Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
File:                     jw6u_3Y07o3-gFSthfihXoR1kRQ.mft (raw, json)
Hash identifier:          LQTo290JPy1NtVOJ8RWCPSRCGqxqKo0rjukILX9ie4Q=
Subject key identifier:   AF:9C:36:77:D2:C8:AD:D5:E3:89:F4:F2:F4:30:3D:67:6B:92:2D:91
Authority key identifier: 8F:0E:AE:FF:76:34:EE:8D:FE:80:54:AD:85:F8:A1:5E:84:75:91:14
Certificate issuer:       /CN=8f0eaeff7634ee8dfe8054ad85f8a15e84759114
Certificate serial:       01962ECF90D2C05D3E49779112DCB7412720
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
Manifest number:          0422
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: jw6u_3Y07o3-gFSthfihXoR1kRQ.crl (hash: KTdsJGV++ZIh5EDZjutgGnlN+GjIJB1/7ce7I4IB0A4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:90:d2:c0:5d:3e:49:77:91:12:dc:b7:41:27:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0eaeff7634ee8dfe8054ad85f8a15e84759114
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=af9c3677d2c8add5e389f4f2f4303d676b922d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ac:6d:c5:28:1a:03:45:c4:5c:32:fa:a6:c3:
                    18:42:31:75:15:4d:f7:36:35:30:0c:df:24:db:5c:
                    bc:fd:4a:37:8c:f0:68:1c:28:4d:1e:a3:d2:ee:04:
                    c4:a3:6c:63:47:43:64:bd:fc:fd:ab:84:21:d1:c6:
                    c3:b5:d1:a4:df:0e:a2:23:75:1d:65:7d:c4:b6:54:
                    8a:e2:84:6a:d0:fa:87:5b:29:4d:67:2a:8d:92:21:
                    b4:2a:8b:da:6b:44:56:86:92:0e:54:ca:4e:4a:c6:
                    40:d5:49:2f:c4:3a:e9:c8:00:87:65:43:67:bc:88:
                    d4:b9:ad:4f:ee:6c:28:32:77:65:3d:41:15:e1:5f:
                    71:ff:ba:b2:76:82:5f:42:2a:d0:ea:f5:70:60:42:
                    f6:79:ea:76:df:40:e6:10:e3:58:50:59:7c:49:87:
                    2e:ef:50:09:69:f1:b6:5c:8e:28:d7:2a:65:d7:f9:
                    41:99:78:08:34:ec:fb:1c:3f:66:ee:dd:e7:65:0f:
                    98:ee:6c:8d:54:52:2f:cf:a8:4a:33:78:19:f9:2a:
                    90:86:b9:eb:a5:c8:dd:7f:fc:87:0e:97:29:cc:0c:
                    a5:8a:89:1e:57:4a:ea:fb:f3:c6:c3:62:8f:a4:4b:
                    88:ee:cb:cc:37:f2:d6:2c:2d:c8:5f:17:f6:6b:37:
                    f5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9C:36:77:D2:C8:AD:D5:E3:89:F4:F2:F4:30:3D:67:6B:92:2D:91
            X509v3 Authority Key Identifier:
                keyid:8F:0E:AE:FF:76:34:EE:8D:FE:80:54:AD:85:F8:A1:5E:84:75:91:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d0:5e:a5:73:79:3e:95:48:ec:ae:30:3c:cb:a2:a0:3b:66:
         27:8d:78:22:ca:96:04:83:19:45:1f:3c:b3:eb:9e:4a:6e:e3:
         63:64:0a:4e:13:88:2a:b8:76:ca:b7:7b:2e:7d:4f:32:91:0a:
         65:99:f1:a2:4d:bd:79:8d:9b:6d:40:af:c4:57:8b:23:6c:e4:
         9f:e4:c5:e7:97:b3:0f:98:e1:b7:78:7b:7f:66:73:16:98:77:
         5d:4d:0d:e7:8c:82:f3:d3:92:74:2f:f1:c4:dc:2a:dd:2e:11:
         1e:87:6f:d0:e7:8e:ea:18:49:f3:c2:d8:86:9d:f1:b5:6b:e9:
         9e:d0:94:a2:b1:21:a8:19:89:e4:15:8a:7d:49:78:5b:c3:17:
         26:3b:e6:18:f5:7e:25:0a:e6:0d:45:4f:59:23:bd:59:26:96:
         c7:3a:78:51:76:f6:b7:f7:ca:01:81:53:ec:46:6d:3a:a6:10:
         37:ed:66:14:8e:c2:24:e6:a5:d9:1b:aa:26:45:0e:f9:d8:92:
         30:3d:e0:b3:91:3e:85:8b:86:49:1d:30:83:b0:43:da:10:4a:
         2c:f9:76:f6:11:94:9e:4f:60:d7:2a:06:a6:f8:b8:b6:ae:e7:
         1f:51:68:36:d3:28:0d:16:4c:3a:7c:be:63:19:de:e9:29:48:
         9f:a8:0b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----