Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft
File:                     J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft (raw, json)
Hash identifier:          x+0aX5A7RQaZjRENodH5GI0SOrGiSN35Lbzs6hTpFiM=
Subject key identifier:   5C:7F:65:C4:02:4F:8A:50:1A:76:FA:CC:72:24:9A:37:9A:16:41:27
Authority key identifier: 27:EA:62:F6:F2:31:9C:AD:22:D3:F9:4B:E3:AF:B2:A4:56:78:05:FF
Certificate issuer:       /CN=27ea62f6f2319cad22d3f94be3afb2a4567805ff
Certificate serial:       01962F3D769B29B1550F830546441330C2B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft
Manifest number:          034C
Signing time:             Sun 13 Apr 2025 13:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:19 +0000
Files and hashes:         1: J-pi9vIxnK0i0_lL46-ypFZ4Bf8.crl (hash: 7haN4khNtb9mSLpZBNWLzeohdTd/D6hWv49CKQTCaac=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:76:9b:29:b1:55:0f:83:05:46:44:13:30:c2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27ea62f6f2319cad22d3f94be3afb2a4567805ff
        Validity
            Not Before: Apr 13 13:01:19 2025 GMT
            Not After : Apr 14 13:01:19 2025 GMT
        Subject: CN=5c7f65c4024f8a501a76facc72249a379a164127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c0:92:78:3c:21:b7:23:e2:e0:78:58:2a:21:
                    33:10:68:90:d2:b6:5b:97:0f:4b:d1:5b:78:7d:c1:
                    b7:b7:e6:fc:f0:77:c4:f4:6a:59:40:8d:e8:21:19:
                    ed:0d:9c:03:5c:18:b5:a1:cb:a9:b6:15:cc:66:c6:
                    08:03:2e:4e:46:fb:1b:39:2f:c9:91:8c:5a:b4:eb:
                    23:2d:4e:2d:1a:d1:15:a5:ad:07:b4:84:2f:a8:9b:
                    58:f1:56:78:43:72:be:3a:6c:5e:2a:09:3c:8f:e4:
                    72:92:36:3a:0f:1a:3b:06:83:c4:8e:fc:4c:cc:81:
                    f3:3f:78:5e:64:72:83:d9:6b:85:7f:ff:84:7e:f9:
                    35:cc:eb:80:7c:49:ba:14:af:41:d0:65:3f:c4:09:
                    f4:4c:4a:a9:85:d2:db:cf:2a:b1:93:96:46:31:d3:
                    2b:46:ea:87:cf:19:54:66:c0:57:5e:48:ea:5e:3e:
                    46:51:4a:dd:81:38:2b:4e:75:7c:2d:b2:4f:3e:7c:
                    f8:ad:cb:6b:5e:c0:84:97:29:a4:9e:79:66:e5:f7:
                    18:f1:df:8f:c2:f5:71:d3:8f:95:5a:58:08:e8:6f:
                    ce:95:49:73:12:cd:be:28:61:d9:13:bb:d3:6b:9d:
                    70:57:82:a5:04:83:c6:ca:51:dd:78:ea:51:d9:67:
                    11:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7F:65:C4:02:4F:8A:50:1A:76:FA:CC:72:24:9A:37:9A:16:41:27
            X509v3 Authority Key Identifier:
                keyid:27:EA:62:F6:F2:31:9C:AD:22:D3:F9:4B:E3:AF:B2:A4:56:78:05:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:53:ea:50:5b:39:93:af:0e:5d:4d:7f:29:3a:66:8b:c4:6d:
         b5:93:16:f2:10:79:bf:2c:0d:e3:2c:9b:0b:db:3c:15:43:9f:
         e4:af:03:98:b2:5d:a6:5b:34:3d:9a:f6:f0:fa:f2:b9:48:59:
         a5:a6:15:a1:45:a8:4f:52:62:bf:a0:bf:1e:69:41:cb:9e:06:
         21:bf:11:65:93:d6:e5:37:f5:ed:93:82:d9:94:b9:98:e3:b7:
         f5:36:25:29:88:3f:99:15:8b:a5:c2:73:b7:85:82:8a:eb:ef:
         83:38:f2:4b:b2:f4:5e:7a:3b:91:78:1a:69:f4:7f:96:05:c7:
         cc:c7:35:5d:15:de:b9:4d:8f:9e:ad:54:55:dd:62:ea:4e:f6:
         17:d0:61:05:6c:fb:33:77:22:72:b8:c5:3f:a8:42:22:94:d2:
         c4:91:03:38:bd:b9:d2:f4:f0:ff:e7:a4:e5:87:2e:66:e3:1c:
         57:1f:c3:f6:7f:4f:fa:2a:a3:83:77:e9:82:eb:ee:c2:59:e6:
         8a:42:e7:d8:1b:1e:53:a4:02:5d:ac:76:8b:86:a0:a8:fa:6b:
         5a:74:d0:f6:ee:76:39:dd:88:92:d7:de:6d:63:df:ac:c3:de:
         fd:36:63:92:f5:c9:94:7e:b0:3e:aa:4b:2c:9a:ca:7d:eb:72:
         de:7e:11:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----