Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
File:                     J4dqqRe20B2U_yVmKwj7IT8P570.mft (raw, json)
Hash identifier:          ezDs5VCe5sArgzYh0DKfHqua6L1heBqrhHkLMnKSJAw=
Subject key identifier:   5E:32:D1:F1:EC:1A:A3:67:9E:A3:72:31:E1:0C:67:78:AE:ED:37:4C
Authority key identifier: 27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD
Certificate issuer:       /CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd
Certificate serial:       01962E99892FCC0A5B259AC5F7684DF05F72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
Manifest number:          0E76
Signing time:             Sun 13 Apr 2025 10:02:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:16 +0000
Files and hashes:         1: J4dqqRe20B2U_yVmKwj7IT8P570.crl (hash: Yp5g5uoyt8pW1NCg25ERlqhiUkZXm4EXw3VxWU7JhYc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:89:2f:cc:0a:5b:25:9a:c5:f7:68:4d:f0:5f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd
        Validity
            Not Before: Apr 13 10:02:16 2025 GMT
            Not After : Apr 14 10:02:16 2025 GMT
        Subject: CN=5e32d1f1ec1aa3679ea37231e10c6778aeed374c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:03:a7:72:6f:32:e1:24:d8:4f:af:9a:e9:06:
                    1e:80:7f:c5:42:a4:27:45:c9:82:47:ab:22:82:3c:
                    ff:cf:d6:67:47:e1:4a:15:30:f9:50:0e:47:88:84:
                    65:b2:f8:0f:1f:cb:fd:c3:29:aa:6f:97:0c:65:b2:
                    8b:97:9b:20:78:f5:60:e9:cd:3e:77:3e:29:0d:73:
                    b2:92:99:01:8e:e0:5f:33:ea:d0:db:68:bb:de:05:
                    cb:fa:13:70:fe:a8:8d:b7:ef:8d:0f:88:61:5f:31:
                    f3:95:a6:b3:80:7b:bf:13:73:8a:2f:18:26:5d:18:
                    f3:89:0b:68:a6:49:f5:6f:15:78:c0:97:79:26:0b:
                    84:20:4c:75:e9:5e:18:bc:c3:ab:7a:74:6c:99:48:
                    a9:5e:22:5e:47:d3:15:a3:7f:bd:18:80:ff:72:15:
                    80:a8:92:c2:36:da:cc:81:44:31:aa:87:ba:54:9c:
                    a3:84:40:09:5a:1b:80:70:b5:bf:cd:e3:36:9f:7e:
                    95:55:06:f2:a5:33:8c:05:54:04:6e:da:91:ed:90:
                    00:79:1e:24:af:98:e4:a0:7d:58:e1:54:6f:3c:b6:
                    11:c3:e8:0a:cb:5c:44:a9:2b:a3:05:3a:ad:c4:f2:
                    69:b7:0b:7d:20:7b:89:5d:24:9a:fc:c1:b1:2d:3a:
                    5a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:32:D1:F1:EC:1A:A3:67:9E:A3:72:31:E1:0C:67:78:AE:ED:37:4C
            X509v3 Authority Key Identifier:
                keyid:27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:48:10:41:9e:f3:a1:49:42:75:c5:d1:20:eb:ec:a9:cb:72:
         e5:1f:a0:b4:6f:db:16:35:b3:32:63:14:3f:c4:e7:5c:ef:76:
         b6:15:72:f2:7c:f1:89:2a:10:59:f2:b3:ca:11:f4:3e:6f:d9:
         6f:25:88:ca:19:52:dd:26:d0:9e:93:a3:0a:1d:2c:a8:8a:23:
         95:98:25:ef:f5:dd:c2:ad:92:9f:d3:48:8f:4c:99:cc:f7:45:
         57:ca:18:41:26:61:14:64:fc:88:36:1f:a4:49:66:d0:19:97:
         5f:4b:4e:a3:b2:e6:49:64:12:5b:2a:e8:37:d0:5f:7f:76:67:
         16:30:d4:50:e6:9f:af:ef:1e:20:08:9f:36:3f:ee:d2:23:a3:
         5c:d2:54:75:2f:3b:16:ab:e1:23:1f:f2:b7:52:8f:40:e3:4e:
         8d:30:0b:c7:c4:43:46:3c:b1:bf:49:d2:3e:fb:d1:23:47:69:
         13:a5:01:1f:6d:a2:d6:e0:36:84:1a:35:e8:8b:03:27:e8:4d:
         4c:db:7a:21:1d:a2:3f:29:27:71:6c:e8:d7:5d:3d:bf:71:1f:
         ee:60:1a:25:e9:d3:0a:ef:46:ce:f8:c3:ec:aa:fa:a9:57:1b:
         d4:67:53:13:c3:0f:35:e2:77:71:10:5e:19:a0:81:e3:87:09:
         6b:79:1c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----