Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.mft
File:                     aL8cWiHDgluLhlFqGllxIbVLPMM.mft (raw, json)
Hash identifier:          kfgpkXpJzjbHDGBGAZm8ucKs3NhkaCvYDP7euykrN54=
Subject key identifier:   68:27:EB:00:5A:55:5A:E5:EE:94:54:51:0C:A5:33:D1:A3:AB:C6:8E
Authority key identifier: 68:BF:1C:5A:21:C3:82:5B:8B:86:51:6A:1A:59:71:21:B5:4B:3C:C3
Certificate issuer:       /CN=68bf1c5a21c3825b8b86516a1a597121b54b3cc3
Certificate serial:       01962E61FD86F0D2FB0F4660B4780A46A763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aL8cWiHDgluLhlFqGllxIbVLPMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:35 +0000
Files and hashes:         1: K-gQWrDorOWk95T1Ck9YnvOvyOw.roa (hash: M7ISU7dx2mACRrVyXnpQ2vx1ALS4joyLkkEwNFtNto0=)
                          2: aL8cWiHDgluLhlFqGllxIbVLPMM.crl (hash: 5Y3+/PVf7opZ6Zt3BhRi4o01O7k9NDj95dKNHuLIoB8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fd:86:f0:d2:fb:0f:46:60:b4:78:0a:46:a7:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68bf1c5a21c3825b8b86516a1a597121b54b3cc3
        Validity
            Not Before: Apr 13 09:01:35 2025 GMT
            Not After : Apr 14 09:01:35 2025 GMT
        Subject: CN=6827eb005a555ae5ee9454510ca533d1a3abc68e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:59:c9:7b:79:20:29:44:a5:03:c9:c5:ad:29:
                    9a:f1:d0:67:b2:8b:72:bc:8f:19:f9:31:17:23:ab:
                    0c:7a:49:ec:5d:c0:dd:aa:73:de:40:7b:01:6b:3e:
                    0c:2a:4f:24:23:e8:0f:14:a5:3e:18:82:0a:ca:bb:
                    b9:a0:b4:7f:ab:32:99:2a:33:d4:82:ab:3a:15:13:
                    3c:9a:58:a9:5a:9f:38:19:17:0d:01:dd:84:f7:5e:
                    0d:1b:a3:b9:11:66:86:07:fc:28:4e:d1:f7:29:51:
                    76:97:27:07:12:03:14:3d:04:aa:7e:6e:65:4e:33:
                    fa:5f:ec:a8:54:23:18:bd:ac:b9:4a:2a:fe:31:61:
                    df:3c:e9:34:bb:f0:38:08:d0:80:8e:9e:17:e0:f2:
                    1b:89:03:b5:c2:4f:ce:38:6a:a2:17:14:f3:23:1d:
                    e0:ad:71:31:a9:0c:e8:6f:20:31:69:ce:7f:bd:31:
                    c5:a7:43:8b:0d:92:f9:55:64:4d:93:67:3a:05:1d:
                    39:80:c5:c0:c2:56:49:86:df:36:b7:57:fd:8a:f5:
                    c9:ea:74:1c:5e:fe:d8:c0:8f:aa:4b:a5:ed:a8:ef:
                    01:9a:a9:72:69:b1:34:83:6c:78:63:53:28:5c:13:
                    e7:87:fb:de:01:de:35:cc:73:38:4e:92:e3:ee:24:
                    95:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:27:EB:00:5A:55:5A:E5:EE:94:54:51:0C:A5:33:D1:A3:AB:C6:8E
            X509v3 Authority Key Identifier:
                keyid:68:BF:1C:5A:21:C3:82:5B:8B:86:51:6A:1A:59:71:21:B5:4B:3C:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL8cWiHDgluLhlFqGllxIbVLPMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:3a:0a:c5:14:57:87:64:55:66:4c:89:eb:bb:a0:2d:0d:14:
         9f:63:8a:d6:71:06:c9:00:b9:c4:35:b4:d7:09:6c:4d:06:fc:
         1b:b1:7a:5c:9a:28:0d:4a:e3:52:9a:7e:da:6f:bb:88:c6:8c:
         c2:cf:3c:c6:33:21:89:63:41:de:6e:02:0c:b3:95:b4:5b:b8:
         a5:f8:7e:56:51:08:9e:df:89:22:72:18:11:5d:70:18:1d:bd:
         19:78:2e:ea:42:3d:bd:31:1a:f5:4d:24:56:19:46:47:7d:ee:
         7d:4d:d1:05:8e:34:0b:ef:4e:4f:b2:f5:a8:a2:16:f6:0d:cf:
         85:9c:0b:02:64:ec:23:96:5c:9b:e2:4f:8e:7f:d0:dc:f9:83:
         71:c7:95:84:0b:23:3a:32:7a:5f:1b:90:33:bc:50:77:17:55:
         fd:e0:b0:d3:38:61:8c:c2:65:89:c5:42:6a:09:a5:59:1e:78:
         f8:bd:92:ab:0b:96:b2:c0:05:fb:ba:b6:62:33:c2:cd:0f:22:
         b6:c2:dc:4a:8c:8c:7d:e8:56:22:5e:c6:43:58:43:a5:43:2d:
         57:ed:7f:20:44:93:c7:7e:24:2a:9e:79:cc:61:6f:7c:60:e9:
         4f:0c:87:b4:52:f5:ae:e7:30:18:11:ca:ee:99:5d:75:84:9e:
         d4:37:bc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----