Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
File:                     Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft (raw, json)
Hash identifier:          H4iHmxRh0gPH55+HrY5mzXkz2xFimbEdW1bYHQMN268=
Subject key identifier:   0A:71:FD:2F:E9:59:55:1E:41:19:8E:A2:84:31:FF:21:DA:35:99:45
Authority key identifier: 27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
Certificate issuer:       /CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Certificate serial:       01962E61FA93DA966B0E0B195F79FA41FB4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
Manifest number:          107C
Signing time:             Sun 13 Apr 2025 09:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:35 +0000
Files and hashes:         1: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl (hash: vX9zi7FfHcxUrYiyLbdo5irWSXkZogH7mKF1wEGeBPw=)
                          2: Y2PRIXlvoLUvaJRI_Do9j4XcqPk.roa (hash: 5PYmU1FMb9SDbJhCU1KiV8VGC7stgGinp2hnu0BY1I0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fa:93:da:96:6b:0e:0b:19:5f:79:fa:41:fb:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
        Validity
            Not Before: Apr 13 09:01:35 2025 GMT
            Not After : Apr 14 09:01:35 2025 GMT
        Subject: CN=0a71fd2fe959551e41198ea28431ff21da359945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:50:03:8e:21:bb:7b:31:76:4f:f6:ed:d3:
                    45:9f:58:fb:e1:32:c5:5c:ae:c8:4e:9e:f1:40:c2:
                    16:16:25:33:7b:e7:08:8e:b5:12:f3:68:8d:26:7f:
                    a6:09:c8:e1:15:9b:2c:94:96:1e:57:8f:3f:0e:03:
                    36:56:40:ee:70:8c:d1:d5:c8:d3:a7:92:b9:4b:e0:
                    b6:e2:37:18:9d:b0:5d:5f:d9:29:8d:ae:93:ef:65:
                    5e:e9:76:14:e6:69:63:58:03:bb:93:2b:9f:bd:af:
                    06:3e:7f:12:92:bf:f4:04:a5:5c:21:28:31:39:db:
                    8d:88:45:9d:7c:7e:9f:d0:3f:a1:39:13:10:ad:9f:
                    41:92:0f:29:3b:87:41:7e:3b:56:87:de:f1:92:52:
                    08:89:67:c1:5d:ac:e9:1a:ef:b5:82:8e:bf:a5:b0:
                    c5:56:61:f8:8b:b7:8e:0e:ad:9b:05:c6:54:80:e9:
                    4c:87:27:fe:ca:28:38:b0:ae:c9:cd:f5:aa:0f:6f:
                    56:f4:97:4a:75:ee:91:63:6c:c9:47:be:b0:3d:77:
                    bc:9d:c0:80:e5:e2:bd:ff:94:2d:1f:e4:f6:5e:20:
                    5f:dc:11:39:0a:fe:f8:5f:0d:32:fd:96:7a:29:2c:
                    04:8a:be:45:ef:1f:0a:64:91:db:86:b7:fa:f3:f4:
                    4b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:71:FD:2F:E9:59:55:1E:41:19:8E:A2:84:31:FF:21:DA:35:99:45
            X509v3 Authority Key Identifier:
                keyid:27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:bb:a1:ae:c6:d8:8c:ef:3d:47:ab:ca:56:7c:55:ad:61:86:
         df:03:dc:dc:99:42:f7:86:ad:6a:51:3b:2d:ef:c6:ed:7f:60:
         4b:2c:a5:68:d4:8b:c6:68:5f:c3:76:11:89:21:d1:37:98:98:
         90:0a:ce:5e:fb:59:ff:8a:b9:6e:74:21:15:13:4e:ff:0b:3a:
         69:d9:f4:d2:9a:23:29:2b:08:3a:59:a1:c8:2f:23:cb:41:b5:
         b3:36:d9:14:ee:b6:a9:ab:23:75:c2:ee:41:bf:a7:54:4e:8e:
         12:9d:7f:dd:b7:a5:93:a5:9a:ba:04:ae:0e:a4:d9:0b:61:3e:
         01:e2:38:1b:b1:49:56:2f:3d:92:a9:f4:d4:18:44:59:c1:40:
         88:b3:53:9f:39:1c:16:c8:8f:62:fb:0a:11:90:a6:b6:64:11:
         4e:32:53:5b:80:d7:ac:f1:84:ce:dd:80:c0:7f:98:cc:e0:fb:
         84:aa:37:8f:7b:3a:ac:a0:0b:20:52:6a:3f:57:de:cc:a5:ef:
         91:d1:f0:f3:64:17:8e:a5:86:ab:1f:87:0c:68:d0:03:21:44:
         f9:cf:cc:37:99:ea:ad:40:01:8a:cb:0a:79:84:5d:64:9d:b5:
         52:e3:5e:95:1f:58:11:cf:85:56:30:4e:ab:cf:0f:1d:3c:23:
         70:16:ae:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----