Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
File:                     JCsEwxmbHrlpPUMg9702HtYXBTA.mft (raw, json)
Hash identifier:          wgWiTkVNxDnjb4z2iJOYLtS6GfX8SNajfLSzVwOAfpo=
Subject key identifier:   0D:DA:2B:E7:FA:84:D8:54:2F:16:2D:26:4B:1C:C3:10:E0:FB:15:DC
Authority key identifier: 24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30
Certificate issuer:       /CN=242b04c3199b1eb9693d4320f7bd361ed6170530
Certificate serial:       01962E999267B2301758309B9FD08427C3FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:18 +0000
Files and hashes:         1: JCsEwxmbHrlpPUMg9702HtYXBTA.crl (hash: IxtOHrRS7PemjDis6I/Hs4PVyV65NwTTMjg/h1LV+Us=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:92:67:b2:30:17:58:30:9b:9f:d0:84:27:c3:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=242b04c3199b1eb9693d4320f7bd361ed6170530
        Validity
            Not Before: Apr 13 10:02:18 2025 GMT
            Not After : Apr 14 10:02:18 2025 GMT
        Subject: CN=0dda2be7fa84d8542f162d264b1cc310e0fb15dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a0:72:10:02:5d:15:21:19:5c:14:be:1d:48:
                    a5:f3:94:2e:0e:0d:37:7d:5e:a8:1b:5a:d4:d2:db:
                    a2:02:30:e2:cc:19:f0:f2:dc:1f:75:8b:9e:2c:59:
                    cb:2f:dc:a3:9f:44:29:3f:af:9b:34:2a:56:6d:bf:
                    2b:89:f0:43:bc:a0:b9:85:e1:ac:9e:49:e1:0c:ed:
                    6f:63:88:aa:88:2e:3b:a1:1f:42:ea:0a:29:df:f2:
                    92:32:80:cc:27:b5:ec:3d:41:89:59:c9:80:0a:b8:
                    7e:88:79:ea:14:1d:4b:0c:e7:c0:fb:34:f4:9f:7c:
                    14:f3:7b:c8:b1:24:1f:73:c9:e5:86:6d:c6:11:c1:
                    dc:ca:f3:0e:da:6d:2d:2b:e6:ab:3c:d3:aa:8d:21:
                    50:43:31:cb:1f:3a:5c:89:ae:fa:e0:22:39:b3:75:
                    89:65:c0:e2:52:22:9c:ff:8f:4f:bd:9f:a3:6a:61:
                    5c:01:9f:58:b5:c8:17:6a:55:f7:57:a2:63:65:3d:
                    01:08:10:e8:cb:1e:6b:c6:73:49:c9:8c:fc:99:64:
                    22:5c:a3:7b:01:d7:32:cc:6d:2b:65:a7:e4:96:45:
                    8c:13:e4:a4:93:72:b3:01:2b:bc:f5:72:61:80:d3:
                    3f:64:34:ee:d8:53:8a:27:f8:3a:96:59:a8:c6:d9:
                    27:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DA:2B:E7:FA:84:D8:54:2F:16:2D:26:4B:1C:C3:10:E0:FB:15:DC
            X509v3 Authority Key Identifier:
                keyid:24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:51:9f:23:2c:b1:5f:f6:c7:cc:5e:4e:1e:44:58:b2:f2:e2:
         16:b8:10:09:77:64:99:ca:62:e0:a8:dc:f9:5a:8e:e9:dd:40:
         5f:79:d1:60:01:80:53:56:89:2d:d2:46:ce:29:7e:ae:3b:51:
         f9:77:66:d2:8d:ad:7b:3f:e0:2a:ad:78:ea:80:31:d9:09:76:
         83:71:2a:1b:2f:2f:ac:b2:ee:3c:7f:fa:4d:27:ee:8b:4b:a6:
         ca:fe:cc:03:35:03:50:1a:e3:e6:55:d2:dc:37:fa:48:cb:42:
         50:69:44:d8:f0:a1:32:fb:86:f6:73:b8:eb:66:2a:69:bc:28:
         b4:1b:ab:95:29:d0:44:3a:3a:8b:03:6a:50:c2:a2:1a:68:6f:
         eb:ef:88:bf:52:b9:cc:67:dd:a6:ab:02:0f:94:ee:cd:3e:0c:
         f6:33:1c:79:1e:bb:93:da:da:18:fa:b7:9b:3c:9a:a7:b1:97:
         6d:ec:4f:06:59:9f:5a:e2:ee:a3:db:1c:59:6b:54:d3:8a:fb:
         d1:19:35:f3:6d:bc:fa:93:84:f6:b0:3a:2b:07:4a:f3:2c:00:
         7b:84:f3:20:cc:3b:98:0a:bf:04:1c:dc:3d:c3:58:61:a4:96:
         47:51:c0:e1:6b:46:84:12:ec:a7:43:5a:c3:f2:d2:1b:26:38:
         45:6c:9b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----