Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/41b8f8-3900-4514-8dbf-27d362e96d40/1/J8QG3ym-nyrVCz7FvVPfuSLRr6A.mft
File:                     J8QG3ym-nyrVCz7FvVPfuSLRr6A.mft (raw, json)
Hash identifier:          2t7NMp040rxRWYcNVwZw9L9onXTFqjjfG0J1jtNrHv4=
Subject key identifier:   A5:DF:74:08:1D:09:D5:CB:87:3C:1E:4D:CF:FF:63:8F:84:A1:0F:F6
Authority key identifier: 27:C4:06:DF:29:BE:9F:2A:D5:0B:3E:C5:BD:53:DF:B9:22:D1:AF:A0
Certificate issuer:       /CN=27c406df29be9f2ad50b3ec5bd53dfb922d1afa0
Certificate serial:       01962F3D63425D2C8566F115A8D84335106B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J8QG3ym-nyrVCz7FvVPfuSLRr6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/41b8f8-3900-4514-8dbf-27d362e96d40/1/J8QG3ym-nyrVCz7FvVPfuSLRr6A.mft
Manifest number:          0563
Signing time:             Sun 13 Apr 2025 13:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:14 +0000
Files and hashes:         1: J8QG3ym-nyrVCz7FvVPfuSLRr6A.crl (hash: asExrEiw3vk35Pyybd3vOC3BQNdoOfNprcCATtjHoLQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:63:42:5d:2c:85:66:f1:15:a8:d8:43:35:10:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c406df29be9f2ad50b3ec5bd53dfb922d1afa0
        Validity
            Not Before: Apr 13 13:01:14 2025 GMT
            Not After : Apr 14 13:01:14 2025 GMT
        Subject: CN=a5df74081d09d5cb873c1e4dcfff638f84a10ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:df:88:52:60:fc:5d:7f:5a:04:c6:cd:4e:9d:
                    5d:b7:45:15:ac:e9:e0:a7:9b:60:b7:88:50:4f:2b:
                    7c:e9:a4:7b:6b:49:9f:bb:ce:48:15:74:69:0d:71:
                    31:d9:4e:37:f1:3f:04:e7:9c:38:8f:c8:60:b0:2d:
                    b1:34:f9:26:2e:8d:13:11:d3:78:53:c6:39:b9:95:
                    8a:03:ef:bc:01:79:b4:70:8a:9b:24:2f:e8:7c:fc:
                    24:70:f5:cc:79:dc:d1:ff:0d:13:06:b3:19:8c:4f:
                    40:ba:cc:71:09:36:5d:b4:75:79:1a:69:eb:34:1a:
                    0a:0f:ef:2d:33:3e:cf:55:dc:f8:e5:bf:01:4a:24:
                    fc:c6:29:da:ba:c7:61:ab:58:20:f2:50:8d:4e:0e:
                    35:b7:c8:f6:6e:69:6c:c1:f4:3c:f4:e1:f3:c2:bd:
                    41:78:9c:59:36:02:97:79:74:3d:80:82:60:fa:2e:
                    3d:2a:69:4c:95:78:a5:41:75:8c:88:30:7b:8e:36:
                    19:d8:c8:d0:ec:5a:c7:30:d5:9d:8a:08:5c:b5:d2:
                    fa:79:9a:7b:3f:03:a7:fd:e8:1d:c1:ef:00:ec:1a:
                    a1:09:c2:d6:98:95:ee:14:37:dd:46:f9:9a:36:ed:
                    84:71:f0:35:b7:8b:ea:d2:7d:19:e1:84:e9:45:fa:
                    bd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DF:74:08:1D:09:D5:CB:87:3C:1E:4D:CF:FF:63:8F:84:A1:0F:F6
            X509v3 Authority Key Identifier:
                keyid:27:C4:06:DF:29:BE:9F:2A:D5:0B:3E:C5:BD:53:DF:B9:22:D1:AF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8QG3ym-nyrVCz7FvVPfuSLRr6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/41b8f8-3900-4514-8dbf-27d362e96d40/1/J8QG3ym-nyrVCz7FvVPfuSLRr6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/41b8f8-3900-4514-8dbf-27d362e96d40/1/J8QG3ym-nyrVCz7FvVPfuSLRr6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:1e:20:40:58:28:06:fd:82:88:72:45:15:24:d7:2f:b8:6a:
         4d:45:92:71:11:93:d6:1b:5c:ed:1a:e6:6d:a2:cf:bf:39:1c:
         75:cf:40:f7:dc:d1:94:cd:c8:c3:7e:c0:dc:37:5c:f3:f3:72:
         28:b2:69:a0:7d:2f:35:7d:13:2e:7f:51:85:c1:12:59:39:9f:
         b0:a4:5a:a2:79:9f:59:af:b2:c3:8d:ef:53:21:ec:8a:73:31:
         d1:e1:54:e3:e9:2a:17:cf:3f:43:cf:cf:63:de:c4:37:86:10:
         7f:fc:40:14:1d:cb:e4:4c:ea:de:c8:8f:76:a3:d6:28:0a:06:
         1c:f6:ca:f2:9c:57:30:39:22:75:65:f0:6d:eb:ef:35:50:ee:
         c1:cd:7d:d9:ed:1f:17:00:fe:0b:72:4f:fa:9c:71:0b:78:25:
         43:21:0a:15:ca:ea:97:62:7c:66:b3:80:a5:ca:1f:d9:01:4f:
         e9:5c:16:ef:8c:1d:8f:67:0a:3c:bc:06:26:db:84:88:00:2d:
         56:e1:fa:63:9a:c4:17:b1:29:f1:8c:a7:7f:af:fc:cd:a5:1c:
         3b:62:00:14:64:11:f6:97:21:8a:10:fd:19:1f:6d:29:3f:ae:
         b0:f5:b7:d0:4c:94:09:48:5c:03:17:8d:de:6b:e7:78:ae:51:
         d5:25:f9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----