Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
File:                     jXIJqeqB_vMrGFNMHRHtoymZcO8.mft (raw, json)
Hash identifier:          WZ+/WLQTILKLoQeFhaWRaPskGs47qjI3sSMrTdFqWGI=
Subject key identifier:   75:49:62:75:C9:5E:F1:4A:72:C9:BD:50:32:94:5A:19:94:A3:AF:9A
Authority key identifier: 8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF
Certificate issuer:       /CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
Certificate serial:       01962E9973ADCABDF20AB887D36FE9F331C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
Manifest number:          0A92
Signing time:             Sun 13 Apr 2025 10:02:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:10 +0000
Files and hashes:         1: jXIJqeqB_vMrGFNMHRHtoymZcO8.crl (hash: PTg/yp1xbLSzmnqTQtFirLDqYLg5WMCaa95TmGqZ4kM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:73:ad:ca:bd:f2:0a:b8:87:d3:6f:e9:f3:31:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
        Validity
            Not Before: Apr 13 10:02:10 2025 GMT
            Not After : Apr 14 10:02:10 2025 GMT
        Subject: CN=75496275c95ef14a72c9bd5032945a1994a3af9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e6:29:87:45:28:e0:fd:aa:67:1e:9e:46:36:
                    85:92:52:03:e3:ad:27:c8:d9:c0:0c:94:1d:92:9e:
                    61:9e:51:cb:5a:9c:89:7a:01:c8:fd:33:bb:15:da:
                    10:18:6c:d1:47:a3:6e:35:6c:c4:f2:b0:63:89:5c:
                    f8:7c:88:e6:f1:2d:3f:cb:00:c0:6b:8d:a7:93:dc:
                    f6:4f:e1:ed:c5:6f:a4:a9:9a:2f:6b:ff:ea:8c:5d:
                    04:18:7d:c3:ca:a8:ee:2a:5b:a2:fb:43:34:2f:76:
                    88:59:94:ed:dc:da:74:fd:62:37:06:fe:02:37:23:
                    f8:d7:66:b7:e3:d9:95:62:00:09:2d:c2:fd:88:d7:
                    28:41:0f:7c:be:a9:85:bc:e0:51:05:f3:2e:6c:30:
                    f5:89:ce:7d:0f:6e:75:e1:dd:35:03:65:9c:51:56:
                    d5:76:d8:89:7e:6a:6a:fb:76:bd:f5:79:44:84:85:
                    20:09:d1:a5:2c:19:e0:6b:c0:76:b2:f9:7a:40:fe:
                    85:d6:92:d7:17:4d:1f:37:fd:d1:63:28:40:0b:88:
                    c9:9e:88:10:33:58:5a:ac:48:e3:5d:05:05:d6:de:
                    81:cb:11:ab:61:61:58:98:a2:d8:c6:7f:8a:28:bd:
                    42:a0:6b:45:aa:85:4a:0b:99:cb:0a:c5:9d:ac:a2:
                    b9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:49:62:75:C9:5E:F1:4A:72:C9:BD:50:32:94:5A:19:94:A3:AF:9A
            X509v3 Authority Key Identifier:
                keyid:8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:87:a1:c9:48:89:74:bc:55:14:60:77:97:a4:cf:da:d9:5e:
         a2:ce:a9:bc:47:c8:90:90:70:10:e4:9f:7e:4d:8a:d2:6a:94:
         41:65:0f:80:93:22:01:6e:f6:24:9f:1a:0b:18:a1:20:b9:c9:
         61:9f:89:ac:6a:d8:9a:3b:f9:25:ea:e4:fe:e5:1b:38:99:21:
         cb:3b:5b:d0:a4:f0:70:78:e0:58:01:9f:74:d9:b2:fe:aa:f5:
         b7:41:48:ed:b5:6f:72:9e:b5:64:e8:94:75:ce:25:a6:76:3e:
         76:60:cb:3b:f3:3b:93:90:1a:b6:64:43:98:70:19:20:1a:d5:
         9e:0f:15:fb:db:ce:bd:28:40:2d:cd:33:91:e5:4e:15:9f:ee:
         f1:bb:8b:e2:c2:6c:be:5c:5e:7c:d1:51:6b:c5:05:68:11:97:
         90:b7:de:b8:58:2f:04:64:53:b1:85:bd:ac:81:40:25:f9:72:
         82:50:56:70:e8:01:d0:19:e9:c8:92:b1:8d:cb:bf:4c:fd:61:
         ef:74:be:1b:dd:16:bc:2f:97:86:a8:86:50:18:44:50:d8:51:
         a3:6a:2a:9f:df:5d:5d:46:69:f1:9b:09:ae:d1:48:53:78:88:
         1d:e5:e6:d7:57:75:44:4d:ab:26:8f:73:6b:4b:70:1e:03:40:
         78:21:ee:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----