Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.mft
File:                     J24TUlJErw0uZAq6KbD4I2vGHiA.mft (raw, json)
Hash identifier:          biKoLWzxWG2fgPtP4bct+gQi70RTKdPqqSqP1lyzIfs=
Subject key identifier:   64:EA:D2:49:74:87:35:B1:D9:D6:51:77:7E:CD:B4:3E:7F:39:BC:28
Authority key identifier: 27:6E:13:52:52:44:AF:0D:2E:64:0A:BA:29:B0:F8:23:6B:C6:1E:20
Certificate issuer:       /CN=276e13525244af0d2e640aba29b0f8236bc61e20
Certificate serial:       01962ECFBE18656E727F408C1FC6224D08D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J24TUlJErw0uZAq6KbD4I2vGHiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.mft
Manifest number:          017B
Signing time:             Sun 13 Apr 2025 11:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:28 +0000
Files and hashes:         1: 8EWOooLiQ6us4fENFVrBmODvGtQ.roa (hash: FtJlQkbOynrL0gMJhRO31RjYSiNA8vkfsMUi3PW0gdU=)
                          2: J24TUlJErw0uZAq6KbD4I2vGHiA.crl (hash: FqK50EJOEXOqqPcpapkDdueYRXHmjvd3NXge9Vr6nHs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:be:18:65:6e:72:7f:40:8c:1f:c6:22:4d:08:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=276e13525244af0d2e640aba29b0f8236bc61e20
        Validity
            Not Before: Apr 13 11:01:28 2025 GMT
            Not After : Apr 14 11:01:28 2025 GMT
        Subject: CN=64ead249748735b1d9d651777ecdb43e7f39bc28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d2:30:6d:dc:f1:69:de:3f:87:db:1a:6c:03:
                    ea:3b:3f:ba:f1:67:4b:e3:b3:ce:f3:e1:3e:61:50:
                    6e:60:7f:84:b5:f5:1e:f1:18:49:c8:fc:a7:bf:0d:
                    87:ed:47:df:1f:a3:0b:47:1e:5e:bb:e4:a2:76:fa:
                    e2:f7:0e:72:a3:82:72:27:26:89:67:3e:8f:51:ce:
                    51:d3:55:33:44:fc:6d:78:ee:49:0a:da:22:92:97:
                    59:59:ac:15:c3:6c:37:c8:6b:8d:55:f8:d2:c2:ab:
                    7b:c3:e8:7d:5a:0c:55:d7:8d:0f:d6:40:f7:31:e0:
                    6d:90:c2:ff:a0:d7:1e:f3:ff:93:b9:2f:e9:75:67:
                    66:3f:b8:a7:23:11:ab:dc:75:02:48:e8:51:03:0c:
                    be:fa:84:d7:d0:ad:3e:a2:45:fc:b4:f0:1a:55:e7:
                    c5:0d:2c:3b:ff:e0:fd:3a:73:fc:cd:6f:4f:58:e9:
                    cc:04:ec:df:bc:c1:dc:28:b3:8b:4a:77:f4:ca:0e:
                    da:5b:1f:2a:ea:d9:f6:bc:ab:b6:6e:4c:23:14:bc:
                    0a:60:64:6d:bb:17:de:cf:b5:b8:f0:bf:a2:a3:81:
                    4b:92:c8:9d:04:62:c3:b9:36:bf:e3:f7:d9:cf:48:
                    15:69:b9:f4:eb:ff:ed:4b:e5:dc:30:ac:7c:88:fa:
                    9e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:EA:D2:49:74:87:35:B1:D9:D6:51:77:7E:CD:B4:3E:7F:39:BC:28
            X509v3 Authority Key Identifier:
                keyid:27:6E:13:52:52:44:AF:0D:2E:64:0A:BA:29:B0:F8:23:6B:C6:1E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J24TUlJErw0uZAq6KbD4I2vGHiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f5:50:75:e1:97:95:f4:f2:71:05:aa:62:68:fb:d1:0c:1e:39:
         d0:1e:eb:6d:6e:b5:90:38:8f:92:00:6b:de:01:f0:b5:1a:f5:
         13:25:b0:60:3d:d8:8c:64:9d:84:20:86:d2:67:96:46:cd:c4:
         e5:c9:fc:96:eb:b2:98:1f:3f:4d:07:c0:85:3a:5b:8e:f4:a5:
         16:cc:90:06:52:2b:af:96:fc:07:fe:7a:36:9d:91:81:61:13:
         b9:c0:61:ef:57:0b:71:91:a5:03:d8:53:54:cc:5f:78:4f:e4:
         2d:aa:4b:d0:85:29:d6:da:e9:e0:58:46:44:77:5e:6e:7e:d7:
         74:a7:3b:dd:dd:f9:b5:ea:38:ee:f4:33:ae:b2:61:27:5e:69:
         85:4b:b7:c2:ad:22:15:84:1b:5b:eb:71:96:f1:c3:c4:bd:de:
         d1:18:d1:15:95:c0:d8:24:49:d9:95:f8:fc:16:19:e8:20:3d:
         40:30:0d:99:23:6a:fb:19:70:39:80:f6:a5:d2:a6:4a:db:43:
         b5:a1:7a:35:e3:5c:14:63:26:c4:7d:ab:36:ba:63:45:4c:c5:
         75:3b:58:9f:79:c7:52:43:0e:96:3d:d3:bd:4c:cf:38:66:e5:
         4e:44:37:3e:a6:34:3e:59:05:f5:ed:3a:f9:ea:26:6e:a6:91:
         74:67:20:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----