Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft
File:                     SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft (raw, json)
Hash identifier:          R98yKG6G31RclskOZEol6vK9ydLVQfzttwQR5J1vA90=
Subject key identifier:   08:3C:95:8A:10:8C:BB:B3:68:0F:CD:91:CB:A2:CD:0A:2D:C9:6A:D3
Authority key identifier: 48:CF:96:AA:5E:B0:77:4F:0D:7B:42:6B:32:74:35:A8:78:8E:B1:89
Certificate issuer:       /CN=48cf96aa5eb0774f0d7b426b327435a8788eb189
Certificate serial:       01962E98BC40E3F24D4253EEB2C58DF427B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:23 +0000
Files and hashes:         1: SM-Wql6wd08Ne0JrMnQ1qHiOsYk.crl (hash: 8vghbHddOrclJhsP4evYBdJWFBiMabr36wYbOpHBrHI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:bc:40:e3:f2:4d:42:53:ee:b2:c5:8d:f4:27:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cf96aa5eb0774f0d7b426b327435a8788eb189
        Validity
            Not Before: Apr 13 10:01:23 2025 GMT
            Not After : Apr 14 10:01:23 2025 GMT
        Subject: CN=083c958a108cbbb3680fcd91cba2cd0a2dc96ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:75:13:6d:76:d6:2e:db:31:7b:7e:77:ed:a3:
                    03:8f:f3:ff:1f:c5:54:49:f8:4a:94:09:7e:37:ca:
                    bc:f8:e4:a0:d1:0e:e6:c2:6b:dc:87:2c:a6:c5:bd:
                    d6:41:4b:f4:41:5c:3d:d3:3b:6c:5b:e2:39:90:e0:
                    17:cb:7d:4f:8b:e8:87:5b:e4:d7:18:b9:9d:38:17:
                    89:1c:8a:04:a7:3a:4e:37:02:84:6f:98:8e:ba:cb:
                    1c:d0:8f:6f:48:82:4a:7f:2e:1a:6e:c0:94:f5:3f:
                    c4:50:0a:15:04:43:a3:d4:3f:ad:b4:2e:b6:74:04:
                    98:ad:64:ec:e7:f5:f5:ff:63:65:41:a7:16:9c:f3:
                    5f:a3:d9:cf:39:a3:75:71:87:71:5e:95:a2:77:9b:
                    ac:aa:4d:94:57:55:02:51:26:cd:6e:e4:f5:45:59:
                    42:97:2b:64:b9:3a:7a:16:fa:e6:6d:5e:a3:e2:41:
                    e5:8a:83:b0:a3:37:78:98:6e:9d:77:9d:60:db:54:
                    e3:5d:1d:b9:a4:b7:4d:dd:7d:6f:7a:86:8d:1d:1f:
                    57:52:51:c6:33:84:38:c2:80:aa:33:8c:8c:a1:e3:
                    a2:74:40:e0:d5:7e:59:d3:d4:b4:b0:8b:f6:55:75:
                    ae:82:2e:4c:cd:59:d9:b8:a3:cb:23:96:24:43:ca:
                    d2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3C:95:8A:10:8C:BB:B3:68:0F:CD:91:CB:A2:CD:0A:2D:C9:6A:D3
            X509v3 Authority Key Identifier:
                keyid:48:CF:96:AA:5E:B0:77:4F:0D:7B:42:6B:32:74:35:A8:78:8E:B1:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:48:8a:40:a6:87:a5:4b:7b:e4:8d:cd:a7:27:65:84:bb:79:
         63:b0:d7:a8:80:98:38:7e:90:0c:55:63:a5:0f:c3:a2:e0:41:
         97:f7:85:37:70:54:ae:dc:a1:bf:5b:7b:c7:eb:f5:1a:d5:2d:
         3b:62:22:fb:65:9f:b8:3c:62:b9:bd:12:a3:8f:11:b7:d6:bc:
         1f:a6:c1:c7:e4:4f:97:5a:be:58:22:cf:b7:1f:be:86:e5:f7:
         ef:e7:3f:e2:2a:16:5a:f6:19:29:3b:ff:ae:21:ee:bc:fd:02:
         66:23:63:ec:78:b6:77:fc:76:7b:96:0b:ab:e5:9d:2d:3c:26:
         f1:b3:af:40:23:ab:ce:9e:dd:18:0a:3a:d6:fa:a0:aa:4d:a9:
         a0:5e:6b:f3:cb:48:ac:27:3f:09:59:3e:a0:8d:83:bc:9a:cf:
         1f:3a:76:36:53:2b:7c:ab:f5:c2:95:21:3d:f3:a9:4e:93:15:
         b2:6e:6b:d9:00:aa:b4:88:40:2e:8e:11:61:50:dc:dd:9b:48:
         d5:30:58:e5:1c:38:30:d2:b0:dd:d6:9a:23:d3:b3:f5:f9:f2:
         5e:b7:26:4b:27:04:4c:3d:17:67:6d:5f:45:8a:e9:f9:63:30:
         c3:84:a6:cd:89:55:b6:83:a8:7e:2d:ff:d5:4c:cf:e6:29:db:
         03:7b:9a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----