Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
File:                     J-cRzjQCblevMpDH3izSHcZx4Pw.mft (raw, json)
Hash identifier:          qdnFvexSq2v9JnC7XHAVUUnNieQsg10pjoFz8aRHHLU=
Subject key identifier:   AA:A8:FE:D6:04:16:E9:71:B2:CF:37:07:C4:A0:9E:26:7C:F6:80:14
Authority key identifier: 27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
Certificate issuer:       /CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Certificate serial:       01962F3D65AE73B116C1D7A71B8EE6E790C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 13:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:14 +0000
Files and hashes:         1: J-cRzjQCblevMpDH3izSHcZx4Pw.crl (hash: Dt5WuvACsZAM2SiQtMv+oF5cKmNguxNaJuaqIgLcfeg=)
                          2: cSxqzHQIFX03E67QT7FwyB0-2wc.roa (hash: ehpsqzEAcx4o5Hfss771kB3qGbR5m4ewO+AFeZ/9pUw=)
                          3: d1pbdA__eUq65yVNaUqfoJfF1gA.roa (hash: GBeDmf/sEIKh081o/6CjC+lT/hastrtkWuFWWekc6pY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:65:ae:73:b1:16:c1:d7:a7:1b:8e:e6:e7:90:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
        Validity
            Not Before: Apr 13 13:01:14 2025 GMT
            Not After : Apr 14 13:01:14 2025 GMT
        Subject: CN=aaa8fed60416e971b2cf3707c4a09e267cf68014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:38:0b:cd:76:dd:99:b7:ad:eb:f0:57:66:c8:
                    8b:37:28:bc:b1:e4:a7:56:56:d7:9f:48:89:9b:d8:
                    aa:22:d6:d5:72:ff:d7:cb:f2:52:b8:68:d8:24:b1:
                    2c:21:88:b8:36:31:d7:c8:ae:54:3a:2f:bb:04:4a:
                    3d:43:ce:02:e2:2d:31:6b:9a:93:2f:c3:b9:28:69:
                    52:2f:a5:0b:94:bc:ab:a3:17:6a:a1:76:7f:47:ab:
                    57:d3:c2:48:6a:93:aa:f5:11:76:a4:7e:5d:2f:03:
                    84:d9:5a:18:9b:8b:fa:0e:ca:a9:55:40:60:aa:e8:
                    48:17:97:94:5a:2e:d9:b7:f3:a8:26:b6:85:58:a3:
                    96:5e:f9:e5:9e:3e:db:d2:4c:ee:a4:df:40:b3:d5:
                    d3:5e:5f:f2:1d:56:8d:f6:76:ce:4c:d9:45:ad:08:
                    10:fa:da:ae:4b:51:b9:ec:1e:8f:ab:b6:4d:0f:8a:
                    38:a9:15:4a:f6:e3:39:55:da:ed:2a:02:8d:bc:1c:
                    27:c1:10:5d:aa:c7:2a:e6:03:b0:01:fa:05:30:0d:
                    7f:7a:5d:96:b5:81:5a:96:39:0b:1f:d7:e7:1d:ad:
                    af:0d:ab:96:75:ad:3a:00:83:16:f7:cd:7d:85:c9:
                    22:6f:7d:49:ce:95:c4:ea:e7:d1:df:05:ed:99:e0:
                    90:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A8:FE:D6:04:16:E9:71:B2:CF:37:07:C4:A0:9E:26:7C:F6:80:14
            X509v3 Authority Key Identifier:
                keyid:27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f8:3c:84:55:3e:00:3f:f8:73:6d:09:02:58:9b:1f:2d:3a:
         72:5f:ef:71:09:d7:bc:10:00:c3:ac:e3:40:47:ba:09:01:a3:
         d9:5e:a2:77:bb:9b:73:76:f5:67:c2:2f:4b:6e:1f:ba:45:b7:
         27:52:38:42:d0:a4:cf:cc:a5:ab:78:4f:6e:99:7e:eb:99:d2:
         aa:6d:db:9d:9b:0b:c2:ac:12:56:44:c3:a3:84:39:b3:9e:ca:
         2c:36:b1:5a:27:90:33:b4:84:d0:0b:f2:40:58:23:06:2f:40:
         07:1f:d3:c1:4c:58:29:89:03:a3:46:c6:14:ea:df:ae:2b:c1:
         00:69:39:9b:48:03:e1:ce:a6:c4:ab:d8:80:1c:18:7b:17:fd:
         83:dc:cb:5a:66:89:2d:f6:b7:f2:da:e6:12:fb:f4:82:47:98:
         83:dc:a3:0b:79:b6:d3:9c:b1:c6:74:6a:97:1e:a1:4d:44:95:
         0a:32:94:e5:7a:08:70:cf:4e:b8:d1:16:15:e9:46:49:05:08:
         61:5a:1b:ff:11:25:68:75:c0:c5:12:9f:d1:76:14:c2:0e:f7:
         95:64:61:60:3a:25:b6:0e:6e:4e:91:15:53:f9:66:71:03:1a:
         14:61:23:09:13:b4:43:69:02:d9:10:79:c3:9f:63:82:02:ab:
         1f:be:61:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----