Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
File:                     J_lYw7dZsseJb17WY-gHeB8_9aI.mft (raw, json)
Hash identifier:          erUFoNrGmMsqpClLWPxQu6754Vwp+y6PracEaLHVQ2g=
Subject key identifier:   D6:40:8D:24:5E:F3:D0:C7:EA:1A:C1:45:9F:E3:2B:9F:A1:3F:30:2A
Authority key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
Certificate issuer:       /CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Certificate serial:       0194BD17823D8B7D0905EB2E9981505732E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
Manifest number:          0C58
Signing time:             Fri 31 Jan 2025 16:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:21 +0000
Files and hashes:         1: J_lYw7dZsseJb17WY-gHeB8_9aI.crl (hash: WwdBuiwSQ7sgkuqn0rJDEPV9JcniaLaliiKYPE1+SUY=)
                          2: U98Pywp0SW8RSqZF3Ge6Si9krK0.roa (hash: O0xR8BO72Q1293Dodh+ahx0zgwd8SQ9b7GDuhK6uN4w=)
                          3: fonqMENkUurdTSsmls1gVlg_WJ4.roa (hash: BkPWWaoPqGMFHcArMOr28SMuQJKUdO9RrrY9l2uEtM4=)
                          4: hRMqKbI5ZBKlaiDQw_wO9nw88a0.roa (hash: tQTOlSI2XH6rsXW1nhJPPPkXPxhSWEfkvDRnTJEB2Ws=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:82:3d:8b:7d:09:05:eb:2e:99:81:50:57:32:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
        Validity
            Not Before: Jan 31 16:00:21 2025 GMT
            Not After : Feb  1 16:00:21 2025 GMT
        Subject: CN=d6408d245ef3d0c7ea1ac1459fe32b9fa13f302a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:69:99:9b:e3:09:e9:e2:a2:7a:10:55:47:17:
                    e7:be:5a:b3:6f:fa:47:1f:0b:fb:c6:b6:07:73:a5:
                    8d:b4:9d:34:4b:8f:71:64:bb:50:43:2e:c5:70:94:
                    5d:8e:f2:22:3b:a4:32:29:2a:7d:e6:ab:d9:e5:b3:
                    8d:8b:68:17:22:b7:44:45:17:1b:85:f3:3d:ff:0b:
                    ca:31:c9:18:e2:c5:40:45:90:77:09:59:e6:38:40:
                    5f:a0:1e:6a:de:b7:e2:f3:2c:90:40:86:c5:41:b2:
                    f4:87:a7:54:1a:20:75:0a:4e:33:1e:ee:ec:9f:19:
                    42:e8:97:e1:f0:a5:74:29:c4:a6:8e:f6:e4:a8:20:
                    90:47:39:ab:3a:ec:ab:2f:0b:5e:d8:33:de:89:d1:
                    f3:59:fc:43:ae:11:f8:2e:0d:8c:c5:7d:d2:eb:a4:
                    8d:bb:42:be:72:8c:6b:65:9b:9b:d2:62:98:54:a0:
                    5a:42:04:ff:80:ce:a6:97:9c:41:d6:22:fe:b2:46:
                    43:bf:7d:d1:5d:f8:de:90:bd:5f:a3:07:ed:c4:34:
                    a0:20:54:cf:f3:cb:db:a2:ea:92:f9:16:61:40:77:
                    b8:91:24:27:dd:93:d5:99:07:d5:99:39:50:57:a4:
                    ae:da:26:4c:41:17:14:56:52:9e:ce:31:25:69:23:
                    24:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:40:8D:24:5E:F3:D0:C7:EA:1A:C1:45:9F:E3:2B:9F:A1:3F:30:2A
            X509v3 Authority Key Identifier:
                keyid:27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e7:64:d8:a9:17:7a:6f:b1:db:10:d7:9d:33:23:4c:34:d4:
         62:1b:19:49:22:9b:fa:0f:b2:82:53:31:dd:c5:13:27:9c:43:
         b9:9f:c4:ad:69:73:76:3d:6b:80:c9:db:fc:99:c1:1b:11:29:
         c5:9a:41:b1:4b:60:ea:d2:c1:d9:d2:79:d1:08:4e:a5:ce:e4:
         87:cb:2d:ea:41:45:c6:7d:5b:44:b5:60:c6:c2:e6:30:33:8f:
         13:f6:f5:27:f2:13:71:57:90:61:5a:bd:2f:16:71:b6:51:5d:
         e4:75:69:67:8e:6f:1c:88:23:14:6d:01:0e:2d:5b:8b:3f:e0:
         75:a4:1a:92:63:ec:46:78:40:6e:54:5c:19:62:ce:c5:bb:ac:
         5d:67:ed:b8:df:7d:95:08:86:e2:c6:40:51:5d:e4:da:47:e8:
         fb:30:89:99:42:43:c7:b8:25:53:b2:90:e0:ba:b4:e3:cf:c7:
         fe:38:82:c1:f0:a3:10:97:3c:fa:f7:62:3c:dd:9f:d6:6a:e7:
         a5:7a:53:26:26:b2:34:c8:32:0c:12:47:11:b1:8c:b1:b4:26:
         11:cf:cb:00:81:b9:fe:0d:78:2a:9a:5f:ae:32:4c:b6:17:30:
         12:30:2f:3d:85:e0:da:69:ab:62:03:9b:71:f9:ab:c1:35:7e:
         71:eb:4a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----