Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft
File:                     J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft (raw, json)
Hash identifier:          APaySaeNm35mHnyQ4LFM3CUKyRxqlcZ+79IEkH7fXII=
Subject key identifier:   A8:51:29:7B:3D:C9:31:91:32:72:74:C1:1F:5D:5A:35:B7:32:E6:F0
Authority key identifier: 27:C6:FB:50:70:F4:38:39:50:3C:6B:DD:F5:16:DE:87:C7:FB:89:07
Certificate issuer:       /CN=27c6fb5070f43839503c6bddf516de87c7fb8907
Certificate serial:       01962E990AF029AEE4B42DF42FF58B7F9D11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:43 +0000
Files and hashes:         1: J8b7UHD0ODlQPGvd9Rbeh8f7iQc.crl (hash: Uot9bfyr/gc+8buclnt4NbwYKwewwqyYMbhmN4CmwwM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0a:f0:29:ae:e4:b4:2d:f4:2f:f5:8b:7f:9d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c6fb5070f43839503c6bddf516de87c7fb8907
        Validity
            Not Before: Apr 13 10:01:43 2025 GMT
            Not After : Apr 14 10:01:43 2025 GMT
        Subject: CN=a851297b3dc93191327274c11f5d5a35b732e6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c1:2c:b4:b9:a1:4a:61:64:7c:10:de:df:0b:
                    c2:16:bb:51:92:1d:b7:ac:d1:c7:13:33:17:06:0f:
                    f9:54:04:78:e2:76:f9:8b:b6:13:27:15:97:6f:6c:
                    f4:be:b9:6d:e7:e0:86:9d:22:a5:1d:69:7b:24:d5:
                    04:58:4a:17:1c:95:9f:1c:43:24:bb:e3:78:19:6e:
                    e4:84:f7:88:ab:d0:17:72:31:54:07:88:ad:2e:c7:
                    3f:66:73:34:d0:6c:d4:79:7d:52:29:4c:67:e7:8c:
                    8c:46:95:c9:47:67:a7:f4:15:ff:5e:a8:b3:c6:90:
                    57:07:8d:86:4c:51:a7:c9:52:e9:ac:2f:64:e9:73:
                    ec:84:51:79:d8:45:e1:1c:4d:13:d1:cd:f4:1f:31:
                    0d:ef:49:7b:90:f9:20:06:5e:25:f0:6b:f8:af:15:
                    0a:cb:42:a9:74:bc:71:44:73:52:40:33:9a:fd:07:
                    c2:36:c9:ac:75:37:a2:40:69:dd:73:b0:79:c4:d6:
                    40:41:36:b5:8c:69:51:8e:b0:6b:6d:db:be:47:88:
                    98:62:d3:f6:78:98:72:f0:cc:31:81:0f:54:1d:ef:
                    b3:0e:dc:f9:62:07:c2:4d:e4:eb:bd:c8:c3:72:c6:
                    45:88:7f:e8:94:69:4b:69:98:77:f4:28:09:ee:72:
                    39:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:51:29:7B:3D:C9:31:91:32:72:74:C1:1F:5D:5A:35:B7:32:E6:F0
            X509v3 Authority Key Identifier:
                keyid:27:C6:FB:50:70:F4:38:39:50:3C:6B:DD:F5:16:DE:87:C7:FB:89:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a0:ff:fe:8b:8b:a7:38:1c:00:7a:47:c9:a8:6d:fa:b5:53:
         81:4f:31:c1:93:a2:24:f1:a1:2f:1a:c8:12:2c:59:71:44:80:
         4c:91:3a:27:7e:73:f3:83:a7:63:90:61:2f:fd:eb:19:16:fa:
         df:07:5b:ab:9d:4b:22:57:55:2d:60:93:68:f3:cc:a4:4e:df:
         88:0f:64:b7:f3:49:a3:52:41:0f:b6:b2:5e:4e:bd:4d:ca:ab:
         d0:85:de:6c:1a:48:ce:93:bc:58:62:dc:5e:ab:6c:36:66:5f:
         ae:da:f4:7f:b5:e3:41:e4:45:ff:0d:cc:fe:9e:29:fd:ec:f5:
         94:94:d5:04:e0:12:e3:87:67:d4:d0:da:71:3b:f7:3d:87:03:
         e2:8f:a5:a1:83:14:89:50:87:7d:2c:9a:35:67:53:f0:de:f3:
         f2:77:d4:8b:c3:f3:a9:60:bc:48:00:77:61:17:5c:4f:0d:d8:
         84:a8:5d:6b:9f:79:34:ad:c6:d4:4b:74:df:45:ad:46:45:03:
         08:e8:bb:7a:6a:42:2b:59:ea:e5:1b:32:79:0c:5d:3e:a5:bb:
         ac:15:e2:f8:b7:b3:d0:a3:39:44:40:fa:c9:10:56:2d:2e:15:
         7e:53:99:0b:23:90:19:6d:e9:cf:75:36:63:75:af:01:ff:3e:
         7b:e8:9f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----