Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
File:                     jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft (raw, json)
Hash identifier:          3dz8ID0rm+wJpn2ZVplLnSJVOpe3D5cyyIwKmB039lk=
Subject key identifier:   DC:BB:B2:AE:CE:5F:1E:6B:0A:B7:C2:67:7F:3F:39:F9:B1:56:4F:26
Authority key identifier: 8C:43:78:B5:71:68:2D:34:77:3B:46:37:52:70:1C:94:05:FB:ED:78
Certificate issuer:       /CN=8c4378b571682d34773b463752701c9405fbed78
Certificate serial:       01962E61B140218BC0F6CF742A2E5F9E8294
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
Manifest number:          03E0
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl (hash: m9WTDBQsBjwgdech6wuRvdaCLhzc1ZVcJU3WrV3GBMM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b1:40:21:8b:c0:f6:cf:74:2a:2e:5f:9e:82:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c4378b571682d34773b463752701c9405fbed78
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=dcbbb2aece5f1e6b0ab7c2677f3f39f9b1564f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5f:2e:2a:8a:fe:39:ff:4d:c0:9d:6a:5d:31:
                    63:37:25:20:d9:e6:a5:3c:54:05:5d:a5:98:f0:18:
                    e7:9d:81:7b:b9:5b:e5:de:49:6b:6a:b4:c9:6d:b4:
                    81:a7:83:14:e6:31:a5:0a:a2:75:2b:73:aa:3e:8d:
                    5a:3d:f9:df:a9:0f:86:e4:bf:e4:b5:f6:63:b4:ae:
                    81:fa:c6:97:06:ab:47:08:42:3e:7f:20:23:81:4c:
                    b0:1b:c4:dd:52:30:29:7d:c4:97:a1:7c:2d:c5:09:
                    50:81:11:96:14:5c:64:d4:9b:c0:1f:99:f3:c4:c0:
                    35:f5:32:91:33:0b:b2:6a:e1:72:ca:fb:21:0c:c7:
                    8d:b2:2a:4c:22:96:1d:59:a7:5d:0b:bf:1d:26:24:
                    01:db:bc:b0:48:5c:1f:4d:e0:9c:51:ec:32:2c:66:
                    53:cd:d6:c2:23:07:fd:15:22:42:b6:1e:f5:76:5a:
                    76:de:d1:0a:9b:33:b0:fd:55:67:e8:29:10:dd:d5:
                    15:97:ed:36:69:2b:61:98:0b:e5:f0:0d:5f:6c:2d:
                    d2:d9:f8:48:5f:7d:15:29:30:72:71:cb:7f:07:6e:
                    ad:e0:da:72:5b:05:b9:95:91:66:9a:bd:7d:93:93:
                    12:a4:fc:2a:25:68:3f:b3:dc:a5:2c:70:07:5c:20:
                    73:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BB:B2:AE:CE:5F:1E:6B:0A:B7:C2:67:7F:3F:39:F9:B1:56:4F:26
            X509v3 Authority Key Identifier:
                keyid:8C:43:78:B5:71:68:2D:34:77:3B:46:37:52:70:1C:94:05:FB:ED:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:37:60:18:44:13:31:8a:c8:d9:40:cc:71:30:fa:8a:bd:ff:
         17:aa:6c:81:6c:aa:33:97:a4:de:4e:7d:d4:7a:d5:41:aa:db:
         74:bb:71:6f:5a:4e:a5:90:92:68:58:fe:a7:b9:f9:5a:e5:45:
         96:09:bb:6a:80:cc:f9:8a:7a:f6:e5:ae:be:10:0f:ff:e0:af:
         1e:cf:62:7d:51:62:14:94:32:64:fd:43:60:33:c1:81:f3:88:
         0d:6d:2c:82:ef:72:37:70:23:6b:30:85:77:28:d3:e3:3b:58:
         16:fa:13:de:8e:f4:59:75:d7:ab:66:18:87:9f:6c:5c:6d:82:
         e3:28:16:d2:03:09:4a:f1:b3:87:99:7c:98:6e:fa:7b:bf:53:
         2f:ee:bb:67:a9:fe:b0:d0:a3:e7:38:0c:71:80:e3:0d:4c:ac:
         be:0b:7c:1e:a1:2f:2f:d8:89:60:ed:19:bd:68:34:4a:da:b5:
         12:44:4b:62:c4:95:e4:9d:cf:af:12:74:a3:42:89:2a:b0:52:
         ff:1b:9b:11:4a:f6:88:4a:14:c9:fa:65:59:cf:ed:62:71:7c:
         0e:cd:d5:7d:62:27:a2:a1:9e:ff:c3:09:10:3b:0a:88:c0:51:
         58:88:e7:ad:b1:00:0f:88:fd:92:0d:54:fc:20:39:88:fe:a7:
         9e:9e:b6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----