Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
File:                     J0PbfuNKwtTtV49JXgCWy5iv9xw.mft (raw, json)
Hash identifier:          dOTKhps/Enuiqbix6J63a1GAER1CUXF/oGFrl02ikc0=
Subject key identifier:   EB:FC:B9:71:4E:78:87:A7:9B:6A:DB:8A:58:8A:DA:75:F8:6E:E1:2A
Authority key identifier: 27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C
Certificate issuer:       /CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
Certificate serial:       01962F06540C5C99E35FB0BBE9ED4608ABFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
Manifest number:          35
Signing time:             Sun 13 Apr 2025 12:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:05 +0000
Files and hashes:         1: J0PbfuNKwtTtV49JXgCWy5iv9xw.crl (hash: MV8aTqArP7Xqm59rfk5QrG+JH59oZAePlakNZ091LiU=)
                          2: dDAgjd5fwQ3cte1EAxZ7pLJLl0U.roa (hash: 2txr4+GD0XgpxhSLLq5aM5yNR187eckG+kO4tKZmm3U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:54:0c:5c:99:e3:5f:b0:bb:e9:ed:46:08:ab:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
        Validity
            Not Before: Apr 13 12:01:05 2025 GMT
            Not After : Apr 14 12:01:05 2025 GMT
        Subject: CN=ebfcb9714e7887a79b6adb8a588ada75f86ee12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a0:31:95:0e:2f:9e:ac:77:e3:b7:a4:76:eb:
                    7a:9e:8f:f8:c5:fb:b4:d0:5c:f2:b9:58:9a:b9:60:
                    97:12:55:f3:d0:90:7a:02:28:d3:70:2f:d8:30:76:
                    ce:38:96:30:68:99:89:de:30:d2:20:0c:c0:31:c0:
                    87:7c:be:29:f3:a1:ee:f5:47:ee:0c:41:57:e5:d4:
                    78:10:46:06:51:6b:40:77:84:7d:6c:42:83:84:82:
                    85:e0:f9:06:08:01:a4:a1:1d:61:dd:97:cd:4a:20:
                    d1:06:98:86:b7:16:c3:24:a8:7b:be:a9:12:66:e0:
                    96:1f:01:9d:13:4d:ae:27:55:a0:32:bc:4b:9a:1a:
                    48:a2:6c:f3:83:09:b6:6a:0e:51:db:5a:19:2f:bc:
                    f2:6e:1c:05:37:5a:9c:b8:c3:38:04:f3:fe:35:58:
                    1a:72:92:e3:54:79:02:05:af:d2:d5:67:df:8b:91:
                    f5:b1:bd:43:34:3a:ed:87:02:c7:98:2d:54:24:0c:
                    75:47:c8:5f:b7:64:a2:d3:de:ab:17:54:80:95:ac:
                    b0:fb:15:02:86:b1:5c:b1:ec:8a:f8:55:b7:c2:a2:
                    3c:0c:80:c6:a0:91:c1:73:e7:43:9b:d1:65:07:0c:
                    7a:95:4c:0d:7d:da:19:1d:19:52:c3:fa:7a:03:81:
                    2a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FC:B9:71:4E:78:87:A7:9B:6A:DB:8A:58:8A:DA:75:F8:6E:E1:2A
            X509v3 Authority Key Identifier:
                keyid:27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ce:43:80:c8:7c:b9:74:8b:03:0c:61:79:df:cb:b3:df:57:
         53:30:81:ad:2a:d0:1a:a9:b0:ef:b0:54:17:e3:aa:b7:3a:da:
         cf:80:46:fa:eb:7d:1b:96:e1:2f:e8:f9:e4:4a:db:03:b0:b8:
         b7:c1:cc:12:1c:04:dd:14:b2:cd:80:d1:0f:27:c0:1e:2d:56:
         de:ce:0b:bf:66:df:3e:92:4b:d1:1f:f9:d5:45:f0:d3:76:97:
         64:14:56:a8:d7:98:b9:88:d0:be:17:25:ec:c7:c6:57:cf:48:
         f0:bf:c4:93:1e:89:8c:a3:3d:ea:f3:2c:0e:55:c7:5f:24:c8:
         87:d3:11:02:34:7f:ec:2d:ba:1b:fb:76:0a:95:32:18:d0:32:
         a5:f0:38:1f:be:fc:17:c0:12:3c:12:41:f6:41:9b:b0:3b:3b:
         bd:10:2e:0b:68:17:b6:14:e7:ba:50:36:4a:14:6d:ee:94:91:
         ba:2d:b2:05:1e:22:60:f6:e0:a1:57:07:28:45:fc:39:c2:9d:
         2b:31:bb:32:7d:e8:50:7b:48:af:b9:db:a7:6c:7e:f2:95:74:
         5e:f5:50:fe:e0:23:00:a9:ea:09:65:d9:b0:08:18:6b:6d:76:
         ee:5f:4b:a4:04:a2:56:ac:4d:03:8a:8f:05:b1:30:63:e1:89:
         ca:ce:cf:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----