Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft
File:                     JkXNQMgEm-mprn8DM2q9P-CCr7k.mft (raw, json)
Hash identifier:          ce62+mwMkLK8ZEAmtxYsckk8VPHfuorl9qh8XQdyBc0=
Subject key identifier:   11:42:05:D6:29:EF:6E:46:EB:C2:0E:4B:90:FD:0E:63:1F:5D:16:86
Authority key identifier: 26:45:CD:40:C8:04:9B:E9:A9:AE:7F:03:33:6A:BD:3F:E0:82:AF:B9
Certificate issuer:       /CN=2645cd40c8049be9a9ae7f03336abd3fe082afb9
Certificate serial:       01962E98D156DAAE00A57014B8745209FDC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JkXNQMgEm-mprn8DM2q9P-CCr7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:29 +0000
Files and hashes:         1: JkXNQMgEm-mprn8DM2q9P-CCr7k.crl (hash: wcZ5REFsGlD9/tBcRo98DG/V/0+v4e1va3CNYgF8ug0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d1:56:da:ae:00:a5:70:14:b8:74:52:09:fd:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2645cd40c8049be9a9ae7f03336abd3fe082afb9
        Validity
            Not Before: Apr 13 10:01:29 2025 GMT
            Not After : Apr 14 10:01:29 2025 GMT
        Subject: CN=114205d629ef6e46ebc20e4b90fd0e631f5d1686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a3:23:ae:d7:3c:19:c1:1e:7f:9b:78:6d:49:
                    7e:1a:a0:02:0c:96:54:13:ce:6f:ad:88:6e:e9:46:
                    ea:fe:d2:d0:a6:61:03:21:76:12:20:8e:9a:e1:b1:
                    4d:af:89:ba:00:de:f4:1f:40:80:27:f8:3a:e3:4b:
                    5a:0c:3a:db:9b:8c:cb:f4:e2:14:ec:44:4f:89:e5:
                    1a:7f:74:00:da:93:b3:94:ff:00:9f:ef:83:72:db:
                    87:25:18:5c:e8:b8:5c:76:8d:dc:43:23:ca:13:f9:
                    a6:91:31:84:f7:0a:6d:f3:44:9f:67:56:2c:97:2a:
                    92:37:cc:b5:5e:59:29:76:72:21:16:b5:c2:8d:26:
                    f6:08:b8:44:93:e6:1d:af:61:3f:26:f9:09:d8:ef:
                    05:12:ad:51:91:e7:70:9f:e6:e2:ac:c5:30:34:86:
                    5f:72:e3:08:20:7e:46:9b:e6:7e:9e:55:45:3e:86:
                    c0:0f:b2:c5:61:ae:6e:20:f7:1c:8d:20:ff:d9:04:
                    13:79:97:2b:c2:d8:43:c2:c3:f7:23:16:a9:13:1f:
                    c6:a0:0f:64:0e:b9:e2:92:0c:3e:c0:24:26:bd:3a:
                    67:45:35:55:70:7e:81:3d:00:49:c9:5f:06:c9:fe:
                    b7:2c:a4:42:da:97:9a:81:ee:63:74:2c:70:5a:ed:
                    1e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:42:05:D6:29:EF:6E:46:EB:C2:0E:4B:90:FD:0E:63:1F:5D:16:86
            X509v3 Authority Key Identifier:
                keyid:26:45:CD:40:C8:04:9B:E9:A9:AE:7F:03:33:6A:BD:3F:E0:82:AF:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkXNQMgEm-mprn8DM2q9P-CCr7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:66:17:a5:62:74:85:38:d9:ea:1a:72:81:50:35:9d:c2:43:
         64:09:08:9e:bd:d9:e3:90:3a:85:58:27:4c:0c:20:e4:4b:21:
         c0:83:b4:62:88:db:79:60:1a:1f:eb:3c:d8:12:71:62:c0:74:
         85:fe:ae:8f:9d:c9:85:3c:18:dc:46:f8:cc:a9:c5:1a:17:3d:
         d9:04:5f:f9:cf:9b:88:a6:2d:e1:5c:9f:fb:a2:19:70:9f:d2:
         96:49:05:4b:83:86:0c:1f:e7:5d:5d:02:d5:9d:70:0d:1e:32:
         89:29:82:99:15:4c:05:d2:88:78:8e:09:b8:7f:d5:a0:2b:28:
         79:ca:40:ca:cb:66:91:ca:db:12:ae:c4:74:94:d6:52:ec:11:
         92:7f:4e:d3:0f:af:17:7c:73:50:cc:73:bd:b1:68:75:c7:86:
         35:94:62:77:ba:48:2a:e1:0e:34:46:43:36:d3:32:dc:4f:8e:
         d0:58:e6:30:01:91:59:d4:69:3f:d0:48:6f:7c:77:dc:53:20:
         45:6c:6a:5c:93:c5:47:b0:8b:95:29:8c:06:01:c0:41:f9:e4:
         4a:b5:b2:75:2f:16:40:12:66:78:9f:e3:75:b7:e8:9f:ea:d7:
         1f:70:6f:97:33:9e:82:a0:e3:e6:11:f0:5b:2d:ee:24:ab:b0:
         af:c7:6f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----