Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
File:                     J9ivflbIDRjclo9NvOyBP4XqMKQ.mft (raw, json)
Hash identifier:          imL+4CCaBMJ4g1jko5cf5+KAAGHTraWL7GRn+2UV7nk=
Subject key identifier:   A3:EB:30:62:57:F0:DE:6F:6D:7C:6E:5E:80:BA:34:67:26:5A:54:52
Authority key identifier: 27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
Certificate issuer:       /CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Certificate serial:       01962ECFC85FF9AD60FDB4B2D3EA163C988B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
Manifest number:          0CA8
Signing time:             Sun 13 Apr 2025 11:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:31 +0000
Files and hashes:         1: EfwLikTBq1BQAGfNQNV1E8qGDAc.roa (hash: yRt0hCbp/cepFk2zNBBsY1KquLoFtQD0MeEg7vy0YTA=)
                          2: J9ivflbIDRjclo9NvOyBP4XqMKQ.crl (hash: xM3u+WiUcbRFa1lVz6VSp1kj9elaX18UP6TY5/aj174=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c8:5f:f9:ad:60:fd:b4:b2:d3:ea:16:3c:98:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
        Validity
            Not Before: Apr 13 11:01:31 2025 GMT
            Not After : Apr 14 11:01:31 2025 GMT
        Subject: CN=a3eb306257f0de6f6d7c6e5e80ba3467265a5452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f4:bc:2c:fc:64:2e:fd:68:0f:6a:bd:9a:83:
                    4b:fd:0a:47:80:23:b9:3a:99:d4:55:8a:fa:b4:64:
                    3a:df:4b:8f:5b:32:3f:2d:a0:c6:36:b0:29:d0:51:
                    6a:3a:d2:29:42:13:f5:13:0d:f0:19:8e:47:54:67:
                    54:98:05:6c:27:0f:8c:99:4e:e6:67:76:d6:aa:9c:
                    64:33:02:4d:45:4d:7f:5c:f4:82:e5:90:94:ae:a7:
                    2a:18:27:ca:4f:ec:18:21:b6:bc:7d:c0:50:a5:38:
                    6f:c7:c0:09:3c:e2:85:15:5d:76:ce:0e:39:4b:4c:
                    e3:6a:4b:16:20:4d:fc:5b:ff:1c:82:65:7a:57:68:
                    e6:93:24:ac:f4:91:94:d5:35:10:b6:58:bc:59:15:
                    ff:f9:07:f5:75:b6:ee:da:fc:0c:03:fe:53:a4:18:
                    7a:d6:a4:dd:7d:f7:b5:01:10:18:5b:00:c0:2b:7c:
                    10:2a:84:45:f2:80:96:fc:18:66:c6:36:72:7e:ef:
                    6f:17:21:ff:3c:05:4b:d3:53:d5:b0:7d:b1:d4:57:
                    7d:a5:98:a1:b5:37:99:46:f1:f4:ae:3c:48:5f:d0:
                    aa:24:21:e4:16:b5:fd:36:26:cc:72:9e:49:8a:8f:
                    d3:c4:8a:7a:d7:ee:4e:42:56:9a:f3:c7:f6:03:56:
                    6f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EB:30:62:57:F0:DE:6F:6D:7C:6E:5E:80:BA:34:67:26:5A:54:52
            X509v3 Authority Key Identifier:
                keyid:27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:a9:7d:3d:16:25:2c:27:88:05:39:27:46:6d:bf:af:da:65:
         f2:b5:4a:cd:eb:d5:64:cf:ac:ad:dc:e0:0f:2e:63:a9:f7:02:
         68:10:df:26:21:73:b1:9f:48:61:fa:09:de:fb:d5:11:04:6e:
         3c:01:e9:71:d1:f0:85:cf:af:34:e8:fd:dd:41:a5:23:de:f7:
         0b:1d:ad:7c:67:b3:40:b8:23:6f:45:0f:92:44:a8:a1:32:f1:
         4c:f8:cb:03:9e:8a:f7:23:7b:38:34:4e:01:3a:b6:31:7a:58:
         17:11:fe:3c:c7:e6:ec:da:c3:25:63:b2:7e:6a:8b:35:b7:43:
         af:32:3a:79:42:54:84:f2:64:50:e9:de:80:38:55:2b:cc:e4:
         f3:07:d1:e7:8d:4b:72:13:29:68:0b:da:8f:fa:67:8c:ab:33:
         29:37:40:d5:0e:e9:d3:31:be:80:4a:b0:67:76:98:77:fa:9f:
         e8:b0:9c:dd:df:b6:31:90:c2:d6:0c:d6:8a:b5:c0:38:72:db:
         2b:27:ae:a6:75:7d:5b:5c:53:8d:1d:c3:0e:c6:a7:3e:93:fa:
         9a:05:bd:1d:2c:04:9e:c5:de:06:b5:29:e8:af:94:5b:69:82:
         81:42:dd:93:3d:7c:d4:e3:60:54:05:9b:f6:05:89:77:87:9d:
         00:a3:b1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----