Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
File:                     JzWxnbJ9Py131AgYhFO-JrNFUK0.mft (raw, json)
Hash identifier:          8DF9QAXNOoD70GGljspnFvvoo8KYpSLpzStc992sgsw=
Subject key identifier:   37:A5:F8:04:29:21:42:BC:B0:D3:6B:5A:C2:56:CD:5C:17:98:8D:95
Authority key identifier: 27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD
Certificate issuer:       /CN=2735b19db27d3f2d77d408188453be26b34550ad
Certificate serial:       0195E0EB4630E2E6A1F7688715DD67E627A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
Manifest number:          0225
Signing time:             Sat 29 Mar 2025 08:01:10 +0000
Manifest this update:     Sat 29 Mar 2025 08:01:10 +0000
Manifest next update:     Sun 30 Mar 2025 08:01:10 +0000
Files and hashes:         1: 8Xi47DC6XLMifd_h4diEuTQqT_o.roa (hash: CN0wU8kNDOjW0/AZxclgk/MCq6Ngl7PcvBwvgiUpVIs=)
                          2: JzWxnbJ9Py131AgYhFO-JrNFUK0.crl (hash: DnkjP4sHF9h9uSE7OpW+BnzFHocAp9s5I4K5Q0st1iQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:46:30:e2:e6:a1:f7:68:87:15:dd:67:e6:27:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2735b19db27d3f2d77d408188453be26b34550ad
        Validity
            Not Before: Mar 29 08:01:10 2025 GMT
            Not After : Mar 30 08:01:10 2025 GMT
        Subject: CN=37a5f804292142bcb0d36b5ac256cd5c17988d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:55:e4:7d:ac:46:89:c2:6f:1a:e8:d8:b1:3b:
                    72:a4:b2:ec:36:7e:e2:0d:d7:cd:b3:f3:94:19:2f:
                    ad:2f:c8:19:9f:aa:e4:e7:91:34:9c:f6:8d:9f:54:
                    2c:c4:4b:b8:ed:89:fd:c8:8e:c1:1d:41:8f:a3:b5:
                    8a:c0:0f:73:fd:df:86:e6:d8:3e:25:30:89:5b:5b:
                    2e:dd:50:f3:7a:89:62:ea:5d:4a:43:e1:9c:f2:cb:
                    a1:59:44:54:10:fd:25:95:07:29:6e:ff:6b:6d:ba:
                    6b:46:38:58:e1:25:60:21:91:a2:a5:3e:a4:0d:f1:
                    41:92:c7:36:49:bd:6e:39:cb:c0:8a:be:48:9b:23:
                    29:3b:cc:11:b0:cb:e7:cd:6e:8b:53:cf:7c:31:d0:
                    b2:e8:69:0c:7b:b7:72:8c:34:10:a8:b9:56:1c:75:
                    94:47:d6:f3:df:c5:39:45:63:d7:74:e3:3e:b3:ba:
                    5f:49:b9:71:2a:4e:48:4b:3d:c9:b8:de:41:59:e7:
                    59:40:d6:8c:bc:46:d1:77:50:76:c6:4e:5e:03:97:
                    34:89:db:6a:05:9e:30:ff:53:fb:3e:fc:34:e5:22:
                    d0:b7:a6:38:48:98:b9:58:51:98:75:2e:dd:d2:a5:
                    88:e9:dc:53:1e:4b:94:0e:27:d6:1a:48:dd:76:60:
                    8a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A5:F8:04:29:21:42:BC:B0:D3:6B:5A:C2:56:CD:5C:17:98:8D:95
            X509v3 Authority Key Identifier:
                keyid:27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b0:38:f1:0c:3e:1c:49:bb:6b:ab:e6:ff:6a:0b:88:a1:cd:
         81:c2:76:e0:3a:e3:19:0e:9c:3a:2d:f5:33:a1:e5:4f:fc:51:
         14:c0:f7:0a:9a:0f:d7:54:c1:9f:bd:28:7b:1d:68:dd:ea:0e:
         fe:f4:13:94:49:95:2c:15:cc:3f:72:97:b8:d5:e5:61:7b:79:
         99:b1:eb:e8:a9:44:f5:7f:cb:c9:c7:88:fb:08:ad:f2:dc:db:
         16:02:ee:62:cb:f7:a3:86:7a:ca:9b:06:28:bb:e3:94:3e:6e:
         48:8e:0d:c4:26:dd:7a:55:cb:5e:b2:37:ad:5d:5f:15:f9:c0:
         8b:3d:09:e3:df:2c:af:c5:f5:e4:f8:da:8e:44:2f:ba:bf:0c:
         49:85:6c:cf:2c:3d:0f:3b:e1:8e:13:01:27:43:a0:ca:e5:2f:
         69:ef:d9:6f:ef:82:b4:74:79:52:b8:84:f2:5d:40:5f:a2:1d:
         3c:27:e6:ce:e8:d5:50:57:63:9f:89:35:5b:f5:5f:11:de:44:
         13:83:2a:f0:c8:53:0e:68:38:59:25:e6:d1:6c:d6:d4:46:1b:
         94:63:87:ca:4d:9a:b8:e0:39:45:42:a9:73:87:2f:06:73:b5:
         e2:7c:76:86:aa:db:a1:98:68:96:eb:b3:4f:a9:0e:12:67:02:
         70:c0:d3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----