Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/36f478-1826-44cf-8dd7-aa41db6ce4f9/1/Ji78PF7gPcXRlJTTqlCOJTnraQY.mft
File:                     Ji78PF7gPcXRlJTTqlCOJTnraQY.mft (raw, json)
Hash identifier:          /cJs7rwpUAL/dbhiME/Bv9mNQ+fe06sYA/qwOwAlPPE=
Subject key identifier:   DC:72:3F:0C:51:A8:E6:F6:BA:C8:CD:86:09:DA:C0:70:D8:FD:60:21
Authority key identifier: 26:2E:FC:3C:5E:E0:3D:C5:D1:94:94:D3:AA:50:8E:25:39:EB:69:06
Certificate issuer:       /CN=262efc3c5ee03dc5d19494d3aa508e2539eb6906
Certificate serial:       0195477F46B72DFB722DF7B7F21E5EFFE613
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ji78PF7gPcXRlJTTqlCOJTnraQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/36f478-1826-44cf-8dd7-aa41db6ce4f9/1/Ji78PF7gPcXRlJTTqlCOJTnraQY.mft
Manifest number:          02E9
Signing time:             Thu 27 Feb 2025 13:01:18 +0000
Manifest this update:     Thu 27 Feb 2025 13:01:18 +0000
Manifest next update:     Fri 28 Feb 2025 13:01:18 +0000
Files and hashes:         1: Ji78PF7gPcXRlJTTqlCOJTnraQY.crl (hash: ENlUKIezokin2KqXimRmhgFD8NMm9yrXQ/K8Dm3MQ5w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:7f:46:b7:2d:fb:72:2d:f7:b7:f2:1e:5e:ff:e6:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=262efc3c5ee03dc5d19494d3aa508e2539eb6906
        Validity
            Not Before: Feb 27 13:01:18 2025 GMT
            Not After : Feb 28 13:01:18 2025 GMT
        Subject: CN=dc723f0c51a8e6f6bac8cd8609dac070d8fd6021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a8:28:c0:f1:20:b3:b5:9c:84:30:ec:7c:1b:
                    44:37:9e:5f:fe:fa:72:88:95:ad:ff:50:24:be:88:
                    8f:23:06:8f:3b:e5:86:5d:62:8f:6b:6b:9c:5b:b3:
                    50:c0:13:77:71:10:d3:e6:d8:77:14:1e:9f:65:5e:
                    b4:0a:f7:d5:c9:26:65:3a:3b:22:6f:9f:ec:b7:92:
                    e5:79:e1:c2:53:5f:ac:3d:43:e9:2a:71:33:0a:c6:
                    3a:cb:89:ec:02:31:34:fd:f5:bd:41:64:9f:bd:2a:
                    e3:5b:6e:77:96:be:de:6d:5d:3c:68:3f:40:37:9c:
                    6c:a6:e0:9c:a0:76:f5:08:de:69:98:6f:c9:b9:86:
                    7b:0d:1a:93:56:b2:e2:ca:c9:f9:c2:7a:1b:30:5d:
                    fb:72:97:6b:9d:8e:92:05:63:f8:9e:79:4a:ac:bd:
                    70:0b:d4:c8:e6:a1:8f:2c:6e:0f:46:b2:9f:ad:12:
                    bb:dd:14:78:d8:06:03:8a:fb:6e:d4:28:15:8d:58:
                    7e:48:7e:4e:11:cb:a8:7f:90:71:37:6f:f1:2a:e0:
                    27:02:ba:69:e8:5f:53:f3:c3:a9:9c:a6:60:2c:3e:
                    6c:6b:9d:49:e5:c9:f3:9e:25:7c:66:b1:eb:cb:d4:
                    4a:a2:c5:d0:57:44:87:12:19:12:44:b8:cf:2b:2e:
                    12:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:72:3F:0C:51:A8:E6:F6:BA:C8:CD:86:09:DA:C0:70:D8:FD:60:21
            X509v3 Authority Key Identifier:
                keyid:26:2E:FC:3C:5E:E0:3D:C5:D1:94:94:D3:AA:50:8E:25:39:EB:69:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ji78PF7gPcXRlJTTqlCOJTnraQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/36f478-1826-44cf-8dd7-aa41db6ce4f9/1/Ji78PF7gPcXRlJTTqlCOJTnraQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/36f478-1826-44cf-8dd7-aa41db6ce4f9/1/Ji78PF7gPcXRlJTTqlCOJTnraQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:9f:ad:98:e8:5b:03:c0:27:ae:d2:f8:b7:c2:d9:d6:25:e6:
         4f:43:c7:c6:09:f7:e1:ca:72:f6:e6:d3:9c:9b:a0:92:6e:8f:
         43:b9:b9:0c:00:de:59:7c:b6:c6:e0:3a:f5:6e:86:e0:45:4d:
         e3:89:d6:b9:25:08:bd:bc:cf:6e:11:9c:90:b1:04:97:51:dc:
         e1:40:bf:fc:69:72:70:c4:dd:da:eb:15:af:ec:32:f2:94:12:
         de:44:ae:a5:f9:c4:06:0e:77:1a:54:85:f1:8e:ef:64:a3:e7:
         9e:03:f2:50:c9:6b:ca:ca:fe:84:ab:17:30:49:65:bf:cb:df:
         40:0b:5c:60:24:1e:b1:b1:7a:3f:bd:c7:d3:68:d2:86:c3:43:
         23:6e:a7:7c:c0:a5:17:bf:5e:5a:eb:5c:10:3a:53:4e:09:66:
         36:c3:8b:0b:4f:88:c3:06:e4:6e:a6:ce:14:e4:5d:bc:0f:ba:
         b0:8d:ce:36:b8:6b:30:8d:00:53:31:6d:9a:52:8c:11:bc:97:
         81:be:5f:79:96:b1:4d:ed:43:05:4a:fc:4d:f7:e2:85:13:5e:
         ca:d1:8f:f3:74:92:26:86:42:a5:01:6e:c9:63:77:7d:96:45:
         f6:40:e4:82:75:57:b8:0b:c9:ba:c8:13:7f:23:3d:ed:5b:11:
         7b:dc:32:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----