Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
File:                     jTgcV7CbXiZ91UcVDbRVg46si6M.mft (raw, json)
Hash identifier:          IAwCXBZ7so8UhzId7Gsjcy3UeK0VhaiUeBw1pZCIPAY=
Subject key identifier:   DA:7F:4E:FD:CC:F1:E1:4D:E2:03:13:78:14:86:00:81:98:FA:52:B7
Authority key identifier: 8D:38:1C:57:B0:9B:5E:26:7D:D5:47:15:0D:B4:55:83:8E:AC:8B:A3
Certificate issuer:       /CN=8d381c57b09b5e267dd547150db455838eac8ba3
Certificate serial:       01962E98828DA34FCE12C1DBC41C899398CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
Manifest number:          0270
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: jTgcV7CbXiZ91UcVDbRVg46si6M.crl (hash: ouKlEgcPyDWyDE+0psdKzVYztMjQ1BfEC9s9HEPLzmQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:82:8d:a3:4f:ce:12:c1:db:c4:1c:89:93:98:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d381c57b09b5e267dd547150db455838eac8ba3
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=da7f4efdccf1e14de20313781486008198fa52b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3b:ec:91:37:7b:87:6a:39:ff:84:e5:ab:96:
                    fc:52:79:4e:dc:19:11:a8:52:b6:0d:d6:09:1d:a9:
                    2f:d3:85:a3:7d:8e:9e:49:8c:3e:6c:40:91:72:d5:
                    28:06:2b:6e:c0:6d:db:04:32:20:95:2e:cb:73:ab:
                    1e:58:14:3b:68:e4:d1:b1:4a:2f:09:01:91:ed:d5:
                    ed:6f:d5:c0:a8:7d:7e:1f:5b:f9:7e:6b:d7:04:06:
                    a1:36:c0:7e:27:07:98:d4:4e:87:07:da:9c:0d:c7:
                    42:e3:32:8a:0d:e4:7d:64:e7:2c:76:79:d9:02:b7:
                    3a:f2:c7:15:b2:cf:ed:bd:fd:e2:71:2c:c4:63:64:
                    0e:78:f4:00:2b:6a:90:a7:8b:12:d7:b8:00:de:50:
                    40:b7:b6:be:36:e6:b8:68:82:22:a4:27:82:ca:4b:
                    6e:e6:ff:48:bb:5b:e7:d2:d5:9a:d2:52:fa:d5:90:
                    fa:7e:24:6f:73:c9:40:b4:d6:e4:a8:ad:16:8f:5a:
                    e1:86:fc:a0:01:34:58:9b:aa:08:8d:58:3a:ac:a9:
                    ab:35:d2:b7:cc:1c:dc:4e:a3:4a:97:3c:01:94:18:
                    c7:aa:e1:b7:0d:90:de:e7:0c:c0:64:bc:b0:6c:6b:
                    bb:60:1c:68:6b:52:b7:0f:eb:21:e1:1e:57:c5:42:
                    db:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7F:4E:FD:CC:F1:E1:4D:E2:03:13:78:14:86:00:81:98:FA:52:B7
            X509v3 Authority Key Identifier:
                keyid:8D:38:1C:57:B0:9B:5E:26:7D:D5:47:15:0D:B4:55:83:8E:AC:8B:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:98:8d:11:e6:d0:97:da:c2:3e:43:1f:9f:37:5e:c1:08:24:
         1a:28:46:62:0d:b8:40:ed:35:95:6c:4e:40:74:93:38:71:90:
         40:97:b8:fa:be:ee:7a:fb:6e:f1:bf:6c:39:ab:30:9e:67:9c:
         8d:d8:44:b1:ca:71:db:58:39:d3:72:bf:e8:ec:58:87:ff:86:
         79:69:7e:95:f2:17:03:04:51:9d:18:55:d6:c1:1a:94:65:bc:
         48:e9:da:2b:59:df:97:6f:fb:4a:fa:94:36:fc:4e:aa:f1:ce:
         58:54:e3:53:46:09:73:2f:bc:f5:b1:12:01:bf:0b:3d:3f:71:
         71:ea:12:c3:dd:f4:f4:da:2b:6a:f1:3e:b6:c0:7b:f2:23:d5:
         b8:d3:de:e3:50:48:2e:ec:cd:ef:bc:05:a3:ff:3c:13:79:d7:
         f9:f5:7b:94:a2:5c:f3:41:08:4d:9d:2c:c2:ff:db:2e:f3:e0:
         4e:6e:3f:db:d5:77:9e:74:c8:91:c4:f4:cc:d5:38:b6:b8:9b:
         41:c7:46:67:82:c3:66:5b:79:23:3e:61:a5:ca:7e:26:13:1f:
         f5:32:c8:5c:c3:f6:15:94:d0:e7:d4:3e:26:61:eb:63:f1:25:
         bd:1b:bd:3e:25:6c:96:9c:77:ae:82:79:e5:f8:90:19:d6:ea:
         11:84:a0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----