Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
File:                     JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json)
Hash identifier:          X11ZBXdy+AryVWy9dWYvcs7A1DKoIZkIbnGYxEojA6A=
Subject key identifier:   52:ED:B0:7C:35:9C:8A:C3:00:9B:8D:55:4E:C1:FC:12:C0:DA:0C:E2
Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
Certificate issuer:       /CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Certificate serial:       01962E2B08CF69456AC4B28979A60734705A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
Manifest number:          0DE0
Signing time:             Sun 13 Apr 2025 08:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:34 +0000
Files and hashes:         1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: KjjWuFviBZtklrI8YD+pGSJF0aYRq/EuhQQG3dY+7M4=)
                          2: b_FpEo5mzbhghU7FQIOJJKiIivU.roa (hash: HOe4R50HkhUSwXgPcBKFKJCslwOuwtpIjbbm5rlZl9I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:08:cf:69:45:6a:c4:b2:89:79:a6:07:34:70:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0
        Validity
            Not Before: Apr 13 08:01:34 2025 GMT
            Not After : Apr 14 08:01:34 2025 GMT
        Subject: CN=52edb07c359c8ac3009b8d554ec1fc12c0da0ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:76:f3:1d:8b:42:8b:b3:d1:a8:b9:fd:04:9e:
                    78:5d:65:47:0e:79:e5:4d:a7:65:a7:44:0c:6d:bf:
                    e5:1f:39:1b:b2:2a:e6:0c:40:d8:4f:56:c5:fa:60:
                    e3:7a:cd:37:43:58:46:3c:bc:0f:ec:0a:48:e1:5b:
                    54:af:5c:46:fd:93:db:fa:a2:7a:fb:32:8c:b1:ca:
                    a1:a1:79:02:11:a7:6b:0d:1a:b0:65:02:44:56:20:
                    2f:99:c1:5a:ef:81:ba:75:af:5f:9d:0e:7d:68:20:
                    17:0c:ae:41:33:9a:f5:f4:72:b8:5f:85:ab:94:33:
                    c6:84:f8:75:6a:dc:cc:39:87:f6:51:75:85:fd:12:
                    3f:2a:53:f5:5f:db:8d:8a:f9:35:41:be:c7:56:2c:
                    95:26:f8:90:90:56:24:5b:47:0e:e5:cc:a3:5e:d4:
                    0b:dd:09:cd:a8:1b:56:e0:b7:48:57:3d:0b:c4:4f:
                    a4:32:18:68:45:b5:e2:53:13:c8:cf:cc:a8:4a:b9:
                    02:29:a5:5d:68:2d:fe:e5:db:c6:58:8f:92:c3:a7:
                    45:b3:08:09:78:93:31:a5:06:b9:91:a3:91:3a:d6:
                    4c:d7:03:e0:12:f4:b9:2e:c4:14:da:71:28:44:d7:
                    82:c6:1f:03:c4:6e:af:31:5c:c4:7f:f2:1f:ba:83:
                    12:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:ED:B0:7C:35:9C:8A:C3:00:9B:8D:55:4E:C1:FC:12:C0:DA:0C:E2
            X509v3 Authority Key Identifier:
                keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:9e:5e:1b:03:0d:8e:84:71:62:bc:5c:61:03:f8:24:4c:67:
         d3:a2:21:63:45:d3:82:bf:9b:58:f9:fd:d1:f8:1d:7a:6f:16:
         2c:40:1a:16:b6:7a:b4:de:14:ae:5f:e0:4a:94:c2:20:cb:4c:
         e8:ec:fb:72:8c:28:57:57:9e:cd:30:46:ba:e7:66:53:d8:6a:
         8c:21:3c:3c:9a:8e:c3:59:20:8a:f1:e8:ae:5e:f7:8d:c4:a9:
         7b:8d:75:0a:d7:a3:b6:1e:47:7c:34:cf:3a:b1:c4:6e:c2:1e:
         e9:19:82:e2:13:46:d4:ec:c9:9a:6f:f7:97:0e:68:d4:d7:3e:
         55:4c:f7:06:4e:bf:69:fa:6c:6e:2f:8b:23:79:50:fa:61:4a:
         8b:ac:d6:18:3a:a9:ca:6a:8e:1b:49:5a:8d:47:77:f4:74:e2:
         d9:75:fb:c8:89:c7:ca:a8:20:dc:20:10:34:44:21:d1:32:14:
         45:0a:c1:4e:6f:97:7a:22:71:91:29:cd:e0:25:f8:63:20:8a:
         c4:43:6e:91:2e:3c:71:87:b5:55:79:49:31:f8:ad:bb:b2:cf:
         c9:e8:dc:cc:b4:25:fa:9d:a9:cc:1d:61:35:c2:4b:a0:11:cb:
         54:cd:53:a0:b4:37:da:e8:6b:95:92:a3:61:00:45:fd:49:77:
         23:01:e6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----