Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
File:                     27mAEFNsQG6o89ZlWUwijXbrEP0.mft (raw, json)
Hash identifier:          dryVvacsxxqQVLyFVg2mA5ZRoPtOEyGTzVVS24GMn3w=
Subject key identifier:   BE:35:CD:18:6C:F0:DE:96:BF:48:C8:B1:C8:D3:F4:35:CC:D8:45:04
Authority key identifier: DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD
Certificate issuer:       /CN=dbb98010536c406ea8f3d665594c228d76eb10fd
Certificate serial:       01962F74BB3A10A074422AEFAFB5080AE1B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
Manifest number:          0F6F
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: 27mAEFNsQG6o89ZlWUwijXbrEP0.crl (hash: MPepdDoBUNxXjOAeoyrqZhGiKAwpPKYc5hXrFNpjHLQ=)
                          2: 462bBm4iwjQVO5xQHm8PCwvYoHY.roa (hash: dqD+m/gujJ0eHtncIX933mchElI1Kz0NU3ueb9Vzn+Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bb:3a:10:a0:74:42:2a:ef:af:b5:08:0a:e1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbb98010536c406ea8f3d665594c228d76eb10fd
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=be35cd186cf0de96bf48c8b1c8d3f435ccd84504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6a:5b:f3:fc:2d:2b:19:7d:60:3d:27:ce:e7:
                    a7:42:0e:1d:40:76:4f:b2:f4:8d:39:e6:db:d4:eb:
                    e5:fd:3b:2e:c5:43:1f:ba:4f:af:48:cc:28:f1:e2:
                    8c:19:c2:84:a7:e2:c2:40:a2:25:ea:32:8a:02:0e:
                    31:42:4d:09:3e:b4:44:80:47:b9:86:f2:57:81:83:
                    f1:30:c5:87:3a:87:9f:44:a2:9e:be:c7:7c:e3:73:
                    33:60:0c:cc:b9:86:73:d2:13:bb:40:6f:d9:99:b2:
                    59:94:b6:a6:21:41:3b:61:28:ae:83:9c:97:bb:30:
                    2f:f4:1b:91:72:47:d7:eb:3c:7c:25:77:a4:ca:b3:
                    0e:19:d3:e5:b1:fd:ef:65:c3:03:be:97:ab:1c:b1:
                    dc:97:90:a4:f4:f8:1d:8c:40:20:bd:c5:93:54:31:
                    c3:b4:d4:4f:74:eb:3d:6a:a8:17:e6:78:73:2a:31:
                    77:4a:3d:bc:54:4e:a5:70:de:bd:94:7c:fe:2f:7d:
                    ca:87:5d:1b:7d:87:55:d5:b3:67:b9:15:0e:e3:8e:
                    bb:ee:3d:c4:78:ae:ed:a4:ff:22:65:66:f4:20:44:
                    69:39:e7:f8:db:d2:c5:1b:88:49:41:64:69:27:a6:
                    e7:ce:3b:76:c7:09:3e:29:9f:13:dd:4a:be:91:e8:
                    b5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:35:CD:18:6C:F0:DE:96:BF:48:C8:B1:C8:D3:F4:35:CC:D8:45:04
            X509v3 Authority Key Identifier:
                keyid:DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:fb:f2:10:06:43:48:6a:64:5c:f8:19:b6:ad:d0:c3:37:d5:
         c0:1c:73:71:2c:39:cd:9a:25:67:61:ca:52:51:b9:fc:56:36:
         2d:8b:38:06:2f:fa:f0:02:90:45:e2:ec:05:b9:d1:2f:d3:c7:
         fa:f3:ed:0c:3a:3b:31:fa:ae:f7:ff:dc:1b:b9:94:e3:85:13:
         88:24:8a:85:5a:4a:59:2a:9f:dd:58:45:8e:7f:d0:f5:5f:a3:
         43:04:14:c1:a9:b8:4c:f6:ed:0a:68:35:44:5f:87:ef:43:02:
         68:df:c8:b5:e9:1c:33:70:9e:c6:ee:ca:4c:46:3c:c0:8b:d0:
         6e:9b:4c:44:d9:0f:71:46:0b:c8:86:81:50:0f:57:29:72:32:
         07:6d:3d:f1:1d:51:75:ad:c7:86:87:11:b8:6c:62:c1:c5:5c:
         04:a0:f8:3b:f8:96:39:66:67:14:d5:3d:93:42:9e:1f:51:59:
         18:12:08:48:bf:de:15:73:f8:26:bf:e3:34:37:2b:c8:be:d3:
         d1:e6:76:b0:ec:2a:33:a3:3c:dd:4a:42:73:84:e3:60:31:d7:
         48:12:18:cd:77:9e:c0:8d:c4:e8:be:a0:82:d1:db:e3:16:6f:
         35:b3:20:a8:51:cc:43:05:86:21:b3:bd:1a:3b:59:0f:29:fc:
         d7:a7:3b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----