Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
File:                     SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft (raw, json)
Hash identifier:          Nnj2/liBxLw4Xzq5v0WfpcgveJ8UyQZdDz6XsDgUJqg=
Subject key identifier:   7C:A7:BC:E4:8F:F1:EC:AF:AD:B5:4A:14:34:5A:68:E7:AD:A0:91:06
Authority key identifier: 4B:38:1B:AA:0A:0A:DD:32:A9:F9:41:4F:9B:2C:9A:5A:32:25:34:2E
Certificate issuer:       /CN=4b381baa0a0add32a9f9414f9b2c9a5a3225342e
Certificate serial:       01962F06F2947745DD9E619723F67EBE2323
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
Manifest number:          0D72
Signing time:             Sun 13 Apr 2025 12:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:46 +0000
Files and hashes:         1: SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl (hash: IgBxqhDahbAYlkXwl1yszvYAaHTUAatGBRmkQT/p9PU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f2:94:77:45:dd:9e:61:97:23:f6:7e:be:23:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b381baa0a0add32a9f9414f9b2c9a5a3225342e
        Validity
            Not Before: Apr 13 12:01:46 2025 GMT
            Not After : Apr 14 12:01:46 2025 GMT
        Subject: CN=7ca7bce48ff1ecafadb54a14345a68e7ada09106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a5:ae:74:2a:c3:82:75:fc:b6:5f:15:5a:eb:
                    de:e2:35:5a:6e:78:e2:cf:de:23:25:eb:7a:50:64:
                    11:94:e0:82:69:cd:b1:4b:a7:2d:df:5e:59:9e:cf:
                    c7:1f:1d:df:e4:0c:ca:9e:4c:5a:86:e6:aa:24:23:
                    9f:da:f1:34:37:ad:54:04:9a:d8:fa:97:f0:04:28:
                    1e:f1:97:87:c7:11:dc:8e:7c:6d:3a:ce:b4:9f:cf:
                    8e:ce:81:6a:b2:5d:50:1f:a1:cd:54:36:ec:53:e6:
                    45:c4:c7:87:a3:6b:3d:42:05:04:5e:2a:e2:17:ca:
                    2f:a7:f1:d4:ce:f6:69:98:8b:04:4e:be:08:c6:33:
                    21:89:d8:4a:eb:c2:0e:15:18:cd:93:ef:da:62:c0:
                    41:21:e2:99:59:46:73:32:6a:45:42:1f:6d:27:6d:
                    6a:eb:fb:14:bd:71:4d:54:76:cc:f4:74:df:aa:00:
                    27:8b:60:1b:0f:96:09:d1:25:3d:08:91:a0:41:02:
                    90:85:21:bc:12:89:2f:4a:5c:1a:97:2e:f5:ea:27:
                    2a:2a:98:3f:d8:e5:c1:0f:c6:20:64:3e:b6:3d:66:
                    dd:84:ed:d9:ee:f2:54:00:5a:c6:1c:ac:24:d2:9a:
                    7f:9f:dc:a1:e4:d6:3b:bf:54:5d:f0:00:57:56:95:
                    dd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A7:BC:E4:8F:F1:EC:AF:AD:B5:4A:14:34:5A:68:E7:AD:A0:91:06
            X509v3 Authority Key Identifier:
                keyid:4B:38:1B:AA:0A:0A:DD:32:A9:F9:41:4F:9B:2C:9A:5A:32:25:34:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:37:db:2f:86:fd:48:83:9f:86:41:6c:f2:db:77:0f:a4:5d:
         04:3f:d1:69:1d:2b:40:2f:0b:a2:1c:64:1c:df:b0:5b:44:5c:
         3c:c6:f3:d9:38:97:be:0f:eb:7b:88:de:9c:4e:91:ba:68:b6:
         6b:f6:8f:11:14:2e:d9:dd:b0:4e:42:5e:ea:f3:b0:ff:95:e1:
         d9:3a:5d:5f:f2:74:51:87:5d:7f:6f:6d:f6:62:69:dd:4e:78:
         83:60:df:43:75:ec:81:6b:5d:a4:e3:06:6d:e4:d1:28:3b:9c:
         35:15:86:c4:48:ff:58:49:ed:7d:a4:a4:41:72:17:74:df:34:
         98:e1:27:7d:63:7a:c8:06:b8:a3:df:a7:cc:69:0d:11:f6:a7:
         1b:99:fa:af:34:f9:9e:0a:05:3a:5d:66:0e:f8:c1:50:d2:94:
         c4:d8:bf:eb:9d:8a:cc:1d:b3:67:71:cc:f5:2e:41:17:e1:d2:
         d4:d3:81:5f:0d:1e:75:27:4f:cf:e1:27:a9:ee:1a:46:52:d2:
         2a:0b:d1:94:9d:3a:fc:1c:96:5e:85:70:6a:39:67:a1:2d:bf:
         15:00:f3:a1:3e:f3:9e:0e:e0:14:f1:45:03:47:f8:db:21:58:
         40:ac:74:27:70:00:d5:26:3f:fc:1e:f8:55:d2:6e:23:50:f8:
         a6:c1:f0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----