Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
File:                     J7irrCClmMyksS9ddV2OiTIfTsk.mft (raw, json)
Hash identifier:          u0DndbfhrTvz1Vi0v/iJCTS9HOD+9TzlCWu9V1NV/ew=
Subject key identifier:   41:FA:A5:8C:EE:65:D5:67:0A:8C:BC:8B:5D:7D:E6:33:B9:C3:0A:54
Authority key identifier: 27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9
Certificate issuer:       /CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
Certificate serial:       01962F06E59F6000CF8DE2A3436CB4DA7E1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
Manifest number:          0E5F
Signing time:             Sun 13 Apr 2025 12:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:43 +0000
Files and hashes:         1: J7irrCClmMyksS9ddV2OiTIfTsk.crl (hash: JhRUgj1P1iTY5xKl/eE9WMId7aQ2oc4dr1Y5kQ9o0xE=)
                          2: vdjx6mVJjB2A5HRAp4zCXF1WOmI.roa (hash: nZy4/J4/xAAVv0Nm8r/1Dh/36Nz5IhwHl0WfPkQGlFk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e5:9f:60:00:cf:8d:e2:a3:43:6c:b4:da:7e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
        Validity
            Not Before: Apr 13 12:01:43 2025 GMT
            Not After : Apr 14 12:01:43 2025 GMT
        Subject: CN=41faa58cee65d5670a8cbc8b5d7de633b9c30a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2a:41:ca:b0:80:f5:0f:20:c5:a4:9e:0e:d7:
                    22:d9:d7:eb:1d:28:ed:35:67:6a:a7:19:3d:45:bc:
                    e0:e3:b7:83:23:09:0f:4c:63:a8:66:05:39:33:52:
                    2f:53:be:32:a3:57:14:06:b3:43:e3:5c:9d:1d:93:
                    df:64:d7:e1:60:02:15:00:7d:62:b4:2c:10:7e:4b:
                    51:a0:52:6e:38:f9:95:eb:3e:c4:03:3c:cb:09:4d:
                    29:b2:c6:42:ae:cf:30:0d:de:b9:cf:5b:9c:cd:aa:
                    a5:c7:8e:63:e0:d2:ec:f6:19:2a:90:6b:73:66:8b:
                    a7:87:d9:64:eb:bb:27:a8:cd:5d:43:0b:18:2a:fb:
                    6e:8f:e0:76:2a:47:d9:8e:b4:9e:d2:da:e7:1b:55:
                    5a:2d:c2:4e:a1:ac:6e:33:5a:b5:43:27:e8:10:f8:
                    46:5a:94:8f:4a:4f:2a:ab:72:6f:12:c1:97:3e:d7:
                    d6:8f:e2:12:2f:f4:c7:82:4c:30:9d:23:89:01:e2:
                    a8:d1:44:44:f3:68:c1:33:7f:98:6b:c9:e4:d4:f3:
                    05:ea:9a:46:6e:de:26:50:9f:be:7e:99:e8:88:a6:
                    7b:b5:de:69:c4:d3:dd:8f:76:c9:21:32:d0:6e:15:
                    d4:46:68:84:20:08:06:e0:15:73:38:00:68:da:84:
                    23:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FA:A5:8C:EE:65:D5:67:0A:8C:BC:8B:5D:7D:E6:33:B9:C3:0A:54
            X509v3 Authority Key Identifier:
                keyid:27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:be:90:d5:08:e7:05:e3:f3:cb:b9:20:90:cd:bd:a6:f4:a7:
         3c:56:f8:00:66:35:fe:ab:7a:51:31:3c:50:c1:6f:a0:86:28:
         d6:00:8c:11:a3:dc:c0:43:41:b6:e8:65:21:af:66:11:d2:d9:
         48:ae:bd:05:38:8c:de:3e:b3:20:9f:ff:4a:1c:7a:fd:ce:ad:
         77:55:5b:64:38:7f:aa:fe:10:07:0e:13:3d:b3:9a:0e:ce:6a:
         85:3f:95:83:04:42:ee:38:82:c7:68:e6:f8:8c:5e:d1:e0:5c:
         3d:ab:61:aa:a9:93:2e:fb:fe:9e:8f:58:00:08:9c:0a:67:80:
         5c:1c:95:71:a5:c3:cb:86:57:39:2a:97:aa:71:dc:b5:a9:62:
         da:d8:02:2a:a6:67:79:3c:3f:36:4c:21:8f:cc:56:af:45:ce:
         bc:10:2e:5d:68:5f:37:0a:89:c0:53:69:4d:1f:47:e1:ca:df:
         6a:49:b2:d6:19:dc:7e:3d:5d:da:7d:fc:0c:02:58:df:5a:11:
         fd:c1:77:61:84:8e:c4:3b:e8:15:23:f6:fe:d3:75:da:96:e5:
         a0:eb:38:6c:aa:83:d1:78:7e:b5:2d:51:c2:66:ef:35:6a:58:
         09:f6:a8:1f:df:77:d0:c0:8b:c0:da:dc:6b:1e:31:d2:b5:c5:
         57:35:92:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----