Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft
File:                     JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft (raw, json)
Hash identifier:          V/ggUCF6ae7cB6fVvCEownHxp4JedcnR1N2Yg5ptSCs=
Subject key identifier:   A0:86:D9:7B:D4:8C:4B:04:7D:89:C0:79:AB:33:64:F9:AD:77:B6:22
Authority key identifier: 24:87:BB:AA:02:2C:39:9F:DD:C4:35:1B:B2:E0:AF:A0:98:5A:58:35
Certificate issuer:       /CN=2487bbaa022c399fddc4351bb2e0afa0985a5835
Certificate serial:       01962DF423A96A9C48610A4BF28A340547A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft
Manifest number:          0680
Signing time:             Sun 13 Apr 2025 07:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:36 +0000
Files and hashes:         1: JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl (hash: 7IekODyuEoNLzKMGMbOQPl03rE03fQzOj+z3tZTos7Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:23:a9:6a:9c:48:61:0a:4b:f2:8a:34:05:47:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2487bbaa022c399fddc4351bb2e0afa0985a5835
        Validity
            Not Before: Apr 13 07:01:36 2025 GMT
            Not After : Apr 14 07:01:36 2025 GMT
        Subject: CN=a086d97bd48c4b047d89c079ab3364f9ad77b622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1a:4e:83:d7:d0:52:59:b2:56:38:ca:d0:27:
                    c6:eb:e0:c5:ad:9e:3e:23:03:15:37:68:5a:eb:d3:
                    f4:af:d5:e2:31:8a:8f:6a:bd:7b:24:7e:19:b5:f0:
                    4f:e6:6d:e8:96:8e:c9:b3:7d:bb:b2:2b:a9:54:05:
                    66:82:4b:41:71:34:b4:6c:c3:8f:22:70:5c:d9:fa:
                    59:1e:1d:ab:b5:f4:45:66:0e:5f:cd:0c:a8:cf:c7:
                    68:34:6a:47:47:6a:6a:bb:dd:ef:64:d4:68:1d:ee:
                    ad:50:fc:da:d6:f9:d6:32:14:ed:e3:8d:1b:96:42:
                    fb:f6:d6:3e:34:01:22:dd:21:ac:9e:ae:10:19:5f:
                    d4:de:53:66:2f:04:41:4b:ec:ba:f8:bd:6d:39:c9:
                    e3:96:00:43:27:e0:c0:62:82:5b:5b:69:23:be:7a:
                    13:30:c4:f8:08:14:fb:9f:17:3f:6f:06:2d:9f:b5:
                    ad:96:4c:0f:1c:a7:ad:05:98:2d:5a:9a:e1:f7:79:
                    c8:c0:c1:af:f0:a0:b7:be:20:2c:37:45:e3:ed:7b:
                    a5:d2:7e:fb:7e:de:1e:e0:52:9d:b1:70:d0:41:cd:
                    43:53:53:32:51:3a:a4:dd:e8:0f:7a:ea:f8:4f:2e:
                    25:74:f1:6f:11:96:de:7e:ca:1a:cf:6f:90:d3:1c:
                    7c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:86:D9:7B:D4:8C:4B:04:7D:89:C0:79:AB:33:64:F9:AD:77:B6:22
            X509v3 Authority Key Identifier:
                keyid:24:87:BB:AA:02:2C:39:9F:DD:C4:35:1B:B2:E0:AF:A0:98:5A:58:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:02:01:37:1c:21:e3:9c:99:36:b3:db:3a:60:a3:ba:80:6a:
         ee:96:f0:84:ea:82:df:bd:b8:55:2c:7d:cf:8e:f1:29:6a:42:
         3c:aa:a8:a9:81:f0:56:ae:30:84:31:d8:29:52:8f:24:7a:e6:
         eb:d7:24:36:55:15:36:13:bd:cf:8d:2d:94:e4:ca:f1:0e:0c:
         05:cd:80:6a:66:f1:4d:c0:d9:8e:a6:fd:c2:87:1e:4c:24:a4:
         90:c7:8c:e7:df:c0:8f:29:f9:11:be:bf:a5:82:7b:13:e6:06:
         c7:4b:f1:60:28:17:cf:f0:f2:4a:d0:68:89:9b:7e:27:d2:88:
         2b:62:f6:d4:60:cc:05:50:f1:bf:5c:d7:f6:8e:f9:9c:d5:14:
         6b:06:f2:d6:dd:28:6c:01:73:7c:aa:54:b9:8b:17:fa:63:b4:
         b4:52:6a:26:97:c4:9c:d5:c6:18:01:db:a2:08:c9:ce:1f:a2:
         a3:ed:1e:cb:09:30:0d:f7:f7:bd:59:e9:1c:c8:45:48:ee:b4:
         99:bb:b7:11:04:4c:26:37:fd:44:5f:56:58:1c:3e:21:f3:01:
         ec:6c:3a:da:47:a8:e5:8b:48:2a:06:8a:79:c0:ff:92:eb:53:
         74:60:65:29:cd:83:79:6c:bc:f6:6c:66:35:3a:a5:c1:2f:62:
         ae:ac:9b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----