Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
File:                     JcUDXdNt8HSfTWKZyPy-1hVcARc.mft (raw, json)
Hash identifier:          IowRW76WUIxJcg3bIMiHNX4AdoyVJ7+OJDRrWMzRG60=
Subject key identifier:   40:A7:BA:B6:9B:FB:9C:10:59:59:0D:1F:27:03:8C:15:47:85:2C:4E
Authority key identifier: 25:C5:03:5D:D3:6D:F0:74:9F:4D:62:99:C8:FC:BE:D6:15:5C:01:17
Certificate issuer:       /CN=25c5035dd36df0749f4d6299c8fcbed6155c0117
Certificate serial:       01962E9906FC2EADB30661B0EEBFE1A061F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:42 +0000
Files and hashes:         1: JcUDXdNt8HSfTWKZyPy-1hVcARc.crl (hash: KGIgiHCK4j2XyaEJbD6s/GYLdcljYGa5Qiqln5BKfps=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:06:fc:2e:ad:b3:06:61:b0:ee:bf:e1:a0:61:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25c5035dd36df0749f4d6299c8fcbed6155c0117
        Validity
            Not Before: Apr 13 10:01:42 2025 GMT
            Not After : Apr 14 10:01:42 2025 GMT
        Subject: CN=40a7bab69bfb9c1059590d1f27038c1547852c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e4:47:45:63:07:72:b2:da:79:82:10:5b:d5:
                    b7:40:05:08:7a:6c:2f:45:c7:3b:da:c8:61:d5:7c:
                    36:67:99:1f:79:df:eb:59:c2:75:29:c0:0f:32:a9:
                    c8:6c:3d:55:ef:1f:30:ac:4e:28:cc:00:69:4c:fa:
                    3a:25:d7:d5:54:1e:57:48:2a:57:55:e9:7c:6e:0e:
                    6f:dd:ba:d8:70:98:ef:9d:61:27:ea:43:b5:a6:26:
                    6b:fc:71:c3:c6:18:dd:b9:58:46:cf:e6:8b:aa:05:
                    6a:fc:6d:b5:0c:3d:c5:f9:df:0e:37:db:bd:41:49:
                    5d:67:6b:98:b2:22:09:f8:4a:7d:6f:c5:17:ff:55:
                    c1:b1:8f:36:aa:de:87:a2:40:8c:8e:2c:96:61:b1:
                    f6:7a:d3:bb:8c:59:83:96:06:fa:20:47:ed:3d:d0:
                    7e:09:a5:07:26:e9:c8:f0:07:5a:67:b6:d5:46:10:
                    a3:5c:45:ed:f2:df:44:3d:a8:c7:87:89:9c:1b:d2:
                    c0:b7:ee:d4:dc:3d:d2:2a:a0:12:61:c9:6f:a5:25:
                    17:44:97:cf:96:d9:c7:81:f9:09:bb:fe:c0:1b:77:
                    8e:ba:eb:06:8f:0f:4d:8f:e0:ac:07:13:c8:3b:5a:
                    a8:07:14:29:f6:cf:9d:2d:51:f4:a9:e0:27:79:03:
                    bc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A7:BA:B6:9B:FB:9C:10:59:59:0D:1F:27:03:8C:15:47:85:2C:4E
            X509v3 Authority Key Identifier:
                keyid:25:C5:03:5D:D3:6D:F0:74:9F:4D:62:99:C8:FC:BE:D6:15:5C:01:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:4c:56:72:98:0c:2d:22:88:e4:45:0c:8d:16:72:98:db:b5:
         ad:f4:a6:6e:67:4f:46:73:ec:3f:93:12:11:24:b7:37:7b:7d:
         3f:e8:fb:d6:4b:50:9c:d0:1d:46:9e:74:77:69:57:48:cc:95:
         4d:55:6b:c2:50:37:71:54:90:f9:9c:75:30:f5:66:37:2d:93:
         f8:f0:f0:38:45:b8:e6:a2:9d:ff:6f:0f:cf:33:5f:63:93:bb:
         a8:81:cf:87:8e:7a:d4:bf:07:9e:77:15:50:43:8e:0c:e4:eb:
         bb:b3:c5:64:8a:32:28:e1:25:dc:2a:81:b9:40:3c:38:8b:59:
         75:c6:b0:af:fa:14:89:9b:fe:af:97:d9:80:21:39:54:b1:88:
         a0:cc:ec:ec:e1:70:a9:48:03:14:3d:5b:a8:47:fc:6f:39:9a:
         69:60:20:09:30:aa:b6:63:fe:28:0b:7b:ed:df:e4:48:46:db:
         a3:08:cb:44:4f:d9:94:ea:c6:da:ab:27:0b:64:a3:5d:0a:79:
         e3:51:31:18:1e:1b:2c:f3:24:7b:08:53:ce:27:1a:e9:1f:3b:
         44:9f:6a:7d:f2:d8:9f:92:31:83:6c:41:99:1a:b6:4e:aa:05:
         35:9e:db:10:4e:38:ca:b2:57:03:97:8c:14:39:9f:d2:8e:83:
         76:83:20:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----