Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
File:                     J7ITMhmYnmoy1xFY0IUqUW62958.mft (raw, json)
Hash identifier:          ewPZRiSocLt2QxfTonH+V1y2cJQezo14Uzji0HXNpuI=
Subject key identifier:   DC:3F:1D:D0:29:BC:32:6A:44:39:EB:10:BE:DD:6A:94:24:E6:AD:DA
Authority key identifier: 27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F
Certificate issuer:       /CN=27b2133219989e6a32d71158d0852a516eb6f79f
Certificate serial:       01962E2AC01141D7F4331EB06176C14911AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
Manifest number:          116F
Signing time:             Sun 13 Apr 2025 08:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:15 +0000
Files and hashes:         1: 9yA1BkRviJoFuz4ovXK7z_9dmsQ.roa (hash: TmOG+5LxnyALDVOkw9CXFcKpknkNr7jhmiggKOWlYA0=)
                          2: J7ITMhmYnmoy1xFY0IUqUW62958.crl (hash: 0uuWxYnR1oKWsIcNfuX6Pmo6v7cK7J07dRuj4r8+pc4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c0:11:41:d7:f4:33:1e:b0:61:76:c1:49:11:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b2133219989e6a32d71158d0852a516eb6f79f
        Validity
            Not Before: Apr 13 08:01:15 2025 GMT
            Not After : Apr 14 08:01:15 2025 GMT
        Subject: CN=dc3f1dd029bc326a4439eb10bedd6a9424e6adda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:29:67:b8:44:f7:ce:65:62:7e:a5:46:8f:13:
                    ff:c8:1c:15:b0:2c:62:05:c1:be:4c:37:b5:91:73:
                    83:06:fc:71:42:b4:51:db:52:5c:4a:85:ad:9b:3d:
                    3b:6f:8f:6d:79:eb:87:04:f7:43:a9:53:f2:f7:9a:
                    27:7c:e5:16:d1:be:59:90:3a:c4:e0:03:eb:68:77:
                    40:c2:bf:3d:59:32:50:e1:15:0a:72:50:da:ae:6e:
                    f5:96:23:49:c6:32:b5:1d:55:4a:6f:44:fc:b6:ed:
                    a2:69:11:6a:85:fb:f5:f7:9a:80:03:3f:a6:e5:fb:
                    e5:98:78:b0:b2:97:b1:01:d8:18:2b:e3:0a:1c:de:
                    16:70:b7:12:33:87:75:50:20:80:24:5e:3b:f0:9d:
                    ee:1d:8c:6c:47:18:20:11:8c:79:91:3e:8b:9e:c9:
                    be:1b:cf:df:25:3b:ac:73:0a:46:b6:7b:aa:ad:17:
                    58:ba:66:41:1b:a4:9f:24:24:1d:be:bd:67:e3:80:
                    84:7c:82:d5:06:e1:2f:14:a0:39:b7:1d:d9:ee:63:
                    1f:40:cb:08:75:a2:c3:9c:a9:58:69:c2:b3:7c:5f:
                    d4:5c:2d:b1:6a:f6:ba:7c:63:3c:18:f3:d5:a6:5a:
                    4b:06:27:17:29:5e:f1:62:60:25:6f:23:18:41:04:
                    43:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3F:1D:D0:29:BC:32:6A:44:39:EB:10:BE:DD:6A:94:24:E6:AD:DA
            X509v3 Authority Key Identifier:
                keyid:27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:38:16:a1:13:bd:d6:51:f8:0a:ee:76:e0:b8:0d:8f:9d:55:
         fa:e8:48:e5:ad:56:f7:7a:e7:6d:dd:fc:e8:5b:aa:a6:65:6f:
         36:38:94:7a:40:81:b8:88:39:97:b5:42:ce:6e:2f:ba:44:21:
         24:38:da:3e:30:d2:46:af:d4:08:8d:09:90:be:8f:63:3b:59:
         ba:97:3f:bb:de:90:76:f1:f2:ca:a4:d4:86:33:0a:2d:d5:74:
         12:7a:ed:92:9f:82:78:e0:9e:a0:22:1e:27:a7:de:1f:1a:93:
         17:2f:9c:f9:79:94:4b:9f:ff:58:8b:6f:1a:f7:09:0a:a6:20:
         b8:cf:f2:e5:4f:8d:bc:bc:25:c5:0c:c0:8a:53:13:47:8b:87:
         bc:f0:71:d5:de:25:17:66:a9:ef:1a:7c:47:a4:92:f4:82:94:
         d2:3c:15:04:55:9d:b5:71:4a:2d:ca:c0:c3:d7:02:46:cd:99:
         f7:9a:ae:3c:de:02:67:2f:6e:16:93:a7:27:c8:52:21:d8:fa:
         fa:c4:c8:c7:55:ad:f0:d6:d6:62:43:92:1a:17:06:eb:a1:d2:
         c0:4a:e9:86:31:85:c5:e0:17:37:de:24:8b:9b:7e:e3:0f:f1:
         bf:3c:e1:26:44:0f:34:21:cd:3c:3b:d1:31:da:3f:70:6d:bc:
         15:49:67:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----