Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
File:                     J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft (raw, json)
Hash identifier:          ri4S4QRAmIgAQ/4xwSPfuWUB8uHjV/s50zhG+42n/S0=
Subject key identifier:   0D:11:36:0A:F4:46:8A:81:66:9E:38:5B:F8:D6:AE:9E:F2:E1:8C:EB
Authority key identifier: 27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4
Certificate issuer:       /CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4
Certificate serial:       01962FAB3B48A14433CE06BA7885164F8E4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
Manifest number:          B5
Signing time:             Sun 13 Apr 2025 15:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:12 +0000
Files and hashes:         1: J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl (hash: TGZSXkvHLr4/sJvmz9GOGwPraK304vJoQM0gqSkusF8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3b:48:a1:44:33:ce:06:ba:78:85:16:4f:8e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4
        Validity
            Not Before: Apr 13 15:01:12 2025 GMT
            Not After : Apr 14 15:01:12 2025 GMT
        Subject: CN=0d11360af4468a81669e385bf8d6ae9ef2e18ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:77:93:85:90:0d:86:7f:67:ea:8d:02:55:6f:
                    26:9d:5a:0a:04:cb:18:87:5e:0c:3b:01:be:2a:c1:
                    16:0d:51:0c:2c:0c:2a:79:bb:45:28:87:e2:35:2c:
                    38:ef:66:b0:ef:f9:96:92:70:e4:78:56:58:2c:6c:
                    b2:e8:40:73:93:fb:d6:af:8b:1b:26:9c:91:53:c9:
                    99:dd:7f:4b:f0:0e:14:c7:99:6c:3c:ea:83:2a:f8:
                    3b:11:ef:38:7c:2c:b3:43:06:ed:24:40:f4:ca:04:
                    98:5b:e1:e0:6d:c3:70:14:f4:72:f5:77:0f:8d:5d:
                    a0:cd:1b:1b:4b:51:4b:d9:15:21:d8:7e:55:3d:70:
                    7d:2d:62:98:c3:a6:64:70:3f:83:17:cd:85:62:ec:
                    6f:d7:26:d4:d6:b9:75:8e:43:87:12:9f:7f:ef:d1:
                    81:0e:8b:cd:d9:5b:73:ef:1d:f6:84:ba:2f:2e:46:
                    63:49:51:f8:76:48:ac:bf:6e:3c:7a:6d:94:c4:ce:
                    65:65:f3:6a:f9:47:69:db:1c:bf:d9:a2:01:74:31:
                    3b:fa:d6:14:94:d2:20:8c:f0:17:1c:ed:fe:28:c0:
                    11:3e:d4:03:22:f0:48:a7:67:6a:95:e3:8c:94:8d:
                    48:5d:b0:41:5b:56:96:ce:c6:45:05:f7:1c:07:e0:
                    ae:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:11:36:0A:F4:46:8A:81:66:9E:38:5B:F8:D6:AE:9E:F2:E1:8C:EB
            X509v3 Authority Key Identifier:
                keyid:27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:3f:fe:9d:fe:00:5f:78:b4:4a:60:41:d6:a6:bf:46:da:09:
         b1:d6:1c:6b:cf:8e:84:55:ab:17:5b:db:fe:d3:2c:30:cd:85:
         59:25:a6:85:85:b0:54:f2:5b:13:f9:49:3f:47:ab:d8:3c:78:
         62:2a:bb:4a:56:78:7d:09:1d:95:0a:8f:38:f9:e7:7b:00:40:
         70:38:68:c9:d8:4d:31:4c:6c:ba:c1:dd:a7:7e:28:2c:b4:08:
         5e:23:d4:be:39:f0:cb:c8:ec:71:26:b9:6f:72:be:79:12:11:
         af:4c:fe:6b:66:29:28:ed:26:bc:20:f1:1c:1f:b0:40:d2:8e:
         04:09:c3:c8:75:23:e5:76:ef:3c:99:22:0a:82:02:cd:e7:5b:
         bf:8f:e7:df:0c:10:9a:85:93:87:c7:36:41:3a:18:7f:20:1d:
         30:9b:80:c5:d2:e5:c8:0a:88:d2:01:fc:d0:10:44:26:1d:d0:
         59:ac:a5:1f:1f:7d:56:c2:73:29:7a:7e:42:3a:b8:83:2b:08:
         46:87:bf:c2:dc:1c:13:53:ce:d5:c2:37:08:6f:b3:1f:3a:32:
         1a:77:de:fc:08:1e:f0:12:2e:a7:78:49:b0:7f:51:27:46:43:
         29:82:4b:e9:ce:c5:b7:bc:8e:9c:d8:07:65:b8:08:7b:6d:0f:
         a4:80:17:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----