Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
File:                     K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft (raw, json)
Hash identifier:          VGE7mUSyqeiwilQpyjInIOcApVNM1IdNpTif5GHD3u8=
Subject key identifier:   74:C5:A0:D8:62:FA:96:7E:4E:32:57:01:88:03:0F:31:BE:2E:49:B4
Authority key identifier: 2B:49:89:FE:3C:AC:A3:F3:04:43:C5:4A:90:2F:69:12:11:0D:91:95
Certificate issuer:       /CN=2b4989fe3caca3f30443c54a902f6912110d9195
Certificate serial:       01962F3D80AADF21B83943FFC4B11BDD14EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
Manifest number:          0713
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl (hash: nc6BAFtF89XDO1W4jre4d2wKwxMePOgdTHHl0vMZsEQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:80:aa:df:21:b8:39:43:ff:c4:b1:1b:dd:14:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b4989fe3caca3f30443c54a902f6912110d9195
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=74c5a0d862fa967e4e32570188030f31be2e49b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4a:44:b0:c7:55:7d:b8:97:46:b3:b4:ec:79:
                    80:4e:5a:2f:f3:f4:03:42:38:ff:42:ec:6b:9f:da:
                    8d:0e:e5:be:4c:64:7b:c6:0d:99:7e:40:b8:24:79:
                    60:a4:38:81:45:88:ae:ef:15:f9:dd:93:3b:1a:9d:
                    f4:23:53:8b:c6:bc:b7:7a:ed:c0:d3:e2:c3:6a:7c:
                    8e:cb:76:d6:59:6d:32:ac:38:36:76:bb:c5:77:d3:
                    f2:43:6a:3b:21:a6:54:6d:42:49:8f:b3:2d:ef:25:
                    b6:25:b6:94:7d:c2:38:19:2e:f5:8b:7e:62:a2:7a:
                    d8:c7:5e:59:85:15:8a:76:01:e6:7d:51:be:2b:69:
                    90:bf:80:cc:b2:23:b6:ad:a1:c2:11:73:41:aa:ce:
                    33:a1:aa:d1:97:6c:1b:41:7e:53:12:ad:20:c6:ed:
                    0e:5f:4a:ee:a9:5d:f8:e0:a8:89:f0:74:32:77:2a:
                    12:f7:bc:05:be:e2:48:e9:82:db:48:5a:39:fd:3d:
                    e0:1d:4b:89:48:b2:ed:c7:6f:b5:ef:be:19:99:44:
                    ac:6d:f5:4a:a4:e6:ba:f7:13:e3:a2:4a:ff:04:b0:
                    87:5f:ee:7a:6f:50:41:47:ea:6e:2d:22:c2:52:58:
                    f2:93:48:b9:ca:cf:c7:2e:f0:9b:87:fd:d9:96:30:
                    b4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C5:A0:D8:62:FA:96:7E:4E:32:57:01:88:03:0F:31:BE:2E:49:B4
            X509v3 Authority Key Identifier:
                keyid:2B:49:89:FE:3C:AC:A3:F3:04:43:C5:4A:90:2F:69:12:11:0D:91:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:36:73:10:0a:13:d8:bd:59:30:c8:4e:41:a6:03:e5:d2:3d:
         6a:18:6c:14:da:ca:79:c8:37:c5:42:6f:fe:b7:ea:e0:62:6a:
         f4:96:89:33:88:a4:2a:73:4f:4f:3d:af:40:33:3b:a0:b6:0a:
         a4:f4:37:04:9b:08:18:d3:32:13:5a:0e:bf:94:99:66:d8:7d:
         1f:b9:a7:10:d0:99:d7:a9:1a:09:0c:1c:ce:41:b6:f0:19:93:
         e6:04:00:d4:a5:2d:1d:67:3b:a9:83:6a:0f:51:40:59:ed:28:
         4f:43:6f:23:b8:a1:4e:72:34:be:f5:6b:a7:d0:c4:a8:07:67:
         11:1f:46:f4:32:e1:18:63:93:00:cf:ee:3a:4c:bc:3b:08:53:
         a5:f1:df:68:66:a7:91:0a:7d:1c:97:94:a7:03:c7:6c:be:c8:
         d1:ce:bf:86:9b:97:88:92:b5:53:55:da:4e:4b:a2:d9:79:34:
         dc:ad:25:c7:92:4b:a2:21:5e:cd:6d:36:5c:5c:ca:69:6c:0e:
         85:6a:dd:39:41:6e:be:33:33:d8:9a:7a:58:be:81:31:65:42:
         e0:34:fc:f4:11:ae:f7:7e:39:75:fc:1f:7a:c8:bd:59:6c:b5:
         5e:82:ba:64:cc:8c:51:90:f6:cb:d1:e4:5b:46:c7:41:37:55:
         5f:70:64:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----