Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
File:                     jNspNdndDVhbZVEYdkwBxtdvdMI.mft (raw, json)
Hash identifier:          jlgEunV58glu1CC4A17Nf0tMN5qW8vT0D162aE7EQ20=
Subject key identifier:   3D:79:E4:9C:DD:0B:4B:F4:38:7B:EA:22:43:62:3E:8A:D5:3E:C7:8C
Authority key identifier: 8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2
Certificate issuer:       /CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2
Certificate serial:       01962FAB86E59B6FC211F4DBD7F163A4A157
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
Manifest number:          05F2
Signing time:             Sun 13 Apr 2025 15:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:32 +0000
Files and hashes:         1: jNspNdndDVhbZVEYdkwBxtdvdMI.crl (hash: w/+JJimIPZeMhP/y1KNX3cenkxxmoC0gLjm4WZsD/A0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:86:e5:9b:6f:c2:11:f4:db:d7:f1:63:a4:a1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2
        Validity
            Not Before: Apr 13 15:01:32 2025 GMT
            Not After : Apr 14 15:01:32 2025 GMT
        Subject: CN=3d79e49cdd0b4bf4387bea2243623e8ad53ec78c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f8:cf:49:87:a0:9a:e3:77:17:ac:7f:7a:39:
                    44:42:01:8a:a1:9f:f5:7b:32:e6:f4:dd:ba:cd:9e:
                    12:20:04:fd:42:28:a4:05:9e:88:c9:32:2e:f9:86:
                    0f:70:3c:bf:50:bb:d0:de:a9:2c:d1:ca:88:45:d9:
                    9b:4d:86:25:1c:5e:44:72:34:6c:1c:da:b9:70:14:
                    c8:d2:d7:a2:f9:14:7f:55:c0:b2:b9:36:cc:44:cb:
                    c9:3c:1f:6c:a8:9f:e6:2c:41:1e:a7:4f:85:d5:37:
                    9d:bc:63:6e:e3:39:7d:b9:a4:92:c5:8d:19:30:87:
                    14:55:84:c8:0c:aa:db:f7:b2:e1:94:1e:f4:50:02:
                    17:30:21:d0:22:66:e7:4e:aa:ec:dc:ce:eb:2b:b7:
                    4c:b7:60:be:cd:16:b8:a4:c9:1a:a2:ee:54:fa:de:
                    1f:3c:35:a3:ce:08:95:61:36:06:a4:fb:b8:13:17:
                    0a:4d:cb:d1:58:40:64:46:32:9f:4f:45:59:d3:6b:
                    9b:8e:55:f2:31:d7:09:78:be:81:d7:93:98:b2:df:
                    b5:b7:f0:95:53:00:06:9a:9e:69:e8:bb:3f:29:e6:
                    18:3e:1e:ed:11:cf:30:5d:c6:7a:01:03:99:20:63:
                    55:b2:60:b0:d2:c4:68:9e:2e:6f:44:95:2f:16:57:
                    4f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:79:E4:9C:DD:0B:4B:F4:38:7B:EA:22:43:62:3E:8A:D5:3E:C7:8C
            X509v3 Authority Key Identifier:
                keyid:8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:26:36:be:7f:da:46:1a:28:63:5c:be:fa:3e:49:6f:0c:66:
         8e:e0:c7:50:1f:51:36:b1:7b:be:c1:09:9e:ef:47:c5:b1:79:
         32:da:71:cd:a4:a7:35:0b:a4:a8:e9:21:57:86:36:50:9d:ea:
         1e:cf:66:41:fd:28:34:1b:56:92:1a:4f:cb:d0:a6:b4:7c:58:
         0b:bf:27:b2:41:d4:54:df:a1:24:b8:a4:8e:dd:39:b7:f4:64:
         a4:d4:c7:a2:eb:9f:c5:0a:91:f9:4b:1e:4c:19:1a:cf:37:78:
         a5:68:ef:fa:3b:27:2c:71:8a:00:74:90:82:60:09:aa:66:b1:
         d0:56:67:72:02:37:b7:f9:d7:73:65:46:52:ee:9c:fa:15:a2:
         90:e5:5e:bc:cb:cc:f9:40:42:d3:e2:e8:2a:81:96:ad:19:d6:
         00:8e:5d:2e:16:e5:24:56:ca:bb:2e:a9:84:39:b4:30:5c:bc:
         0a:15:1a:c1:7b:63:21:86:bd:70:48:08:b1:47:7c:5a:27:76:
         0a:32:5e:09:4c:44:4b:23:76:1e:8d:04:ed:fe:f9:8c:18:90:
         a1:cf:d6:a5:4d:d6:23:ea:90:df:94:0e:d3:99:88:ac:a1:91:
         cf:e4:b6:95:df:f4:ab:a3:18:b2:14:98:a6:be:1a:73:13:92:
         ad:dd:97:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----