Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
File:                     J9TWlrrbEJTKoV176Gw5pxLg7hI.mft (raw, json)
Hash identifier:          uvHMk+4eRjVXEZwXYKSlk0/N40B3Y8MLAxkL6d1hnVs=
Subject key identifier:   8B:87:5F:27:6E:31:5E:ED:78:EA:7E:F1:A1:6F:E8:E2:40:2C:D5:A4
Authority key identifier: 27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
Certificate issuer:       /CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Certificate serial:       01962F74C8C23AAA6954D50578D46A4C580E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
Manifest number:          1479
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: J9TWlrrbEJTKoV176Gw5pxLg7hI.crl (hash: UjETqlaeqHprbgQy5++Z2OSerBGdfX9cdV8wTQ02Kuc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c8:c2:3a:aa:69:54:d5:05:78:d4:6a:4c:58:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d4d696badb1094caa15d7be86c39a712e0ee12
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=8b875f276e315eed78ea7ef1a16fe8e2402cd5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:66:81:37:9e:49:1d:98:9b:d4:80:50:a9:a9:
                    f0:8e:70:79:cb:19:7c:0a:bb:13:4c:61:b6:d9:e1:
                    b9:a1:ab:4b:39:0f:7c:9b:f0:4f:f4:f2:f5:1a:d5:
                    a7:a4:2a:3e:32:1f:0a:c9:e6:82:7f:fe:a8:ed:f5:
                    1e:76:82:c4:bf:35:1b:43:c5:b3:d0:4b:67:ed:10:
                    26:f9:0e:4b:1c:4d:3d:dd:3e:58:04:68:69:2a:82:
                    29:3f:60:f6:7b:e1:f6:c6:fe:59:c3:2b:b2:1e:a9:
                    42:35:b0:39:a7:fa:f6:ab:52:6b:da:23:dc:e3:6b:
                    bf:4e:d9:9e:dc:cc:b7:2e:a5:c9:99:7a:da:02:e0:
                    2a:f0:99:1b:81:6e:64:4a:7f:bd:4d:1e:9f:e6:b5:
                    58:77:ad:3b:ca:cc:fa:83:10:34:59:69:17:8a:6b:
                    d5:ea:c7:fd:4f:91:c5:98:c1:29:8f:7f:05:c2:9a:
                    cb:02:1f:d9:70:79:b2:03:ac:77:a7:ca:90:4d:e2:
                    47:46:25:35:31:31:b0:12:47:9e:80:b7:07:23:2f:
                    7b:a8:99:32:2a:9a:1e:ef:82:78:fe:b5:76:46:ab:
                    63:2b:3b:b1:d9:1e:8f:e3:09:5e:aa:82:3f:df:8c:
                    23:88:e8:47:db:df:f5:87:ae:82:67:23:4a:44:b5:
                    7f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:87:5F:27:6E:31:5E:ED:78:EA:7E:F1:A1:6F:E8:E2:40:2C:D5:A4
            X509v3 Authority Key Identifier:
                keyid:27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:10:a1:15:e8:94:bb:61:ed:39:55:23:c7:b8:c4:5c:61:e7:
         84:84:48:b9:95:d8:bb:47:c5:f7:5e:df:f7:20:62:af:43:16:
         f3:c7:0e:c2:97:8e:96:47:38:e4:9c:c8:63:5b:f9:53:aa:84:
         6a:5a:54:59:74:0c:a3:67:2a:3b:6a:66:7c:78:3a:a4:58:37:
         2e:9b:df:2f:aa:18:b3:6d:6f:0f:66:6e:b0:3e:6c:f8:8b:38:
         51:30:c3:10:1b:ca:40:7d:11:69:64:cf:1f:f1:a5:dc:28:07:
         dd:02:1b:63:01:bc:e6:86:dd:00:11:31:93:6e:c2:c6:f5:98:
         6e:6e:64:09:40:ec:5b:4b:7f:28:f4:48:63:0c:fb:89:b8:01:
         54:38:de:82:b1:02:79:dd:1a:66:87:a5:5a:77:36:92:de:06:
         7b:60:01:c7:8a:76:b4:c6:a2:7f:f7:8c:08:60:9a:eb:e7:66:
         1a:a5:d3:72:49:8f:2d:90:00:9f:5b:e9:11:dc:fe:6c:8e:eb:
         12:da:4c:c5:b3:2c:b4:c5:ce:f7:5d:1d:6c:f3:13:fc:72:0a:
         f5:7f:dd:71:71:c8:6d:2a:ee:00:2f:f5:ab:f0:20:4f:ed:a6:
         53:21:fc:cc:a3:7f:93:cd:50:44:95:f2:eb:31:0b:97:49:f3:
         14:6e:f2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----