Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
File:                     JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft (raw, json)
Hash identifier:          6Wwjo75SzfgKXmyzWzbmj9bTn8vA3jl7VarulBvWors=
Subject key identifier:   60:96:23:D9:BC:40:6D:34:20:10:CF:92:1B:62:9A:08:90:9F:56:7C
Authority key identifier: 25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
Certificate issuer:       /CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Certificate serial:       01962F742135427E214A2F1B8B4820643F80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
Manifest number:          03A1
Signing time:             Sun 13 Apr 2025 14:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:01 +0000
Files and hashes:         1: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl (hash: cgzSFXyHiZsNAzWQpjOORmW1nxkpCJswT77x2kJ6OXg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:21:35:42:7e:21:4a:2f:1b:8b:48:20:64:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a008ff66d456e43efdc1196b17d8443d2397f0
        Validity
            Not Before: Apr 13 14:01:01 2025 GMT
            Not After : Apr 14 14:01:01 2025 GMT
        Subject: CN=609623d9bc406d342010cf921b629a08909f567c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:66:e7:e0:99:5b:e0:e2:73:ac:76:34:af:69:
                    05:25:08:9f:6f:01:36:ec:6d:d7:c3:49:77:1d:68:
                    76:31:a1:b4:41:d0:ad:88:94:73:f3:89:0d:2a:4d:
                    88:15:1e:ea:09:c9:b9:35:83:da:13:94:b3:51:25:
                    59:0e:c2:90:45:ca:55:19:98:15:e7:af:c2:e3:a0:
                    cf:44:c7:bf:a8:02:c0:52:2a:d7:5b:7a:c1:f2:74:
                    13:00:e4:c5:4c:cb:e6:87:a0:b4:f4:ec:4c:99:eb:
                    79:9a:cd:4c:20:1c:6d:9b:f2:9e:4f:38:b7:2c:84:
                    82:ae:33:d5:d2:36:81:3d:d7:2f:a1:a4:9b:72:4c:
                    14:50:f7:8e:a8:84:37:d2:42:34:03:cd:ef:fa:bf:
                    57:d2:d5:49:09:fc:27:a3:2b:89:81:a0:73:e9:fb:
                    1a:f9:ca:82:4d:1e:ae:90:bc:ec:3f:1c:5d:c7:ff:
                    da:85:15:eb:5c:b0:8a:b1:b4:cd:f7:f8:f8:15:08:
                    f6:dc:d5:8f:6e:91:28:e1:c2:a0:8e:cc:26:71:18:
                    af:d3:a3:1c:d7:8c:ee:fe:95:3b:b8:f2:ed:ff:a5:
                    cd:13:f1:9d:c9:fc:c8:db:c5:1b:f5:86:7c:f6:8c:
                    1b:11:60:87:e6:e8:5b:e1:32:1b:59:b7:d7:e4:d7:
                    59:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:96:23:D9:BC:40:6D:34:20:10:CF:92:1B:62:9A:08:90:9F:56:7C
            X509v3 Authority Key Identifier:
                keyid:25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c3:49:f3:dc:b3:fb:ae:52:99:26:36:83:5a:db:19:bf:cf:
         26:be:b7:4c:f3:48:39:b3:83:85:e9:55:1f:19:63:67:ff:67:
         b8:05:00:26:63:b5:52:5a:b9:6d:a1:59:f2:0b:a3:9b:70:5d:
         fe:a3:34:49:ed:73:7c:76:85:66:fb:dc:fa:ef:bb:8d:b4:93:
         71:b2:97:b5:0a:91:7d:22:4b:d8:3a:49:a8:b8:e7:f3:70:7f:
         33:92:11:e7:a0:1a:82:e4:fa:a5:1a:ce:42:b5:ad:6e:69:22:
         a1:19:54:59:65:51:b2:14:42:bf:4c:3e:e8:5d:96:17:3b:19:
         14:ce:75:ae:a1:f7:e1:19:e6:c8:ed:a9:a5:44:35:60:29:b9:
         93:d1:55:18:74:72:78:0d:34:88:35:5f:2f:9a:21:5f:21:f6:
         7d:a2:af:59:58:e3:d0:91:57:74:c3:81:a2:2e:54:75:06:7e:
         86:f3:76:ed:be:dc:3a:22:c7:1b:7b:29:04:86:c6:fd:9e:fd:
         c1:60:a9:84:72:f5:99:87:8b:57:1e:d5:da:20:1c:1e:d9:09:
         46:2d:1b:a5:49:b9:c2:73:7a:85:dc:6f:ca:24:b3:56:2b:e1:
         b5:8e:16:f7:a7:3d:b7:ef:8a:c4:47:76:8d:ab:c1:b8:b3:55:
         fd:3d:3b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----