Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
File:                     JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft (raw, json)
Hash identifier:          lvy+BdrD+ORgEBo/BMq6t2eechT8F7iLiFePLamb0Fo=
Subject key identifier:   6F:E0:53:00:AF:27:9E:F2:9C:F0:53:32:B7:B1:EC:7E:34:A3:B7:08
Authority key identifier: 26:06:6B:6B:6C:13:60:35:01:AA:25:6F:CD:C3:74:0D:F7:78:01:DD
Certificate issuer:       /CN=26066b6b6c13603501aa256fcdc3740df77801dd
Certificate serial:       01962DF42286F2FE1C17E3A828AC612D31BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
Manifest number:          093C
Signing time:             Sun 13 Apr 2025 07:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:36 +0000
Files and hashes:         1: JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl (hash: 9zjDw/Rnv7WXVj3K2T6mKoWhZZ5VSJZ3wK5MhuNpWaE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:22:86:f2:fe:1c:17:e3:a8:28:ac:61:2d:31:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26066b6b6c13603501aa256fcdc3740df77801dd
        Validity
            Not Before: Apr 13 07:01:36 2025 GMT
            Not After : Apr 14 07:01:36 2025 GMT
        Subject: CN=6fe05300af279ef29cf05332b7b1ec7e34a3b708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6a:2d:28:c7:54:35:28:2d:e5:62:5d:da:b3:
                    42:6a:68:15:15:88:e4:f6:fb:c6:0e:8f:a1:9a:55:
                    85:d4:bb:b5:5e:06:25:d9:e8:68:65:2d:3a:ef:e0:
                    81:6a:82:c9:0a:de:bb:f3:08:1d:69:e7:b4:88:d4:
                    a0:55:c4:a0:c7:c6:8e:0e:df:1d:20:66:e0:99:7d:
                    4c:ef:00:ae:2d:4e:30:f4:fc:61:59:f7:13:3f:c8:
                    c6:56:6f:fd:2a:6a:9c:38:30:d7:cb:06:06:ae:c9:
                    da:cc:43:1e:5d:05:68:c7:5d:07:a2:ae:d3:73:da:
                    9b:90:2e:30:b8:3a:30:96:45:ca:fd:f9:b6:d6:a4:
                    e8:6f:3d:ae:0c:ba:da:a3:02:66:b9:20:5c:80:16:
                    86:02:c6:d7:b7:62:ac:ee:12:0e:64:39:5b:87:ab:
                    22:8b:19:c2:c9:94:59:9c:56:88:24:cc:40:09:a0:
                    10:59:76:a8:a4:41:98:8f:72:31:8c:6a:64:86:d6:
                    79:c8:15:33:92:ce:f8:85:1f:9f:e9:6f:b4:32:90:
                    94:a6:78:89:cb:36:a0:7b:66:31:76:1e:c8:4e:0b:
                    94:4d:e5:bd:d7:54:28:01:bb:26:dd:a2:d9:3c:c5:
                    02:95:84:17:4c:66:cd:d6:64:40:3e:d3:6f:e3:c8:
                    5e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E0:53:00:AF:27:9E:F2:9C:F0:53:32:B7:B1:EC:7E:34:A3:B7:08
            X509v3 Authority Key Identifier:
                keyid:26:06:6B:6B:6C:13:60:35:01:AA:25:6F:CD:C3:74:0D:F7:78:01:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ee:db:55:6a:21:87:82:67:a1:6e:df:06:0f:7e:d6:db:d3:
         0f:31:f3:e4:df:42:dd:5c:84:1d:af:32:c3:78:28:41:8d:ac:
         e4:07:0b:8a:cf:cf:f9:0d:81:ce:22:1c:b0:c1:77:e2:00:81:
         2f:92:d1:94:d9:74:03:3e:5c:dd:d6:8f:0f:98:50:bc:92:dd:
         46:58:2b:6e:50:66:21:ca:4a:6d:4b:11:e1:ce:a2:93:13:2b:
         5d:d8:26:53:43:98:9e:42:31:8b:9c:e1:83:4d:49:47:c0:a2:
         06:fa:11:f9:0a:bf:e9:c6:cb:f8:73:a1:88:ed:42:ab:e0:9d:
         f1:2e:af:09:f9:8d:8c:92:e9:10:2e:29:3b:98:55:40:c9:a3:
         28:31:25:cb:d7:52:23:f3:2a:a5:64:24:df:d8:81:97:bd:46:
         56:75:ec:87:db:44:dc:30:e2:f8:e3:20:a1:cc:dd:ea:64:25:
         38:fa:b8:9d:16:6e:20:d7:b2:99:24:e4:24:10:bc:3b:52:fb:
         e6:8c:30:ca:83:49:07:65:1b:17:b8:10:ae:2e:20:00:75:87:
         21:62:40:21:0d:34:d5:fb:7c:45:dd:b5:42:ad:d7:9a:8c:a3:
         1c:44:c0:ac:01:03:74:f4:54:1c:a5:db:9a:c7:96:c7:9c:a4:
         01:2d:18:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----