Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft
File:                     Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft (raw, json)
Hash identifier:          1z45tAm8rfadQsHsuzB+0GGGNWmhL039MK/HGqBuz1o=
Subject key identifier:   BA:29:C1:5C:25:2F:17:5B:9F:E0:66:83:04:87:19:4B:2C:D1:A4:52
Authority key identifier: 26:F9:77:77:9E:90:83:66:DD:24:60:E3:A6:F7:8E:A0:00:22:D8:45
Certificate issuer:       /CN=26f977779e908366dd2460e3a6f78ea00022d845
Certificate serial:       01962ECFA90990D862688A222BE6CD83C1E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jvl3d56Qg2bdJGDjpveOoAAi2EU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft
Manifest number:          0199
Signing time:             Sun 13 Apr 2025 11:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:23 +0000
Files and hashes:         1: Jvl3d56Qg2bdJGDjpveOoAAi2EU.crl (hash: JK+xQmPlpWyo9NuAk5g5GIx29TsZ+Tht8JpCj+WAZac=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a9:09:90:d8:62:68:8a:22:2b:e6:cd:83:c1:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f977779e908366dd2460e3a6f78ea00022d845
        Validity
            Not Before: Apr 13 11:01:23 2025 GMT
            Not After : Apr 14 11:01:23 2025 GMT
        Subject: CN=ba29c15c252f175b9fe066830487194b2cd1a452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:af:ad:10:8c:1a:1c:71:ee:63:70:b5:b8:
                    a7:70:a4:08:f1:2a:23:75:3d:2b:93:ff:42:90:7a:
                    69:24:81:b2:d5:cf:d5:30:c8:5c:56:dd:fe:19:07:
                    85:6a:56:dc:d4:ed:df:31:0e:0e:62:ae:1e:d5:6f:
                    02:ac:91:1f:8e:81:59:c2:5f:a6:0d:e3:f8:06:12:
                    70:ab:13:e2:44:94:a3:f5:f4:03:54:c9:0f:96:ef:
                    d1:6d:f0:6b:39:0e:38:49:d3:62:88:7a:12:da:fc:
                    c9:70:1c:48:24:2c:79:10:47:2a:5d:1a:4d:9b:8b:
                    0e:af:3f:91:c8:a9:0f:22:09:ba:f1:dd:6c:b5:bb:
                    7e:52:3e:2f:99:78:1f:82:69:f4:ed:a8:91:52:a5:
                    7d:2e:d2:60:26:ec:0b:3b:e8:3d:00:11:87:89:b9:
                    68:33:4f:a0:06:db:2e:80:57:63:bd:b0:fd:31:88:
                    ac:00:2f:d1:3e:0f:03:e2:7b:2d:5f:4f:a5:df:6a:
                    39:3e:d0:d6:69:02:f8:71:0b:28:7c:90:f8:e4:b3:
                    8e:75:a7:56:b5:cb:7c:eb:86:df:b0:3d:21:fe:01:
                    00:aa:7a:a0:51:e1:8b:2e:59:e7:65:3b:11:51:92:
                    ff:4b:16:24:2b:1e:ee:3e:93:5b:b0:d6:54:44:1f:
                    1a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:29:C1:5C:25:2F:17:5B:9F:E0:66:83:04:87:19:4B:2C:D1:A4:52
            X509v3 Authority Key Identifier:
                keyid:26:F9:77:77:9E:90:83:66:DD:24:60:E3:A6:F7:8E:A0:00:22:D8:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jvl3d56Qg2bdJGDjpveOoAAi2EU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:1a:81:05:a8:1f:2c:95:07:f5:32:4e:f7:60:42:84:3c:07:
         90:f2:30:30:2d:cb:02:9d:20:f0:b6:6f:2f:8c:81:36:9c:d3:
         a6:40:20:ed:e3:4f:d2:d5:24:51:48:b5:b9:18:f3:04:c6:d7:
         ff:5d:f8:73:1a:6c:e9:44:ca:23:1c:32:70:5c:32:73:46:ed:
         c2:77:9f:dc:bf:79:4c:2e:ba:47:b4:40:c2:bf:81:27:fe:f4:
         42:7a:d3:e0:10:1b:8e:5b:a6:e1:79:01:94:fa:ee:9d:86:89:
         29:85:30:dd:b2:3c:b1:81:5f:2b:4c:d0:78:30:e1:07:46:d7:
         6f:9b:2d:8a:b6:34:bc:3a:4e:78:f6:a6:64:6d:8a:3f:41:79:
         6b:ff:f8:c0:55:5d:59:89:76:52:68:07:2b:7c:6b:dc:d7:70:
         e3:b7:de:f6:ac:3e:62:48:52:5e:c3:c2:6f:69:4e:bb:75:e0:
         31:fe:0d:6f:c0:6d:cc:75:7a:51:2e:71:89:4e:64:79:6e:1e:
         e2:0d:dd:c3:d1:ee:61:7b:38:4c:8d:00:9c:1b:39:54:5d:64:
         58:9a:a3:a5:01:bd:92:6e:0f:cb:02:b0:26:ff:1b:48:b7:ff:
         7f:15:bf:b6:50:29:1d:12:f9:be:14:c0:f1:93:9f:d2:b6:86:
         c7:42:6e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----