Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft
File:                     J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft (raw, json)
Hash identifier:          YqP9Z3ViUEymEzrtb4PTizsgEvMWkVjlevC63A+7e60=
Subject key identifier:   E3:B5:25:46:8F:05:8A:20:47:27:72:E6:13:15:DF:C8:7E:01:D9:00
Authority key identifier: 27:EA:62:F6:F2:31:9C:AD:22:D3:F9:4B:E3:AF:B2:A4:56:78:05:FF
Certificate issuer:       /CN=27ea62f6f2319cad22d3f94be3afb2a4567805ff
Certificate serial:       019B4AA8445B3DDB6C3434594029043CB221
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft
Manifest number:          05F1
Signing time:             Tue 23 Dec 2025 10:01:39 +0000
Manifest this update:     Tue 23 Dec 2025 10:01:39 +0000
Manifest next update:     Wed 24 Dec 2025 10:01:39 +0000
Files and hashes:         1: J-pi9vIxnK0i0_lL46-ypFZ4Bf8.crl (hash: 0TKMsgRniiGaXcbbETVmpzCkxB5qbTFQdWOOBz1MMDc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4a:a8:44:5b:3d:db:6c:34:34:59:40:29:04:3c:b2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27ea62f6f2319cad22d3f94be3afb2a4567805ff
        Validity
            Not Before: Dec 23 10:01:39 2025 GMT
            Not After : Dec 24 10:01:39 2025 GMT
        Subject: CN=e3b525468f058a20472772e61315dfc87e01d900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f1:8d:2d:94:5d:5a:02:50:b7:7f:ca:d0:ef:
                    dd:33:88:58:04:6e:ce:84:bf:ee:a4:c0:e0:84:b6:
                    49:17:c5:b1:db:f0:30:ef:5f:a8:9a:4b:23:a5:98:
                    d7:7b:c4:b1:ba:29:9e:bf:80:1c:61:97:cb:a3:c6:
                    3b:cb:9e:82:c6:4c:e0:7e:1a:61:f5:6f:f9:57:6b:
                    76:37:eb:60:4a:ea:b0:cd:25:40:da:0c:14:04:06:
                    89:2b:4b:98:76:e2:db:8c:a3:9f:f6:f9:ff:a9:45:
                    ed:c0:70:39:e7:17:bd:fc:ee:2b:79:af:29:88:ac:
                    95:37:fb:c2:13:7d:75:19:8a:56:69:25:ce:ad:b5:
                    a1:a3:71:63:50:09:87:06:6e:2e:a5:90:a4:88:33:
                    a3:1a:be:aa:fb:4f:5a:6d:28:b4:72:37:1e:44:22:
                    dc:45:93:09:b7:0b:3c:3b:a2:bf:12:99:09:81:84:
                    94:72:95:30:85:1e:12:05:21:50:b9:29:2e:57:53:
                    26:94:0b:24:91:ed:92:46:8c:3c:cf:a1:50:cb:ae:
                    85:5c:53:53:86:4b:88:d4:24:e3:81:ab:73:43:5c:
                    6c:84:c9:7d:d1:df:ef:86:1d:bf:51:44:64:34:07:
                    07:d6:32:87:bb:bf:95:f8:37:5f:d2:c3:20:9c:fa:
                    b4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B5:25:46:8F:05:8A:20:47:27:72:E6:13:15:DF:C8:7E:01:D9:00
            X509v3 Authority Key Identifier:
                keyid:27:EA:62:F6:F2:31:9C:AD:22:D3:F9:4B:E3:AF:B2:A4:56:78:05:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:8d:03:30:fd:1a:b6:b7:fe:6a:0f:8d:0b:b5:7d:46:e9:69:
         07:12:73:63:aa:47:87:8d:27:1a:ca:14:07:2a:79:9b:3c:54:
         8c:fa:20:fa:16:27:91:3f:8b:f2:fb:06:ae:ee:a1:d4:36:92:
         89:e6:71:c3:84:2b:71:28:e8:90:cf:91:09:03:17:0f:27:70:
         41:b3:5a:bb:2a:5e:12:19:d3:87:ea:1b:2f:56:91:44:cb:a4:
         34:60:8e:6d:fd:b2:8d:5c:1f:64:32:08:20:90:0f:06:cd:5a:
         bb:ab:0a:d5:70:19:d8:30:c0:d0:14:2d:9b:1e:1e:64:8f:0a:
         dd:05:90:59:d8:67:a9:a2:fb:72:5b:b7:48:cb:7c:ff:68:e2:
         27:5d:4c:f0:a1:ed:68:e5:4a:a0:e4:d0:ab:9a:b3:f2:4f:0b:
         f0:42:65:d1:99:38:2b:28:4b:c3:d7:e2:6c:96:10:1c:3e:01:
         0d:d4:d7:d3:6f:22:97:46:ee:10:c5:3b:1a:75:03:4f:57:34:
         4f:0e:5e:d1:be:fb:85:55:eb:61:8c:f8:27:9a:dc:db:90:f9:
         aa:73:c0:75:6a:b2:c6:d5:31:f1:2f:c9:3d:aa:79:5b:49:18:
         99:55:50:c2:e2:44:0f:69:0e:e1:29:36:46:73:89:58:e1:ca:
         3e:89:40:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----