Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
File:                     j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft (raw, json)
Hash identifier:          rD+UB1iAYLkawf/Zh2NxjNjV51iD8ua//0wNJV9grb4=
Subject key identifier:   2C:0D:81:5F:2E:96:0B:F3:25:43:E7:9B:33:02:31:10:45:73:14:FD
Authority key identifier: 8F:49:F4:A4:CD:82:93:44:51:9F:45:2A:3B:0E:1E:66:FE:8D:3E:25
Certificate issuer:       /CN=8f49f4a4cd829344519f452a3b0e1e66fe8d3e25
Certificate serial:       01962F742A06803C83BBDDEF1C77D04AEC25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 14:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:04 +0000
Files and hashes:         1: j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl (hash: xKrkdfjCoDdNVEIdzOxkLwRLIgCo++LM97BUmw+3afg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2a:06:80:3c:83:bb:dd:ef:1c:77:d0:4a:ec:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f49f4a4cd829344519f452a3b0e1e66fe8d3e25
        Validity
            Not Before: Apr 13 14:01:04 2025 GMT
            Not After : Apr 14 14:01:04 2025 GMT
        Subject: CN=2c0d815f2e960bf32543e79b33023110457314fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:99:ff:b9:31:f3:74:c2:05:88:42:75:7b:56:
                    67:48:e2:ab:52:65:ff:02:66:6c:3c:36:0d:e6:14:
                    69:87:c1:c1:6d:44:28:ee:1d:ad:f1:9a:fc:3b:33:
                    6e:75:72:1f:9a:aa:6d:2f:a7:a5:7e:d7:96:19:21:
                    35:4d:a6:1e:38:3e:a5:b9:7b:1f:68:0e:11:89:52:
                    b9:4b:30:1a:03:2f:af:cf:11:81:04:8e:41:b7:67:
                    4d:4c:17:63:0e:2e:29:69:d3:b8:86:d6:59:4c:63:
                    00:0f:8c:a9:3c:b0:a7:b2:3d:6c:df:0d:24:16:fe:
                    f9:37:1c:93:04:33:19:96:15:84:19:b2:b0:c8:94:
                    0d:6e:d7:7c:2c:e0:6c:d4:bc:99:c2:12:55:f4:5e:
                    ac:d9:83:02:49:aa:ee:e5:8b:64:40:11:0f:c0:4b:
                    b8:0a:b5:71:a3:75:b4:2c:ff:81:1f:c1:e1:33:c7:
                    eb:d7:19:40:07:9c:42:7f:4a:6f:18:47:0a:e4:68:
                    4c:d0:54:fe:f4:5d:af:cd:86:e8:12:c0:c6:35:c3:
                    08:70:2f:8e:e8:fa:a7:a0:d0:c3:dc:17:d7:93:79:
                    7c:e4:48:e8:24:94:3c:33:55:ed:e0:69:50:47:92:
                    c6:f0:54:70:fd:64:e6:c6:9d:1f:58:c1:82:a7:70:
                    6f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0D:81:5F:2E:96:0B:F3:25:43:E7:9B:33:02:31:10:45:73:14:FD
            X509v3 Authority Key Identifier:
                keyid:8F:49:F4:A4:CD:82:93:44:51:9F:45:2A:3B:0E:1E:66:FE:8D:3E:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:e9:9c:d6:4d:57:2f:af:89:fe:e9:52:78:77:48:c5:6c:6c:
         65:1e:8f:64:7a:c1:03:eb:b7:05:00:de:79:72:a8:77:4d:6c:
         65:a4:19:e9:b9:86:36:78:7b:8a:f2:4c:da:00:a7:00:07:f5:
         83:4b:fc:5a:73:25:ae:3d:6d:89:03:d1:cb:d7:4b:63:5e:77:
         59:ba:26:46:98:a3:07:96:5c:4a:e3:81:65:22:c1:0a:f5:87:
         57:c1:ac:f7:21:a4:2d:11:58:2e:61:70:e6:66:33:98:59:0d:
         10:a7:7b:f4:17:e2:3b:6b:2a:d2:ac:c0:df:d8:92:1f:62:9b:
         85:e7:55:09:65:d2:ab:5b:53:53:8d:48:4c:77:05:4d:bf:c5:
         d2:bb:9c:d0:85:dc:88:e1:3a:cb:70:ea:ff:45:29:36:50:4a:
         11:98:e0:1c:77:19:55:b5:54:4a:ea:52:74:46:d4:eb:46:4f:
         d0:fe:18:e5:32:05:b5:4d:58:3f:55:0e:52:22:7b:05:de:44:
         ef:e6:c3:be:99:ac:7a:13:01:83:43:9c:44:59:5e:90:85:44:
         90:bc:13:6e:54:8f:32:cf:a5:58:88:ac:b7:06:d9:02:42:e1:
         26:85:27:75:a4:af:97:4d:60:b5:f4:e2:18:8f:47:5a:dc:11:
         2c:95:ab:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----