Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft
File:                     JlNDThz2kK0m1HoDs_w1qAKnm1g.mft (raw, json)
Hash identifier:          MswJ3L/ieEOj5qbElIj6OqYVMNQizWA8vLXqOOVUYQY=
Subject key identifier:   79:07:FF:D2:EF:EA:A4:45:21:47:96:96:0E:3D:0C:70:EE:16:C7:BE
Authority key identifier: 26:53:43:4E:1C:F6:90:AD:26:D4:7A:03:B3:FC:35:A8:02:A7:9B:58
Certificate issuer:       /CN=2653434e1cf690ad26d47a03b3fc35a802a79b58
Certificate serial:       01962E992BF46DF3C36A707C5FF35738FE3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft
Manifest number:          07D8
Signing time:             Sun 13 Apr 2025 10:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:52 +0000
Files and hashes:         1: JlNDThz2kK0m1HoDs_w1qAKnm1g.crl (hash: H9Xr8uLqISMb/sbMkYMbMr7nRWKdktdm9EdWBtkWflc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2b:f4:6d:f3:c3:6a:70:7c:5f:f3:57:38:fe:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2653434e1cf690ad26d47a03b3fc35a802a79b58
        Validity
            Not Before: Apr 13 10:01:52 2025 GMT
            Not After : Apr 14 10:01:52 2025 GMT
        Subject: CN=7907ffd2efeaa445214796960e3d0c70ee16c7be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:78:95:82:3e:88:61:e4:8b:2f:24:f1:15:a9:
                    6f:3c:ec:b6:56:c7:cb:93:84:b6:57:b5:67:2a:34:
                    b1:73:2a:b7:6c:4d:88:00:d6:af:c9:88:61:14:b5:
                    eb:88:81:e3:34:95:1b:6b:15:22:45:8f:9c:55:d0:
                    c5:d4:0f:6a:9f:ac:c7:4d:4d:52:97:51:38:75:34:
                    26:7d:12:66:24:0a:6e:9d:b0:60:0c:29:73:f8:52:
                    17:83:26:ac:49:83:98:7c:11:cb:57:2c:6d:d9:af:
                    e6:a6:0e:74:d8:04:db:30:dc:9d:95:ce:d6:cf:50:
                    ed:56:21:51:e1:46:74:ba:72:c9:0e:4e:9f:9d:69:
                    3c:54:7c:69:5f:65:ba:33:6d:ab:1d:65:8a:b6:f3:
                    e3:fd:1a:97:f8:96:27:33:76:ef:b0:fe:94:5e:dd:
                    46:1f:56:48:5f:ae:ef:a1:01:42:a8:3f:96:0b:aa:
                    b3:15:0d:12:e3:e8:05:76:3b:e4:8c:7a:c6:a2:0e:
                    d5:9e:da:df:e1:63:62:1f:99:39:f5:62:6f:a5:1b:
                    57:bd:ec:bb:1e:c5:2d:b2:42:29:ce:ba:3d:d3:75:
                    f8:d9:98:7b:9d:ca:17:d9:3e:90:84:f3:c2:53:fe:
                    3b:2c:65:61:1b:61:da:3a:f8:d0:e6:ce:1d:d7:9f:
                    97:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:07:FF:D2:EF:EA:A4:45:21:47:96:96:0E:3D:0C:70:EE:16:C7:BE
            X509v3 Authority Key Identifier:
                keyid:26:53:43:4E:1C:F6:90:AD:26:D4:7A:03:B3:FC:35:A8:02:A7:9B:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:48:51:65:9c:4a:f5:6d:e1:ae:4f:b6:a2:e3:ec:e8:e4:49:
         54:b3:f7:08:96:92:3c:c4:00:82:4a:de:0b:f5:b1:de:80:c6:
         c1:f2:f3:75:28:9d:b3:e4:2f:ac:89:67:7e:c9:09:c6:b7:9b:
         fd:47:72:2f:1d:af:e7:09:32:e5:29:a8:96:b0:6b:66:1e:7d:
         0f:06:a6:b9:cf:dd:31:f1:a5:1a:e8:07:e4:15:fd:01:0b:f6:
         5c:6e:51:bb:d5:e4:a1:b8:57:2a:5d:b6:2a:8d:f2:76:a7:94:
         dc:18:28:b7:c4:07:a3:c8:0a:a3:b0:a9:f6:80:43:79:c5:33:
         fb:44:90:44:43:9f:eb:c6:bf:ab:ef:81:79:cc:bb:c9:8b:8e:
         03:52:7b:5b:4e:4a:09:05:d1:14:6d:50:fb:e8:da:fc:c5:4c:
         1a:18:1a:83:fa:51:41:44:2c:f4:9c:3b:66:a7:b7:3c:e4:60:
         cc:04:c0:7c:6b:f5:a0:30:5b:58:e1:03:1b:1d:06:16:39:20:
         ac:c6:5b:e2:98:12:d3:75:57:ca:93:91:d3:2b:ae:7d:4f:cd:
         3a:aa:d3:8e:3c:8a:25:c9:0d:fb:e2:01:c8:b5:b3:e8:7d:f8:
         8b:4a:e3:75:eb:17:48:c3:28:96:72:3b:34:7c:49:00:ab:f0:
         ff:49:14:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----