Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
File:                     jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft (raw, json)
Hash identifier:          yNpSBxHxKARcKgKl6XTRwkFlfn4zaHvn5nqRPbrunuk=
Subject key identifier:   A5:01:2B:2E:D0:BF:A4:BC:30:2C:09:7D:FF:05:64:0F:AF:A9:DC:47
Authority key identifier: 8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A
Certificate issuer:       /CN=8cda93a702f03d6034b02c4637212a743a472c8a
Certificate serial:       01962F3D2EA757A334EF0A8FEC31A29D65BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 13:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:00 +0000
Files and hashes:         1: jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl (hash: n8IgELoBv9Bv5P3qpt5dAjs35RJOwyi5S4Ey9pq0YW0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2e:a7:57:a3:34:ef:0a:8f:ec:31:a2:9d:65:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cda93a702f03d6034b02c4637212a743a472c8a
        Validity
            Not Before: Apr 13 13:01:00 2025 GMT
            Not After : Apr 14 13:01:00 2025 GMT
        Subject: CN=a5012b2ed0bfa4bc302c097dff05640fafa9dc47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a8:20:0d:d7:d9:46:92:dd:1a:e1:de:fa:ef:
                    0c:8e:d6:1a:bd:93:d0:db:20:9a:cf:47:a8:c8:c3:
                    31:78:c7:31:2d:e3:01:79:7c:36:69:cb:1b:75:5b:
                    03:5c:15:96:61:88:00:8f:91:93:54:ae:a3:f3:0e:
                    b8:43:86:bb:4f:77:ef:d1:d7:35:a2:90:bb:67:58:
                    0e:87:3a:35:4e:3b:f5:78:18:24:4e:b7:24:b3:4a:
                    8a:9d:7c:d5:3b:c3:a4:3d:6a:c6:0a:76:3e:30:b3:
                    62:dc:88:46:46:44:33:19:be:af:8b:4a:81:f6:0b:
                    61:f8:92:2e:5a:3d:af:47:5c:5a:eb:3e:e4:e0:cc:
                    8f:09:09:a0:6e:24:0f:cf:6a:a0:80:6b:a9:5c:11:
                    ea:57:5e:2e:0b:47:9a:5c:88:96:18:0c:1d:1c:fa:
                    fd:ab:a8:a8:5f:9b:31:fa:4f:c4:fb:3b:45:c9:04:
                    9a:18:d2:38:67:94:d2:d4:33:fd:bc:c7:b2:6b:14:
                    ec:36:6d:f2:2e:d7:ab:81:8d:36:a5:35:42:4c:11:
                    90:0b:3e:a1:da:88:9d:af:63:c2:12:3c:a6:80:25:
                    ac:c8:d7:ba:07:44:5d:19:e0:9b:9d:46:f4:35:4a:
                    83:41:ef:d6:57:4d:c7:f1:63:ac:1f:a1:ce:20:02:
                    ca:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:01:2B:2E:D0:BF:A4:BC:30:2C:09:7D:FF:05:64:0F:AF:A9:DC:47
            X509v3 Authority Key Identifier:
                keyid:8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:99:db:21:eb:41:0a:fe:19:b1:03:79:12:2f:cf:69:fc:c2:
         61:b5:ce:79:94:6e:9a:b1:40:23:ba:02:f6:4a:4f:99:b8:35:
         91:49:f7:47:63:e5:58:ef:88:7e:3c:55:ac:8b:fc:90:25:36:
         12:b1:88:d2:75:96:4d:97:0f:45:f9:4d:ba:17:5c:ff:77:2a:
         30:f9:d0:5a:03:17:77:8e:3d:b1:8f:1a:95:43:9d:47:0d:cd:
         e1:dc:a1:72:71:26:56:d5:e4:c7:a5:4c:88:96:72:83:04:8e:
         8b:5c:41:42:40:0e:94:09:b1:46:3f:c7:d8:6c:62:61:9f:61:
         65:36:13:ae:9d:c5:3c:26:90:e8:e8:93:3d:3f:9b:d8:b1:6b:
         3f:28:e0:fa:67:c2:9f:59:31:6a:20:29:ab:0a:a6:2b:8d:7a:
         9a:ef:c5:97:26:74:cc:72:ed:d7:1b:cf:d6:50:18:c2:5d:d9:
         84:c9:4d:f3:1d:54:6b:f1:45:6d:82:c5:eb:89:8f:d6:de:e5:
         83:de:5a:a9:b7:a8:19:f8:56:cd:aa:e7:7e:eb:b7:cc:28:91:
         04:e6:8e:ef:c9:64:7f:ce:82:95:ca:54:f8:7c:16:83:0c:67:
         37:ba:c1:d4:8f:7e:51:ce:9c:62:86:ad:c9:d7:1d:d4:32:66:
         39:5b:ba:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----