Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
File:                     JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft (raw, json)
Hash identifier:          RO5/LLhY6Mp5uyAs5hsXgk/nswos8tQZNHY3V4y0K38=
Subject key identifier:   57:7F:D6:DD:4B:12:78:16:D7:E9:6E:3D:35:67:C2:A1:2A:17:54:96
Authority key identifier: 27:33:94:09:45:8C:FC:2B:BC:30:BB:19:AE:E5:06:31:85:5B:75:E6
Certificate issuer:       /CN=27339409458cfc2bbc30bb19aee50631855b75e6
Certificate serial:       01962E98DE69579E299B86995425C095FF07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl (hash: wAiaQMZV/s13HXomnXMXTi3mIwJWnsCyVgPLH5Nc4jA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:de:69:57:9e:29:9b:86:99:54:25:c0:95:ff:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27339409458cfc2bbc30bb19aee50631855b75e6
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=577fd6dd4b127816d7e96e3d3567c2a12a175496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:49:28:40:35:b3:8b:08:3c:a4:53:5f:75:90:
                    8a:d6:d8:b5:a0:7a:3f:ec:16:8a:9e:4f:27:43:ad:
                    65:24:81:a9:a0:14:08:1a:c5:45:a6:6c:34:a8:0c:
                    6b:24:3d:5f:48:5d:c5:05:d1:46:33:ce:5d:fc:bb:
                    c4:24:44:6b:78:cf:cc:bc:da:7f:81:df:73:d4:6b:
                    84:d6:52:39:bd:8b:9e:95:44:74:3e:7b:0e:80:ee:
                    a8:6f:b6:0b:0d:d1:89:3f:7f:a5:cc:2f:d2:c8:18:
                    fd:6f:1b:ae:c8:f6:bc:65:55:0f:ac:b2:a8:13:94:
                    a5:2a:25:21:cc:e0:6d:d0:4d:ae:90:43:31:cb:5c:
                    6e:22:fd:f8:ae:d2:8b:4c:62:7f:32:0a:ef:84:c2:
                    5d:01:d5:a1:47:01:93:01:8f:b5:eb:dd:f2:15:36:
                    8f:59:e3:2b:fc:21:fd:6a:03:86:19:b4:0c:4f:32:
                    98:7d:33:ac:a2:c9:b8:e6:e8:e9:05:ce:34:b2:1c:
                    af:9a:dc:1f:63:12:9b:a3:3b:f9:4d:fe:28:48:4a:
                    b4:4e:bb:1e:b5:c5:db:6c:ef:ba:fd:f0:83:4c:45:
                    af:10:90:2c:02:6c:d9:0f:db:d5:d1:16:ee:71:38:
                    3d:9e:84:64:b6:61:a0:7d:a2:29:f5:ff:0e:44:0c:
                    d0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7F:D6:DD:4B:12:78:16:D7:E9:6E:3D:35:67:C2:A1:2A:17:54:96
            X509v3 Authority Key Identifier:
                keyid:27:33:94:09:45:8C:FC:2B:BC:30:BB:19:AE:E5:06:31:85:5B:75:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ff:65:b9:e8:e4:41:05:a2:c0:77:5c:3e:39:54:ad:31:d5:
         9d:1a:8e:44:f4:7d:1d:9b:1c:0e:a2:a2:17:e4:b6:38:72:51:
         22:87:84:5b:aa:d6:60:d2:f5:d7:eb:9a:0e:7e:75:ef:a9:05:
         5e:bb:89:1a:d3:d2:d8:f6:be:c9:f0:67:64:0f:6a:e7:d5:d7:
         6c:fd:50:09:85:ca:20:38:85:6b:96:2d:82:5c:da:b0:ec:a9:
         2d:9d:75:5e:40:47:0d:29:31:dd:8a:6c:2d:91:29:f8:48:29:
         09:da:30:d9:30:25:09:38:43:8c:f1:25:79:e7:f8:44:07:64:
         50:e9:c4:8a:66:d7:16:e7:8a:9f:c4:50:a2:b2:70:4d:98:44:
         5a:97:e1:c2:60:a9:ce:37:0f:c3:96:ce:e3:a4:52:44:4f:0b:
         f3:4b:67:aa:12:a4:a7:b0:50:c3:98:ac:35:42:6a:d7:79:24:
         6e:53:67:16:26:ab:16:ac:9f:7c:05:7a:61:b0:28:36:55:62:
         41:d8:9d:d8:82:ef:69:b0:96:06:60:e8:68:c6:dc:d7:cf:53:
         2e:4b:d5:a1:86:08:da:60:1d:38:45:58:05:49:fb:56:42:1a:
         1c:3a:ae:e9:36:e0:c8:0e:0d:c5:0b:69:18:68:c0:b1:e1:4a:
         3f:9d:5b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----