Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.mft
File:                     JxyaxSXAuEK79l0-xnaJcDzKMls.mft (raw, json)
Hash identifier:          TJxuRWpIHsTJwaJo6CGr+OkEpGIBT+ZmBimIQNwRvYE=
Subject key identifier:   A2:98:41:3A:D5:C8:17:73:3C:AF:9E:E1:F2:C9:3F:F7:70:65:41:D6
Authority key identifier: 27:1C:9A:C5:25:C0:B8:42:BB:F6:5D:3E:C6:76:89:70:3C:CA:32:5B
Certificate issuer:       /CN=271c9ac525c0b842bbf65d3ec67689703cca325b
Certificate serial:       01962E98E997C8DD9B1C295135706612197A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JxyaxSXAuEK79l0-xnaJcDzKMls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.mft
Manifest number:          10CE
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: JxyaxSXAuEK79l0-xnaJcDzKMls.crl (hash: y6snK7fvv0f6Ne2rHz4zVZS0x5y4MobAabQeMZuBbKA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e9:97:c8:dd:9b:1c:29:51:35:70:66:12:19:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=271c9ac525c0b842bbf65d3ec67689703cca325b
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=a298413ad5c817733caf9ee1f2c93ff7706541d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a0:d1:ac:59:b4:d5:a7:21:a5:65:67:1e:ec:
                    cd:84:3b:2c:50:7b:c6:0c:da:b6:c4:1e:45:31:5a:
                    30:fe:35:c0:7f:73:4d:31:0d:b9:5d:7f:cd:f9:c1:
                    de:1b:ed:1d:01:e6:92:a0:50:21:26:1b:37:23:20:
                    e6:95:95:c7:5f:52:69:7d:1f:18:f2:af:be:13:ba:
                    f0:f5:03:8d:68:82:3a:16:4a:8c:d3:ed:34:f9:f7:
                    33:86:30:49:3a:c3:7f:9a:71:d7:74:51:5f:e8:52:
                    81:7c:3e:88:b2:c6:24:36:d8:7e:99:e7:7b:b4:71:
                    cd:e7:8b:bf:b1:59:2f:77:09:fa:e9:6a:65:ae:87:
                    91:f3:de:fb:f1:34:31:be:3c:ef:d4:e2:cd:aa:c7:
                    4f:5a:61:8e:94:4c:31:8a:42:5c:35:be:30:cc:48:
                    b2:c8:1d:9b:62:0c:42:67:2b:e8:d1:9b:ad:0c:40:
                    f5:0a:c2:a0:a4:4b:80:0a:69:ec:f1:34:06:e5:ed:
                    f4:ea:3d:66:22:b3:a7:7c:ce:f4:2e:7e:51:b0:57:
                    77:5e:73:7b:ae:9e:22:cf:f2:dc:cb:31:ee:d1:d0:
                    24:5e:43:0b:59:c4:d2:89:ec:33:dd:6f:7a:0a:50:
                    3a:c4:50:e2:02:85:57:21:87:a9:bf:dd:bb:a9:e0:
                    e1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:98:41:3A:D5:C8:17:73:3C:AF:9E:E1:F2:C9:3F:F7:70:65:41:D6
            X509v3 Authority Key Identifier:
                keyid:27:1C:9A:C5:25:C0:B8:42:BB:F6:5D:3E:C6:76:89:70:3C:CA:32:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxyaxSXAuEK79l0-xnaJcDzKMls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:da:32:45:2d:8e:76:91:96:4f:24:2d:de:c0:71:54:eb:5f:
         2b:09:92:76:bc:6c:d0:ac:1d:b7:61:69:f4:0f:8c:75:8a:bc:
         87:62:2a:60:40:3d:41:6b:3c:08:e6:89:3d:9b:ad:d8:a2:1a:
         a5:9d:c7:d1:3a:1c:60:ec:e5:c0:dd:e5:a4:5a:94:60:d8:4a:
         cb:fb:9d:d2:05:ec:93:d6:94:f1:ad:6b:ea:0a:19:d8:64:41:
         08:9c:5c:8d:5b:7a:d9:42:02:5f:8a:0e:11:5a:4e:08:34:66:
         23:ee:ef:83:be:81:bf:dc:37:da:d8:5f:83:77:79:74:af:62:
         13:18:f5:03:8b:1f:89:cc:d7:39:a9:22:75:9b:5d:99:e3:b2:
         d6:51:3e:bd:d7:09:fc:9b:89:33:1e:d3:e4:27:c1:7a:be:e4:
         ca:98:2e:0a:e8:52:f4:87:3c:81:11:6a:1b:b1:a0:24:20:53:
         83:51:e3:3e:2b:3b:6c:e5:bf:a1:b0:b0:25:c1:1d:10:ff:10:
         d0:7e:5a:15:06:9a:8b:d1:00:ca:e9:af:3a:39:79:fe:63:8f:
         80:ab:a3:79:4e:52:e3:7d:82:9e:69:98:28:e4:a4:c2:9c:d7:
         e0:9b:f7:40:dc:dd:88:c3:0c:4c:fe:95:8e:33:37:24:03:5e:
         69:99:27:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----