Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
File:                     1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft (raw, json)
Hash identifier:          VKefO01KqXsVoUqGjXHHVDFxRWa5edAe7QJz1BpYP/w=
Subject key identifier:   D0:1B:C2:0C:CD:40:89:68:3D:73:A9:69:6D:6F:DC:15:40:D1:BC:2C
Authority key identifier: FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
Certificate issuer:       /CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Certificate serial:       01962DF44D8DA03FE2340DFE0108A87E7F78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
Manifest number:          D0
Signing time:             Sun 13 Apr 2025 07:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:47 +0000
Files and hashes:         1: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl (hash: QUhRdsK54Dth82+ZOLRLr9RszC7gwM7w1lbWJNy8F8U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4d:8d:a0:3f:e2:34:0d:fe:01:08:a8:7e:7f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
        Validity
            Not Before: Apr 13 07:01:47 2025 GMT
            Not After : Apr 14 07:01:47 2025 GMT
        Subject: CN=d01bc20ccd4089683d73a9696d6fdc1540d1bc2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c0:70:cf:18:31:17:d3:b2:23:ae:8a:ba:4b:
                    38:76:a4:8a:61:a0:ec:d3:54:fa:66:64:12:b1:49:
                    f0:3d:20:cb:a7:ca:d4:b6:27:2b:27:5f:5d:9e:f1:
                    f8:b5:24:8c:c3:e6:49:e8:17:21:29:54:17:ea:b0:
                    f9:a4:cc:d7:b8:9b:52:4d:fb:5b:60:23:a2:6f:aa:
                    08:7d:06:11:69:a1:e4:70:de:01:57:91:3a:f8:8c:
                    a4:0d:12:79:d7:bf:c2:4c:6b:e1:6d:ea:82:51:a9:
                    0f:20:8c:77:c7:2c:ce:6c:93:73:6b:f5:38:cb:32:
                    f8:e3:c0:f1:c2:4f:d4:cc:fc:11:2f:49:e4:e2:9f:
                    61:af:f4:19:ce:e1:fa:09:c9:2c:50:41:ef:68:0c:
                    71:c2:b6:dd:ef:2f:88:bd:99:64:1b:67:24:5f:55:
                    6a:b4:67:a3:6a:ef:68:aa:7d:b7:e9:7d:83:81:73:
                    37:c8:3c:27:cb:04:ce:8f:53:36:bd:37:34:1c:41:
                    ac:2b:90:43:86:9c:b2:df:cb:d8:32:32:f6:ed:76:
                    6b:23:c6:3d:a3:3f:37:d1:13:2e:13:05:c4:6a:56:
                    81:95:27:4d:bb:59:fc:92:af:02:b3:e4:18:21:a7:
                    f5:65:9a:05:a6:24:c6:20:4b:1f:38:8c:72:5a:02:
                    46:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1B:C2:0C:CD:40:89:68:3D:73:A9:69:6D:6F:DC:15:40:D1:BC:2C
            X509v3 Authority Key Identifier:
                keyid:FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:b6:87:24:cd:e5:9a:1a:ec:c4:74:18:56:57:b6:ba:03:85:
         4b:8e:71:7c:29:2c:37:a8:47:cf:a0:ac:63:3b:ae:a2:da:34:
         8f:0d:58:4a:4d:aa:9e:0e:aa:6d:46:bb:0b:d1:84:10:e4:fb:
         a8:5b:4f:7b:c1:ba:f3:9d:29:dc:c3:ea:33:4a:70:9c:21:11:
         d7:ea:54:fe:22:45:50:e9:c1:bb:3c:00:80:c1:8c:f3:bd:ca:
         ed:ad:99:fc:17:bd:55:bc:65:05:05:2b:90:c7:af:28:8e:bc:
         e0:0a:6b:02:27:a6:13:1b:e8:d8:40:8e:1e:c4:19:5e:d0:ff:
         ca:9b:89:bf:c5:2c:36:e3:52:39:60:a2:37:d2:9b:e3:dd:6a:
         69:05:07:20:47:11:6d:bc:e5:44:d5:ae:3a:83:14:6d:5d:92:
         5c:06:e8:ee:8e:0f:97:48:00:2f:de:d3:9e:47:1e:28:71:0d:
         02:22:a4:3d:f6:56:c2:49:de:6c:d6:a1:09:7c:66:65:c4:14:
         a6:1f:2d:51:d9:7d:bc:93:0b:51:fb:ba:7c:eb:f9:74:4d:d0:
         8c:2e:65:33:2d:2d:d8:10:92:51:8f:5d:75:87:8c:fb:db:8e:
         98:18:01:e4:ae:ce:06:19:aa:ac:ca:e0:ed:4d:4f:23:91:27:
         3e:33:31:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----