Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
File:                     2JFWCWVvCPeijSS3xLqbY5ygsAk.mft (raw, json)
Hash identifier:          j97qLjxOxqEvSdo6yZfCUz7JXOlsTF9Zckad3P17Cpo=
Subject key identifier:   23:3B:05:CE:C6:1F:B3:08:CD:E8:69:09:D7:D1:7E:4B:5E:9A:21:CE
Authority key identifier: D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
Certificate issuer:       /CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Certificate serial:       01962ECF563A2D4974BA802F643CA5F64505
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
Manifest number:          0F4F
Signing time:             Sun 13 Apr 2025 11:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:01 +0000
Files and hashes:         1: 2JFWCWVvCPeijSS3xLqbY5ygsAk.crl (hash: vSAL+mWoU4AGMHinT3RKziZi6ngmHGLmtlK28hOQXnI=)
                          2: Wi60RxjWIlDPb3_szVmN-Gl0qoE.roa (hash: IAjzw2r7E4lx4vW0Aq4BO6OsCC7MgvRuI1axCmQxfb0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:56:3a:2d:49:74:ba:80:2f:64:3c:a5:f6:45:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
        Validity
            Not Before: Apr 13 11:01:01 2025 GMT
            Not After : Apr 14 11:01:01 2025 GMT
        Subject: CN=233b05cec61fb308cde86909d7d17e4b5e9a21ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4a:0b:e5:46:dd:42:a3:2c:75:2a:bf:9c:21:
                    23:b3:5e:34:0c:9e:4f:f7:7d:a1:dc:cc:c8:3a:d7:
                    56:eb:ac:5a:21:67:8f:0b:93:15:aa:95:ec:c6:a0:
                    ae:54:6e:6c:38:e5:0a:e4:2e:d8:e9:13:30:0e:fe:
                    cd:98:d5:78:3b:0c:4a:fc:a3:a8:46:6d:0f:33:66:
                    cd:d8:40:17:f8:b8:f8:bc:7f:0f:6e:77:28:81:b8:
                    cf:87:f6:db:65:81:e2:86:c9:40:8e:26:3d:cb:4a:
                    ec:3c:ec:a9:08:e0:2e:f2:e8:b6:b6:71:ad:c5:7a:
                    b4:23:d9:2c:bc:91:1c:2c:a5:46:72:5c:4a:2f:23:
                    21:e4:d8:ce:10:48:71:09:95:16:67:7c:9a:bf:02:
                    01:00:ca:8c:35:4d:c0:0e:18:d0:81:64:78:db:de:
                    f2:18:65:a5:a2:17:34:0d:3b:3c:c0:64:45:15:72:
                    80:c0:dd:47:10:c5:c0:f5:84:8b:d6:ff:86:17:6d:
                    89:00:04:d3:e6:7b:96:c5:f1:5a:72:4c:10:58:43:
                    14:64:77:38:46:ad:ba:23:af:23:9c:39:bb:ca:55:
                    0b:18:5a:18:a5:89:10:a9:17:fb:38:01:f1:ae:54:
                    4a:50:03:3c:b9:c4:91:75:28:e2:7d:ba:80:0e:2f:
                    c0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3B:05:CE:C6:1F:B3:08:CD:E8:69:09:D7:D1:7E:4B:5E:9A:21:CE
            X509v3 Authority Key Identifier:
                keyid:D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:6e:f9:21:d0:01:6f:d2:6e:05:b4:61:23:ff:98:a3:04:b5:
         55:a5:df:d0:41:ec:75:6f:6e:18:32:9b:fb:c8:7e:85:e1:24:
         7c:71:68:78:ab:64:9b:cf:a7:6b:a5:00:18:38:75:75:82:44:
         b6:63:dc:d4:f0:7c:9b:97:41:ed:8a:cd:0e:ad:60:2c:ff:e6:
         5e:c1:1d:70:a2:ff:d6:45:6e:52:9f:c0:25:63:69:bf:b6:7e:
         fd:0f:21:77:86:cf:bf:ce:62:ad:a1:0b:86:c0:c5:87:9a:0c:
         58:95:07:bb:ec:48:5f:65:8d:96:a9:fe:e0:a1:04:59:e5:e5:
         a4:b2:4b:c6:ab:a7:02:d3:4e:20:f6:50:05:41:2b:e5:6d:e6:
         85:5f:25:73:64:b3:e7:26:71:1c:70:56:26:2e:bc:15:be:1b:
         70:10:40:f0:52:79:7e:54:b7:ca:cb:a1:a7:87:6e:44:fa:4b:
         f7:d2:3c:74:e9:2b:44:b1:4b:a9:36:c5:be:d7:5c:0f:e4:9b:
         67:a7:46:c5:a1:87:64:38:d1:df:9a:38:87:35:24:95:34:51:
         26:d2:f8:97:b3:f0:30:4b:fd:64:a0:8a:99:aa:2c:2f:44:bf:
         d5:1b:6c:80:8b:fe:2b:aa:14:45:22:7d:90:e8:a1:f0:9d:7d:
         9b:e2:97:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----