Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
File:                     J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft (raw, json)
Hash identifier:          xk7ijcYJ82ksCwCMDYeN2B4ovAYR/t7OQnXZU2DzPk4=
Subject key identifier:   5D:4E:8B:F4:70:00:2F:8C:EB:68:AF:78:A6:99:D9:06:27:39:19:C4
Authority key identifier: 27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7
Certificate issuer:       /CN=27f0b737715114ded20f68ef0347d9f752a0e0b7
Certificate serial:       01962E9873D35B83942300D6431DAF13350C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl (hash: iBe9kbeK7g253M+81Gwdw5pGYX55Em+Vf7NjlOs8oLc=)
                          2: rTVHjttPuQQ_1Dt0EA11KAiXgII.roa (hash: 5V1V0+UjdPuxZIazNIUWaVHiDdBin/aDpwXhDP5JcYw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:73:d3:5b:83:94:23:00:d6:43:1d:af:13:35:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f0b737715114ded20f68ef0347d9f752a0e0b7
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=5d4e8bf470002f8ceb68af78a699d906273919c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8d:cf:d1:8d:5e:6a:34:00:b9:06:dc:7b:1a:
                    58:e7:6d:a9:3a:15:ba:d8:d1:2e:e4:ec:8e:63:35:
                    d4:4b:a0:9b:d4:9a:fa:d0:a8:62:78:18:8b:6a:22:
                    e2:97:7c:d3:99:13:dd:36:07:e2:c8:a2:f6:8b:5c:
                    42:c4:79:a7:3c:b7:38:b1:ba:47:21:22:cf:3f:c9:
                    bc:de:ab:56:c3:00:a5:83:81:69:12:32:0e:6e:a4:
                    b5:51:87:83:82:b3:d1:59:8e:ce:57:cb:bf:66:88:
                    ba:68:00:e7:c4:38:4f:9b:68:48:c6:6f:8f:ba:a7:
                    27:5f:c5:b4:c8:74:8c:f3:1b:d6:8e:73:7c:a3:53:
                    99:97:37:23:10:3a:30:50:0a:ee:cb:49:3d:04:5b:
                    1f:01:16:a8:4c:80:16:8b:fc:71:5c:60:79:c2:25:
                    ad:e0:fa:96:a5:f6:15:8a:8e:35:87:8d:23:9e:7c:
                    0b:0f:a1:d1:44:45:5c:f3:3c:dc:1d:7b:35:1e:20:
                    d3:af:8a:ae:35:58:01:73:41:04:ea:04:ac:58:3a:
                    7c:f5:3a:51:e8:cd:7d:70:eb:ad:62:37:79:30:10:
                    13:f1:7b:8c:8d:d5:18:2c:e7:75:37:17:0a:7d:e3:
                    2e:05:80:ec:4e:10:14:48:15:97:92:cb:96:dc:f9:
                    1e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4E:8B:F4:70:00:2F:8C:EB:68:AF:78:A6:99:D9:06:27:39:19:C4
            X509v3 Authority Key Identifier:
                keyid:27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:19:af:24:91:fb:a6:17:8f:05:b2:47:3c:4f:d4:2a:06:35:
         52:b2:d3:64:1d:f7:ca:63:99:47:53:32:03:8e:27:69:35:1a:
         a4:c2:11:28:cd:ea:35:55:7f:1e:a0:cc:85:29:f5:2b:f3:1a:
         81:ef:0f:e2:df:01:1c:3e:fb:69:96:5b:a9:bc:44:ed:82:01:
         da:8c:00:87:99:0a:2f:24:31:31:0e:81:e7:fe:59:00:e6:30:
         47:75:2f:96:8a:4b:5f:93:ba:60:ad:09:28:07:4a:a4:03:47:
         2f:94:cc:f4:65:df:0d:87:a5:54:b9:df:6e:97:95:51:39:4a:
         d4:72:0e:4e:e8:cd:ed:81:76:c2:6b:2b:41:65:ea:21:99:73:
         c4:fc:ab:8a:be:e6:6b:91:c5:12:34:de:20:25:dc:2b:75:cc:
         a8:9a:39:00:63:b8:8f:31:c5:26:d8:30:59:96:52:87:da:8e:
         e8:a4:3a:4a:78:3d:37:c0:52:66:b1:02:a0:af:4f:7b:c5:c5:
         4e:75:8f:10:33:ce:14:24:84:a5:5c:5e:a9:40:12:84:2d:66:
         f9:11:e2:d4:01:9e:62:d4:17:b6:fb:68:e2:28:e6:f2:ac:90:
         63:42:8c:86:4d:44:4e:22:4d:f4:81:71:aa:94:0e:e2:10:97:
         ac:8e:50:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----