Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
File:                     J2zuYEMhsPEryjZ7VMBzmqil8To.mft (raw, json)
Hash identifier:          UsMtAVe3og7eWRv0UuG36NcmOXykwRnuxH3DbaoHvLQ=
Subject key identifier:   D1:59:B7:C3:60:AF:75:AD:EC:9C:A4:47:F1:07:CF:EA:97:7D:54:AA
Authority key identifier: 27:6C:EE:60:43:21:B0:F1:2B:CA:36:7B:54:C0:73:9A:A8:A5:F1:3A
Certificate issuer:       /CN=276cee604321b0f12bca367b54c0739aa8a5f13a
Certificate serial:       01962E988CAA1CFE85E677333268DA420C3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
Manifest number:          0E3C
Signing time:             Sun 13 Apr 2025 10:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:11 +0000
Files and hashes:         1: J2zuYEMhsPEryjZ7VMBzmqil8To.crl (hash: 7mvhokmxTIt8eygLgRfyWK/nN6fhGv9tS+SPf2smjmc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8c:aa:1c:fe:85:e6:77:33:32:68:da:42:0c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=276cee604321b0f12bca367b54c0739aa8a5f13a
        Validity
            Not Before: Apr 13 10:01:11 2025 GMT
            Not After : Apr 14 10:01:11 2025 GMT
        Subject: CN=d159b7c360af75adec9ca447f107cfea977d54aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c9:b2:dd:34:79:92:12:7e:1d:79:55:27:43:
                    3b:0e:8b:06:72:a6:20:1e:5e:85:b7:2d:71:92:92:
                    14:d9:67:de:2d:0f:70:eb:2d:7d:0e:22:04:75:5b:
                    da:1f:cf:ec:cf:55:d8:81:ab:69:12:7a:e7:fd:6d:
                    5f:03:fb:6d:69:40:83:fb:77:63:c4:2b:f1:1e:62:
                    20:19:09:be:20:03:02:1a:8a:33:7b:68:ab:e1:19:
                    7f:93:fc:9c:2b:52:69:0a:9f:39:56:66:db:60:c1:
                    fc:8b:fe:a7:e8:4b:07:9b:b0:56:e9:d6:ff:12:05:
                    5c:1d:6d:80:e0:7c:a8:65:f7:a5:f8:97:49:39:8c:
                    bb:57:57:bc:9e:be:89:74:ff:68:de:41:0a:40:20:
                    7b:18:86:37:9d:dd:2f:5c:09:42:d3:99:4e:77:33:
                    b1:e3:a9:27:4c:94:c1:55:6e:11:1a:79:9a:85:b7:
                    b8:8d:25:f9:87:db:06:87:d6:7b:c1:81:a8:1e:25:
                    43:c9:ff:d6:7a:0d:b7:57:01:95:73:38:b6:2d:a6:
                    a4:55:52:6d:48:49:dd:35:4f:b0:9e:3d:e6:51:55:
                    f9:2a:9d:0d:1e:a1:f6:63:05:29:22:8a:e6:cc:c7:
                    ab:c1:bd:b9:5a:b1:34:c0:d3:01:33:92:f4:de:74:
                    c2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:59:B7:C3:60:AF:75:AD:EC:9C:A4:47:F1:07:CF:EA:97:7D:54:AA
            X509v3 Authority Key Identifier:
                keyid:27:6C:EE:60:43:21:B0:F1:2B:CA:36:7B:54:C0:73:9A:A8:A5:F1:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:1b:dc:8d:2b:af:19:d2:44:ab:a8:eb:00:a0:94:c5:6d:c0:
         3b:cc:41:82:be:f3:e2:64:d3:2c:01:00:b9:be:33:2f:88:68:
         46:20:bd:c9:b0:e7:7a:a9:68:3d:b1:76:5f:bb:b2:e3:15:43:
         71:65:e7:2a:03:ac:5a:5c:ab:ba:b0:6f:9a:c0:de:68:a6:fc:
         76:c6:50:c4:78:52:fd:fd:12:98:b1:cb:94:e2:73:c1:a7:49:
         2c:25:57:ac:ab:04:5d:b9:ec:bc:50:6b:f8:46:b7:19:98:c3:
         c8:e6:4a:75:09:13:8f:11:ae:66:57:1d:78:5a:8c:5f:ca:97:
         19:e2:68:e4:2b:08:a8:8a:99:a6:91:be:4a:c0:c2:ad:46:4f:
         5f:7b:b1:0e:90:2e:bd:7a:37:8c:19:2e:a0:92:30:4a:58:1d:
         44:fa:3f:db:a7:31:c8:22:1f:0f:ed:cd:72:b1:9d:64:1c:3f:
         03:49:9c:5e:d6:07:98:b3:14:e1:f3:1a:1e:a6:6a:6b:a4:37:
         d0:55:ec:59:cf:b4:b4:13:16:a6:a8:c7:1a:98:29:b5:8b:45:
         3c:a0:c0:68:1b:6a:cf:da:5b:97:a9:5e:9f:a0:b1:2a:5e:a4:
         4c:30:49:51:1a:f3:b9:10:57:d9:59:aa:2e:6e:b4:eb:10:a7:
         cf:13:fc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----