Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
File:                     2JVh1yxrmEdwA-5iKJ_sVwweFng.mft (raw, json)
Hash identifier:          bcqg39Xx19FXokj+t5D4nte4Y/R2cF0I7pr6vk+ZSWY=
Subject key identifier:   9C:91:5D:53:00:4E:1F:85:96:54:DC:1C:AB:21:32:08:99:99:B1:F6
Authority key identifier: D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
Certificate issuer:       /CN=d89561d72c6b98477003ee62289fec570c1e1678
Certificate serial:       01962F3DD53812AEA4FF5F6A1AB90D38C261
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 13:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:43 +0000
Files and hashes:         1: 2JVh1yxrmEdwA-5iKJ_sVwweFng.crl (hash: ZgE/oWW/N34qKNrl7DUI7y6QzBtsrPANyO9DEJXuXYg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d5:38:12:ae:a4:ff:5f:6a:1a:b9:0d:38:c2:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d89561d72c6b98477003ee62289fec570c1e1678
        Validity
            Not Before: Apr 13 13:01:43 2025 GMT
            Not After : Apr 14 13:01:43 2025 GMT
        Subject: CN=9c915d53004e1f859654dc1cab2132089999b1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:66:fd:16:f1:ee:9e:31:18:e1:99:85:2f:06:
                    44:cd:38:34:72:f0:b9:65:3a:5d:d3:e7:79:3b:98:
                    e7:1b:06:d0:91:76:36:c5:75:00:95:f1:e0:fb:65:
                    07:b1:bd:51:38:59:a6:07:b7:50:6d:39:16:4a:3e:
                    13:04:7e:4b:a4:e4:f2:d2:12:4f:c7:ce:70:4a:14:
                    f1:c3:3c:cb:de:25:e4:50:96:64:4a:82:be:8d:1c:
                    56:f7:f2:49:32:0d:42:30:4b:03:51:19:7e:84:84:
                    e8:1d:50:fa:8d:99:6d:c1:40:08:6c:6e:52:01:3e:
                    9a:1e:36:43:3a:f6:51:5f:17:27:f1:f5:5d:44:8f:
                    7b:e3:9b:c0:7d:60:72:9b:97:01:15:1c:61:19:98:
                    b6:4f:b7:1a:6f:7b:d2:ec:67:ef:d3:bc:db:66:06:
                    da:b0:24:98:fd:26:2e:f9:76:95:9e:21:c6:6f:8e:
                    90:ca:e9:53:e6:bb:fd:e4:64:82:b1:aa:e8:06:8b:
                    ef:7c:1c:5c:d1:d1:c1:66:98:1a:5e:0b:39:4f:91:
                    c0:49:ef:9b:77:6d:cb:ed:be:4d:85:9e:0d:48:3f:
                    6c:40:61:6b:06:42:e5:3a:40:8a:98:cb:7a:6d:1f:
                    ac:90:3b:3f:a7:1b:43:0f:05:79:68:b5:8b:0c:06:
                    f9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:91:5D:53:00:4E:1F:85:96:54:DC:1C:AB:21:32:08:99:99:B1:F6
            X509v3 Authority Key Identifier:
                keyid:D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:c0:0b:96:f3:16:d3:6f:0b:b3:f8:df:b0:97:3f:16:c0:be:
         dd:12:b1:d4:d1:59:48:67:e8:3c:fb:48:33:5f:97:ae:6a:e3:
         18:5a:a8:a4:fa:54:1d:1a:ea:58:bc:59:a1:86:3d:35:f0:eb:
         8f:dd:94:a0:76:ee:37:89:ba:e8:80:a8:af:8c:7e:77:b8:2b:
         f8:fe:20:3d:4b:5e:51:85:19:56:3b:6d:ae:8f:f4:cd:f0:aa:
         49:c4:a5:d9:44:2f:6a:ed:89:b0:4f:cf:37:47:2b:79:e2:51:
         fe:68:a1:15:d7:6b:53:b6:24:08:76:bf:fb:08:23:bd:36:02:
         0e:e5:7a:c4:27:4e:f9:13:25:1d:9d:be:39:0d:bb:84:35:c0:
         fc:62:1d:7a:7f:37:ea:2f:54:e8:36:c7:93:df:45:ee:8a:4d:
         9a:e2:ec:a2:c2:01:a6:1a:17:3a:04:a4:02:60:e6:17:ab:a6:
         fd:6b:9f:79:50:d9:f5:e3:ac:42:1a:3d:7b:be:99:54:5c:7c:
         58:a7:93:30:1f:3d:b6:63:fe:46:27:bc:42:7d:fe:bf:fe:a3:
         90:9e:44:c7:37:33:28:be:38:f0:b2:fe:24:14:74:95:75:3c:
         89:0d:83:fa:45:35:7b:c4:90:da:ff:36:40:e5:e4:4d:09:19:
         7a:ba:f5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----