Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
File:                     jeQsVg_CKLW7T0zwDt4t_ibGYws.mft (raw, json)
Hash identifier:          sAvOCyzjsSeNail3GcWafm3W6a5rNP0/H4m1IR1FNNQ=
Subject key identifier:   4F:14:59:E8:C8:47:15:AD:10:76:AD:86:5A:A8:99:7A:ED:81:8B:27
Authority key identifier: 8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B
Certificate issuer:       /CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
Certificate serial:       01962E9970805ED4C3DA0BE3F66DB12C2547
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:09 +0000
Files and hashes:         1: jeQsVg_CKLW7T0zwDt4t_ibGYws.crl (hash: Lzd/lHnmVSv8wijkce8fdgUVN0DlZMEr7XnhnA4LQtc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:70:80:5e:d4:c3:da:0b:e3:f6:6d:b1:2c:25:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
        Validity
            Not Before: Apr 13 10:02:09 2025 GMT
            Not After : Apr 14 10:02:09 2025 GMT
        Subject: CN=4f1459e8c84715ad1076ad865aa8997aed818b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a2:7c:39:62:c1:6f:70:73:54:a8:c3:8c:4c:
                    56:4e:44:74:51:a3:44:02:bd:d0:6d:21:03:9b:6a:
                    f3:ec:e8:18:eb:a3:76:b3:92:0c:e8:e9:b3:af:08:
                    ae:16:84:35:12:88:40:36:ce:9e:f5:78:77:57:63:
                    0a:cf:61:25:25:01:6e:b7:5b:82:db:0d:3f:8b:52:
                    ba:87:00:5d:17:e0:8f:4a:2c:0b:ba:a3:1b:81:6d:
                    8b:9a:40:d2:cd:37:6a:61:eb:b9:0f:15:1b:ad:27:
                    69:b3:05:4d:0f:12:c6:55:62:e1:f6:f5:76:82:4b:
                    f9:97:63:cd:a7:b9:8f:a1:ec:a0:54:8e:38:9e:19:
                    f7:c8:8a:21:cb:b3:cb:36:e5:28:b2:b1:82:5e:d4:
                    ab:49:39:ec:ef:fe:60:d0:b1:bf:d0:1d:04:63:1a:
                    2f:47:d6:ee:6a:d0:f4:d9:5c:dd:e0:71:25:07:78:
                    ea:fa:58:73:ad:37:9a:90:6e:51:d1:f9:86:70:34:
                    36:7c:cf:6f:a3:23:fb:6d:e0:11:74:42:23:ed:42:
                    e7:b3:99:9a:33:0e:ff:fa:c1:ce:fc:1b:37:bb:91:
                    b0:70:fc:f1:ea:44:bc:b7:91:ae:19:33:6a:71:2e:
                    3b:7d:11:ca:18:15:f1:e4:fe:f9:da:25:24:6a:55:
                    60:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:14:59:E8:C8:47:15:AD:10:76:AD:86:5A:A8:99:7A:ED:81:8B:27
            X509v3 Authority Key Identifier:
                keyid:8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:ee:13:4a:8d:24:50:26:ae:48:fd:20:3b:07:70:03:1b:1e:
         84:47:a4:0f:6d:91:62:70:64:73:96:4d:da:00:4e:84:a9:63:
         e4:70:65:60:7f:a3:93:e1:95:1d:6b:ce:1f:c4:80:21:22:cd:
         61:65:8f:f5:f0:6f:ef:49:29:b5:a4:c6:00:a1:82:9c:ba:61:
         dc:cc:25:3d:3a:02:cc:ba:23:34:72:11:3c:b2:e6:a0:5b:5b:
         1f:e5:ed:42:5c:76:a5:60:12:3f:7b:81:2f:f2:cd:0c:33:82:
         57:4c:e3:c2:10:53:04:0d:8e:95:93:d4:6a:bc:d4:b1:b9:b5:
         3d:49:ce:63:38:ff:2b:9c:6e:ff:59:c1:6f:bc:4f:02:cd:87:
         be:7d:cd:ae:b6:f5:8d:1b:62:5a:39:1b:9d:5e:21:82:49:96:
         61:9e:91:9c:d3:d9:21:cb:76:45:86:41:cb:56:9d:ed:10:89:
         db:7a:3d:b1:6a:61:ce:92:0a:d3:bd:0a:40:b0:67:7e:12:98:
         93:fe:2c:10:a3:61:a0:fb:be:f1:3a:1e:d8:76:1f:73:6b:f0:
         51:fb:91:1c:dc:af:5d:54:95:90:4a:2e:6c:f8:9a:d9:ad:2a:
         47:0a:bb:0a:bc:c1:7d:a1:6a:9f:3e:aa:5b:83:58:80:30:3e:
         bc:8c:93:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----