Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
File:                     SuVbOScPau6FdT3OFO2eHx_ImyQ.mft (raw, json)
Hash identifier:          f3dmDQupeaqB2j9MpNuSelpQgR6+yl6SjcMnFWeghOQ=
Subject key identifier:   76:5C:8D:0C:1B:CE:80:B3:11:29:28:76:5D:9E:A8:74:6E:A8:1F:75
Authority key identifier: 4A:E5:5B:39:27:0F:6A:EE:85:75:3D:CE:14:ED:9E:1F:1F:C8:9B:24
Certificate issuer:       /CN=4ae55b39270f6aee85753dce14ed9e1f1fc89b24
Certificate serial:       019AE2966596F82A57BD2BD353FE7040816A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
Manifest number:          1757
Signing time:             Wed 03 Dec 2025 05:01:38 +0000
Manifest this update:     Wed 03 Dec 2025 05:01:38 +0000
Manifest next update:     Thu 04 Dec 2025 05:01:38 +0000
Files and hashes:         1: SuVbOScPau6FdT3OFO2eHx_ImyQ.crl (hash: Mzca/vknU+0K7K4g2qwixo72VXBmjPQTtHGm8tXQLaU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e2:96:65:96:f8:2a:57:bd:2b:d3:53:fe:70:40:81:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ae55b39270f6aee85753dce14ed9e1f1fc89b24
        Validity
            Not Before: Dec  3 05:01:38 2025 GMT
            Not After : Dec  4 05:01:38 2025 GMT
        Subject: CN=765c8d0c1bce80b3112928765d9ea8746ea81f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:77:09:38:63:ad:3d:2a:22:85:2e:2d:bf:ef:
                    28:05:4a:c8:ed:8e:01:92:ea:80:60:f4:48:e8:4b:
                    c7:45:32:0f:cb:63:6e:6a:a7:86:09:33:84:00:2a:
                    9e:0d:ed:b5:82:94:e2:24:bc:7d:2b:16:ac:7f:15:
                    f6:55:ce:9a:c9:86:ea:f5:72:c6:6b:ba:4b:5e:00:
                    9a:76:31:35:ea:66:82:52:51:9a:b5:1f:26:d8:95:
                    c4:72:d0:c6:9d:5c:fc:65:22:11:e5:d9:27:4a:87:
                    1e:e4:eb:6d:11:60:6b:50:d2:c3:8f:e1:0e:bb:cc:
                    19:6c:61:dd:a8:c8:f8:4e:84:36:ef:2c:6d:84:82:
                    83:c7:a5:85:c2:9f:9b:d3:a2:6e:e8:7b:a7:70:05:
                    64:8c:d9:57:cf:73:92:0b:7b:74:f1:db:b9:a4:cd:
                    53:66:36:fc:62:34:a8:fd:1f:55:7c:24:c1:1d:09:
                    83:36:13:b3:19:0a:0e:14:98:79:8c:97:69:a1:31:
                    6c:cd:45:c7:8a:9f:f2:0c:39:63:43:20:49:17:0b:
                    63:4f:ba:8f:17:fe:a6:f4:53:b5:87:20:4d:23:68:
                    26:b1:71:92:de:10:ff:24:26:9a:9b:d0:83:97:9f:
                    5b:6c:63:41:70:3a:0c:35:f4:e3:0a:b4:da:df:27:
                    43:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5C:8D:0C:1B:CE:80:B3:11:29:28:76:5D:9E:A8:74:6E:A8:1F:75
            X509v3 Authority Key Identifier:
                keyid:4A:E5:5B:39:27:0F:6A:EE:85:75:3D:CE:14:ED:9E:1F:1F:C8:9B:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:35:35:aa:3e:24:aa:aa:2a:33:fa:1f:14:e9:d2:89:08:61:
         a8:25:48:b4:00:4e:b3:ce:59:6a:0a:4a:42:fb:88:32:6a:79:
         69:52:71:83:17:31:ad:65:14:05:61:07:a8:fd:6d:30:7d:e8:
         33:6e:69:79:cd:43:ae:cf:34:42:5d:10:6d:73:74:b2:d3:fb:
         b3:f6:00:ed:65:29:64:b2:1a:d3:0e:92:17:ad:c7:a5:14:0d:
         3b:37:81:90:6d:77:1b:c0:64:2e:fe:83:4d:c5:2a:05:a6:d1:
         bc:4d:da:29:74:9e:80:19:49:9e:2a:7a:18:10:1a:8e:96:c6:
         d5:ab:bd:e4:49:d5:09:54:93:d0:1c:2b:14:b7:4f:0b:76:6c:
         5d:cb:81:c4:4d:d7:03:e7:c5:76:f2:a2:95:70:bc:63:09:cb:
         ce:c8:e9:a2:59:d4:15:b0:12:c5:a2:ef:96:ab:2c:65:bb:b4:
         35:2e:5d:38:51:4c:83:ba:d0:9e:9a:b4:a4:1b:29:8f:30:6c:
         2e:ae:1e:79:12:d9:cd:a2:40:ba:47:17:5a:44:e9:26:7f:c4:
         fe:7a:25:e2:44:ba:d5:06:a5:43:a2:cb:9f:50:be:b5:2c:eb:
         c4:4c:4d:67:22:27:98:5f:91:5d:c5:cb:35:51:28:03:f0:c4:
         25:a5:fb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----