Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
File:                     J-lCeLPhkBhjrdYde98tJzzxNAw.mft (raw, json)
Hash identifier:          FysLPaMRr/4ZgxPEyhlh7BS8VKo5lcTM3oYH9O6ymmQ=
Subject key identifier:   D1:B6:FC:57:2F:96:9D:0D:D3:02:A7:E0:F3:A6:63:81:DA:88:2F:60
Authority key identifier: 27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C
Certificate issuer:       /CN=27e94278b3e1901863add61d7bdf2d273cf1340c
Certificate serial:       01962E99316E2F86224C4166BE0228DB8134
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: 7oIgDgDNpX6XAW4lQ5qq69olmro.roa (hash: 3Y/w0AZ9JHVMQciRUgte6R4EVpLThqmwyOoyqP/qwcw=)
                          2: J-lCeLPhkBhjrdYde98tJzzxNAw.crl (hash: dQIz4TU+Y2yooFRT/xicHvQ/bB9NiQUP7OOQan7L1IM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:31:6e:2f:86:22:4c:41:66:be:02:28:db:81:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27e94278b3e1901863add61d7bdf2d273cf1340c
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=d1b6fc572f969d0dd302a7e0f3a66381da882f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2d:f8:11:02:3a:67:7b:04:4c:66:89:5f:1c:
                    a3:aa:ce:44:68:52:8e:a4:10:bb:ac:3c:7a:4c:2d:
                    23:ad:23:0a:b7:06:b5:84:78:9e:69:33:20:87:65:
                    01:3f:d8:a0:27:a9:ad:d4:8d:c3:94:3b:20:31:f5:
                    8e:38:f1:fe:0c:ff:53:35:7f:05:b9:6e:03:0c:92:
                    e2:67:bd:d1:2b:08:b2:0d:d8:14:e4:79:b0:fd:72:
                    e3:f7:22:be:7a:31:21:55:52:c1:4c:25:c3:e4:f1:
                    f7:b7:f2:cc:44:04:c4:d6:60:41:ee:18:a4:93:fc:
                    68:8c:75:1c:d2:b8:cd:b3:c8:2a:31:05:dc:45:e2:
                    2f:87:07:15:78:90:18:ea:a3:ce:c9:10:09:db:3f:
                    31:9f:88:32:e2:20:38:c9:5a:eb:33:9e:78:a4:ad:
                    b5:84:99:f0:f8:09:f3:42:a3:37:3f:35:74:3f:e5:
                    b9:82:90:cf:00:e0:92:98:ae:8c:e1:86:9f:6b:71:
                    d4:d7:69:f3:26:64:2b:85:5f:81:b0:d9:f1:3e:1d:
                    d8:20:52:13:1f:f1:d4:22:05:d4:72:54:95:91:19:
                    12:df:79:98:62:61:2e:4e:a7:c3:76:bd:23:fd:81:
                    14:b2:19:48:06:a3:d1:1c:41:34:28:fd:ec:c1:94:
                    a0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B6:FC:57:2F:96:9D:0D:D3:02:A7:E0:F3:A6:63:81:DA:88:2F:60
            X509v3 Authority Key Identifier:
                keyid:27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:8e:64:51:93:64:36:49:73:d0:d7:de:cd:ad:af:c8:14:4e:
         ba:eb:67:9c:92:c8:6d:16:e5:36:d7:1e:1e:78:bc:95:25:89:
         40:97:9a:2a:9c:10:d0:02:3c:cd:d0:e3:7b:c0:ec:7a:68:2a:
         87:36:5c:74:9c:73:bb:bc:88:4e:9b:47:29:06:71:fb:8d:7d:
         a1:1e:a7:f1:e6:e8:c0:ff:5a:72:9f:e1:0f:88:67:f9:4c:92:
         98:11:c9:3c:ec:6f:88:86:23:b9:35:8c:b3:8b:2a:4a:e7:0e:
         25:66:11:0f:83:28:1c:55:5f:78:b7:da:f4:3f:5c:40:25:92:
         cd:b4:b5:95:7a:28:72:c9:9a:e2:17:c4:91:d7:f8:41:15:05:
         76:b7:19:57:88:d4:ce:2e:8b:8c:89:3e:65:4a:28:05:18:8a:
         d7:46:95:39:be:5c:d2:0e:b0:9e:69:4f:4f:36:6b:84:94:2e:
         8c:08:90:57:10:27:ba:70:58:5e:b8:cd:4b:11:88:cb:94:a4:
         dd:be:8c:59:cb:30:9a:62:0e:8b:c9:ad:5b:96:e7:18:3e:9e:
         cd:3e:53:21:08:6f:8d:26:74:ba:27:d6:7d:c6:b8:8c:5a:0a:
         ee:14:5b:a3:0f:46:77:52:84:f0:c9:f8:55:5c:78:aa:07:98:
         1a:05:18:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----