Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
File:                     jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft (raw, json)
Hash identifier:          OAU+bxKcva/7RHf3/vf1devaI96z0ktjURGTmArXnLQ=
Subject key identifier:   7E:A2:3B:46:36:B0:08:D9:81:56:E6:EE:1D:5B:7F:37:EA:70:BB:53
Authority key identifier: 8C:B0:76:E5:9F:49:B5:DC:AC:B3:75:18:60:7E:69:5B:04:CD:BF:87
Certificate issuer:       /CN=8cb076e59f49b5dcacb37518607e695b04cdbf87
Certificate serial:       01962FAB43A5C6D0478B673A750ADBB54E21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
Manifest number:          0E1B
Signing time:             Sun 13 Apr 2025 15:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:15 +0000
Files and hashes:         1: jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl (hash: mSV3abSiwHgzlRquFaklY8z5m/IokF7Yg2RTSN+9MTs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:43:a5:c6:d0:47:8b:67:3a:75:0a:db:b5:4e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cb076e59f49b5dcacb37518607e695b04cdbf87
        Validity
            Not Before: Apr 13 15:01:15 2025 GMT
            Not After : Apr 14 15:01:15 2025 GMT
        Subject: CN=7ea23b4636b008d98156e6ee1d5b7f37ea70bb53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fb:0f:46:46:2b:43:6a:51:43:6f:0d:e2:2c:
                    42:c2:c9:2c:ff:53:2a:63:f8:ef:fe:41:cb:18:eb:
                    ae:aa:f8:a7:66:86:fe:5a:9b:cf:75:ff:04:e1:42:
                    71:34:5a:26:b2:7e:3e:4f:1f:1f:7b:a4:6c:d6:cb:
                    77:01:c3:90:39:b8:98:43:d0:99:d5:b0:44:c9:3e:
                    b9:b6:c0:d1:af:1e:0a:78:99:c5:a0:7c:b0:58:c9:
                    9e:4a:7e:cd:1b:39:a4:e3:8e:34:96:9d:f3:6c:c3:
                    11:56:fa:c6:dd:ef:8b:13:fd:93:36:7c:11:ea:08:
                    4f:69:b9:68:55:76:0b:fb:3c:02:7b:06:ca:e3:00:
                    41:97:d7:e0:f3:5c:86:01:d6:a3:0d:a7:fa:98:16:
                    b8:8d:27:a2:bb:3e:64:6d:61:b7:3b:f9:3c:ae:72:
                    28:8c:a4:f2:09:af:23:86:d8:13:91:9b:06:e6:b6:
                    50:ff:f8:57:e9:67:49:ee:d5:b3:b0:26:b3:99:47:
                    33:a9:01:d8:ce:7c:98:a6:c1:54:3e:c4:ec:6b:21:
                    b1:32:af:7e:4a:c0:fa:29:e3:14:cf:60:9e:7a:38:
                    96:9b:50:66:4c:3a:e7:27:fc:98:47:68:35:0b:ad:
                    6f:c6:f4:da:7f:15:8c:1a:33:80:ef:1b:7b:57:90:
                    f6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A2:3B:46:36:B0:08:D9:81:56:E6:EE:1D:5B:7F:37:EA:70:BB:53
            X509v3 Authority Key Identifier:
                keyid:8C:B0:76:E5:9F:49:B5:DC:AC:B3:75:18:60:7E:69:5B:04:CD:BF:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:15:2a:dc:c9:9a:f2:5b:5d:52:06:4e:a1:eb:5b:c7:e3:57:
         42:d8:c9:d6:df:d7:d0:66:2a:ff:f9:96:64:b3:69:fd:2f:a7:
         52:c1:4a:52:da:e8:1d:5b:af:c8:e9:5f:95:04:e6:de:44:05:
         98:e4:76:ba:f2:4b:ee:08:af:73:d7:42:35:a5:5d:5b:f1:40:
         5b:df:f0:b6:93:1c:97:f2:fa:3c:8c:4c:29:ca:6d:df:f9:67:
         49:dc:2b:a2:f7:ef:ae:8b:06:82:99:77:cd:7d:41:48:fd:e5:
         5f:9c:24:0f:dc:77:eb:25:bd:af:85:99:55:03:16:3e:cd:70:
         ea:b0:0a:d8:b0:81:a1:d3:51:1b:1b:ca:32:a6:87:29:3d:36:
         30:ff:a2:4a:6f:83:12:af:80:02:0d:5f:9a:ff:4f:14:cf:4d:
         4a:71:f8:d0:1d:e5:94:07:26:30:c2:75:bb:06:c5:1c:11:b4:
         85:df:cd:39:c5:89:88:8b:3d:30:ac:4a:df:a9:66:e6:3a:6b:
         3a:43:5c:fe:89:ec:b8:b6:45:f8:70:19:19:16:4a:4f:4d:17:
         4d:d3:e3:58:89:50:54:fe:41:3d:91:1a:57:12:2b:04:76:06:
         d9:58:1f:c6:7e:4c:ad:c8:86:e9:88:f0:f6:e9:60:ed:10:20:
         d4:5e:14:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----