Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.mft
File:                     JfgKOI5PDiZBTOq-q036hBkdgUA.mft (raw, json)
Hash identifier:          VRb/niFeYuDY9NuiU+9iKM7JxtB9wLjiGHXx04eiuT8=
Subject key identifier:   9A:60:88:2F:A7:89:AB:68:BF:4B:E0:C5:68:02:C5:91:AD:28:03:39
Authority key identifier: 25:F8:0A:38:8E:4F:0E:26:41:4C:EA:BE:AB:4D:FA:84:19:1D:81:40
Certificate issuer:       /CN=25f80a388e4f0e26414ceabeab4dfa84191d8140
Certificate serial:       01962F06A025DA145CB2509104BF9232C0C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JfgKOI5PDiZBTOq-q036hBkdgUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.mft
Manifest number:          13F2
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: JfgKOI5PDiZBTOq-q036hBkdgUA.crl (hash: mxe/ooTktFjRD0/WKg+9UVFpilXRt45V+ELkD2d3Lcw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a0:25:da:14:5c:b2:50:91:04:bf:92:32:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25f80a388e4f0e26414ceabeab4dfa84191d8140
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=9a60882fa789ab68bf4be0c56802c591ad280339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:78:6f:c2:6e:d1:84:f3:59:85:99:32:74:ed:
                    6c:5c:f8:ee:e9:54:94:29:c4:d4:01:a0:a2:3a:68:
                    40:17:9f:b0:c7:e8:a7:0b:fb:d2:d6:89:02:60:59:
                    71:49:fe:1c:fe:17:ce:d6:90:fe:47:5e:68:a7:4a:
                    dd:d8:ba:62:ea:d8:cf:39:53:b1:f0:23:42:04:5a:
                    10:de:a8:f4:03:b8:6a:64:e8:98:90:80:12:63:b4:
                    54:2c:f7:fc:57:7a:81:a2:5e:f6:cc:95:a4:8d:1b:
                    b0:3b:ea:4a:e5:cc:f4:d1:ae:90:18:fa:e7:06:de:
                    b0:84:a7:d8:99:0a:bc:c5:2d:20:47:9e:8f:34:b8:
                    18:c1:3b:db:4f:d7:a9:39:2f:3e:64:b2:3b:0a:44:
                    bc:0e:62:df:47:21:ec:43:26:c0:d0:af:96:b1:7c:
                    c1:3d:6c:80:9c:a6:c3:d8:12:31:f2:91:f7:3c:be:
                    f5:57:87:0d:66:63:a0:6b:9b:ef:ae:98:0e:6e:21:
                    2e:52:7c:0c:9a:97:ad:c0:3d:c4:d4:98:ca:bc:c5:
                    aa:9d:9d:a8:c4:22:13:71:bb:a1:20:75:24:14:28:
                    0f:2f:f6:cd:88:36:2c:c5:e1:4b:55:ee:f3:03:b8:
                    37:43:bf:d5:30:ee:09:90:8f:56:00:3a:92:9c:93:
                    ca:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:60:88:2F:A7:89:AB:68:BF:4B:E0:C5:68:02:C5:91:AD:28:03:39
            X509v3 Authority Key Identifier:
                keyid:25:F8:0A:38:8E:4F:0E:26:41:4C:EA:BE:AB:4D:FA:84:19:1D:81:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfgKOI5PDiZBTOq-q036hBkdgUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ec:28:e7:35:a5:8d:5b:91:60:17:6f:65:b6:c1:7f:51:6c:
         b3:a3:48:df:36:a3:c9:11:1a:44:55:cd:41:b9:63:ce:9a:6c:
         92:88:34:76:84:2f:67:d8:24:21:b2:2f:a9:3c:cd:8f:11:1b:
         00:7b:36:aa:8e:ae:22:9a:0f:b7:b5:e2:30:2f:45:db:31:3f:
         a1:48:34:9a:dd:a7:48:67:0a:0f:17:84:41:fc:13:cf:76:2a:
         8e:d7:e2:5e:9b:70:a8:e2:a8:04:5e:0c:95:15:c2:db:b7:28:
         8a:50:27:2e:2d:3a:a4:93:3d:a1:bb:03:0e:75:a2:9a:70:4c:
         c3:5a:a4:b0:34:50:98:9a:7a:76:0e:2f:70:11:6a:92:60:f9:
         76:43:26:87:30:a2:b3:aa:27:6e:67:32:1c:11:62:f1:c7:90:
         94:84:ee:17:0c:23:a4:6d:53:96:3d:7f:b3:94:5e:d3:4d:e2:
         21:f6:89:a5:6b:6c:bc:5e:fb:9a:16:08:85:70:0b:eb:90:fc:
         ad:a2:6d:ab:af:ae:f8:89:99:ae:22:9e:52:35:ac:37:a0:2c:
         df:09:33:ed:14:1c:cf:2e:39:06:d4:b6:eb:44:a4:3e:9f:50:
         93:41:3f:59:a7:6d:58:4b:5e:b0:4a:b9:5e:a2:f9:89:7e:eb:
         18:e1:38:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----