Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
File:                     tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft (raw, json)
Hash identifier:          Gh1FOxsWvb/4KDgrG4Rt6EOQ6RzRY1mu+DVjBUAZEVA=
Subject key identifier:   9F:B9:5C:48:35:8C:92:3F:A6:C9:2C:64:B8:74:53:F7:47:92:9B:8D
Authority key identifier: B5:A8:F2:CA:23:E1:02:D4:D3:57:11:36:2D:24:AB:D4:7B:09:E9:E5
Certificate issuer:       /CN=b5a8f2ca23e102d4d35711362d24abd47b09e9e5
Certificate serial:       01962E99BF481AB8DE34699CA0C06CC5CF14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
Manifest number:          0677
Signing time:             Sun 13 Apr 2025 10:02:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:29 +0000
Files and hashes:         1: tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl (hash: R/NLB0s4qme7xaZJ661x8F/bUms8fpWshNZUl9xX1W4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:bf:48:1a:b8:de:34:69:9c:a0:c0:6c:c5:cf:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5a8f2ca23e102d4d35711362d24abd47b09e9e5
        Validity
            Not Before: Apr 13 10:02:29 2025 GMT
            Not After : Apr 14 10:02:29 2025 GMT
        Subject: CN=9fb95c48358c923fa6c92c64b87453f747929b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:49:85:8a:ea:2f:81:df:df:d0:b3:3c:00:15:
                    c0:44:06:85:27:1c:c9:04:05:f0:c0:94:f9:a5:90:
                    ed:0a:0c:35:30:5e:8b:c6:a4:0b:0a:34:18:f3:94:
                    aa:33:c0:bf:5b:4e:3b:e8:81:22:0b:d1:f5:df:3c:
                    ef:4f:36:23:f2:7b:37:8e:87:b3:c6:df:04:e3:4a:
                    65:97:99:e2:93:f5:96:de:d9:59:64:8b:1d:59:95:
                    85:e6:b5:91:d4:4c:e9:78:35:f8:1b:18:d3:6a:00:
                    2d:09:ce:0a:6c:8a:34:37:70:85:0f:c7:5e:43:c3:
                    f6:33:5b:0d:14:a3:7a:15:0f:4b:67:e3:8e:bc:bb:
                    52:5b:86:33:a0:fb:02:f4:75:8d:09:fd:23:33:dd:
                    d4:a5:16:df:7b:28:f5:ea:e4:50:d2:6f:b5:ef:22:
                    4f:c5:ce:b8:ba:64:a2:ce:5c:b2:df:e5:0c:3a:57:
                    43:54:c4:ff:2b:b2:89:f8:28:78:11:a1:f0:cb:8f:
                    1f:07:75:77:39:f0:f7:ab:46:7c:37:23:49:4b:5c:
                    48:ce:23:0b:39:48:80:86:7f:0e:ae:20:ac:7a:dc:
                    7c:ae:e6:a1:4a:a0:f1:41:8c:36:c6:3e:9d:69:a7:
                    24:db:ae:42:f1:17:9b:3a:d7:47:e0:3a:0e:80:ac:
                    12:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B9:5C:48:35:8C:92:3F:A6:C9:2C:64:B8:74:53:F7:47:92:9B:8D
            X509v3 Authority Key Identifier:
                keyid:B5:A8:F2:CA:23:E1:02:D4:D3:57:11:36:2D:24:AB:D4:7B:09:E9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:be:dd:fd:89:0d:36:dd:41:ed:8c:5d:3a:24:f0:13:d6:32:
         65:64:e0:98:f8:4c:47:b7:45:20:9d:c0:d0:01:87:80:d2:59:
         85:c2:49:d4:e5:e7:d0:3f:c2:5d:80:4a:d3:6c:8a:62:97:19:
         b5:95:77:e6:07:e4:20:01:2c:16:49:83:a0:09:7c:98:9f:f2:
         ee:fb:ff:7f:77:26:76:35:d8:ad:4c:32:a9:ec:b5:56:ad:03:
         90:e6:b5:45:34:f7:a9:4a:79:5e:09:24:b2:da:e6:7f:b0:7a:
         53:0a:aa:97:5a:32:d1:ad:46:a6:46:11:90:76:33:7d:41:52:
         c0:ef:97:9c:da:25:8c:b8:ad:a8:0b:b9:31:e6:78:96:6f:15:
         c9:86:c1:db:d8:d2:a3:26:53:8e:f8:92:82:e9:ed:ab:47:8f:
         72:6d:55:2f:0e:94:ab:58:fc:68:47:8d:17:35:63:94:a4:79:
         52:ac:2d:4c:0e:2a:02:28:89:e3:83:60:88:6f:68:b7:c0:79:
         92:71:80:5d:1e:e1:76:fd:5d:17:01:29:51:e4:34:b3:bb:56:
         01:66:8a:30:c1:c7:f8:c5:c2:a5:29:9d:dd:7e:f2:29:ae:fd:
         26:1c:f3:54:09:4c:2e:7b:39:a8:af:de:4b:ac:28:97:d3:80:
         b3:db:a8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----