3:
                    36:3d:e2:29:7a:08:a1:7e:07:9f:27:48:b2:3b:9c:
                    c3:57:e6:a0:6d:67:ca:0b:10:65:df:5e:3d:ae:8a:
                    32:01:cf:08:58:c4:b3:a8:22:f8:cd:d6:72:42:07:
                    57:b3:07:42:04:10:65:ae:50:09:f5:9f:9b:c7:4c:
                    11:0d:57:b8:41:03:b0:02:9c:83:cf:dc:5a:28:cc:
                    51:73:36:4d:a5:a5:35:c6:bf:78:a0:a1:34:60:fc:
                    6f:5e:4e:91:ca:d5:9b:d7:bc:0c:1d:fe:e4:c0:cd:
                    88:48:48:d7:2c:9e:fd:28:1f:73:a2:64:0b:1e:b0:
                    5a:10:43:06:c2:ce:b9:90:ed:71:39:9e:30:cd:b6:
                    d6:2c:4d:79:b6:f0:96:0a:1e:e0:92:88:f3:0f:0a:
                    9e:4d:da:f5:5f:65:fe:db:2e:40:48:11:56:d0:97:
                    f5:6c:7c:22:14:6e:c2:82:1c:85:33:b7:8a:53:1b:
                    88:a9:e9:35:7d:e1:a1:9c:27:80:7a:b5:0e:95:b5:
                    fd:0f:07:e0:5c:61:55:7b:e1:9c:74:e3:80:b3:87:
                    78:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D9:E5:B4:02:20:41:E6:BB:98:C2:B6:A2:8A:E1:34:01:AD:AD:2A
            X509v3 Authority Key Identifier:
                keyid:49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b0:0d:79:95:21:20:92:2c:c1:2e:aa:52:1c:93:49:d5:f6:
         33:7c:6b:b4:1c:e2:95:7f:39:c4:0e:34:6c:e2:f8:3f:f7:f2:
         75:db:af:b3:d5:66:4d:1d:e0:b8:61:2a:b7:25:b5:62:4d:17:
         5c:e3:f8:a2:ab:d5:4c:f5:81:31:f0:ba:d4:cd:0b:bc:a8:52:
         09:d9:fb:d5:a4:cb:74:3a:40:53:5b:e8:0b:35:14:b4:15:8d:
         ce:c9:9f:7b:b9:dc:48:9a:4f:ac:2b:c4:48:dc:9f:0f:f4:d9:
         75:8b:b4:37:d8:c9:f8:86:4c:89:b4:09:0a:69:5a:86:16:73:
         e4:b6:72:32:09:61:81:3d:7b:34:d0:8b:7d:88:db:f6:69:42:
         2b:2c:37:a0:97:a1:80:d0:76:5f:1d:0c:d8:8e:88:0a:31:3c:
         6f:e6:9b:57:ac:77:30:24:a7:d6:8b:57:54:12:dc:10:2d:4a:
         43:36:19:ac:f0:97:44:cd:78:09:b1:82:a5:4d:71:e7:0d:1b:
         b3:04:ac:3d:34:8f:c8:bd:02:bd:99:5a:ac:8a:1c:45:6a:47:
         18:d3:10:78:02:3a:f3:8c:af:28:7d:9b:2d:7e:2a:b3:73:67:
         72:36:71:f0:c0:75:64:17:ef:80:7f:d4:4a:75:fd:e1:9d:02:
         45:14:ed:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----