Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft
File:                     JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft (raw, json)
Hash identifier:          /3Ze4I0BclsKc57cTIXtDZs9MT0racvf6xbT+e5uYbc=
Subject key identifier:   30:ED:A8:9C:51:D4:1F:FE:71:1F:EB:AF:19:F8:9D:8A:51:58:4A:1A
Authority key identifier: 25:9E:95:2E:44:8B:82:FF:45:78:EC:EB:64:48:E6:FB:FC:61:13:E0
Certificate issuer:       /CN=259e952e448b82ff4578eceb6448e6fbfc6113e0
Certificate serial:       01962E98B5B1812DA92C4C5EB580B450369C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:21 +0000
Files and hashes:         1: 6cDE2TEs1tcQMXNmWEOcfp5TsHw.roa (hash: /Z9kWSQkfFUGliAF6HSs16rOY5YOKoilEvtZIr4dqcM=)
                          2: JZ6VLkSLgv9FeOzrZEjm-_xhE-A.crl (hash: wJAnW+P8RBenB5w8FrWpjlfzvKnAswu20H0oXWxnkAA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b5:b1:81:2d:a9:2c:4c:5e:b5:80:b4:50:36:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259e952e448b82ff4578eceb6448e6fbfc6113e0
        Validity
            Not Before: Apr 13 10:01:21 2025 GMT
            Not After : Apr 14 10:01:21 2025 GMT
        Subject: CN=30eda89c51d41ffe711febaf19f89d8a51584a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8d:22:09:43:13:b9:e2:6a:5a:8f:c9:f7:72:
                    af:1e:b1:81:77:48:b4:d6:e9:7a:db:f0:b6:07:b7:
                    f4:b7:f5:4d:8c:00:67:60:8c:b5:34:89:43:9b:f9:
                    a0:dc:ae:b0:f1:0e:8f:20:34:c2:75:99:c6:59:b6:
                    e5:db:87:b1:cf:0b:0b:df:0b:45:ed:da:75:e2:d3:
                    9d:a7:da:00:f2:7a:df:e3:77:1d:65:ba:d3:0d:c0:
                    1f:e3:7f:61:88:8a:12:99:e1:5c:ef:c5:2a:53:0e:
                    77:a6:f4:a8:f1:c6:d0:79:0d:00:2c:aa:8b:17:d3:
                    98:17:5b:50:54:a3:85:5e:99:86:2e:8f:34:46:0c:
                    ae:08:78:5b:25:3d:22:80:1d:ab:aa:8b:42:fd:fb:
                    a2:16:18:71:d6:ce:55:0b:87:c2:20:3a:d1:23:3d:
                    6a:72:e0:65:2e:69:02:19:92:fe:4c:68:79:eb:1c:
                    04:9c:69:f1:6e:ab:b3:27:e2:4d:47:67:e6:d9:3c:
                    32:9f:f4:a5:eb:f1:23:30:7f:1a:69:d7:d1:3b:00:
                    a6:3b:16:c7:8a:42:bc:d1:ff:bd:38:78:f6:3f:47:
                    15:72:69:b7:12:e3:13:d9:3f:4b:da:0e:fa:94:6e:
                    34:03:3a:cb:a1:83:b4:11:25:b0:4f:45:90:d2:63:
                    ca:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:ED:A8:9C:51:D4:1F:FE:71:1F:EB:AF:19:F8:9D:8A:51:58:4A:1A
            X509v3 Authority Key Identifier:
                keyid:25:9E:95:2E:44:8B:82:FF:45:78:EC:EB:64:48:E6:FB:FC:61:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:50:8f:98:17:9e:bd:ad:35:5a:80:90:d2:7b:de:8c:b4:cb:
         63:4d:1a:84:fd:0d:91:10:54:fa:71:b5:75:26:b1:cb:a7:8e:
         6d:aa:39:e4:b8:d7:b6:af:22:54:7f:d9:dc:05:64:10:0e:59:
         27:22:c7:77:0e:c1:73:be:0c:a6:62:d3:cc:2b:46:80:1c:14:
         74:1d:88:11:7c:99:e0:97:00:8a:f5:c0:e6:03:a2:95:c8:bb:
         e4:5d:52:1b:09:11:5d:44:4d:a5:89:0d:5b:3c:2a:3d:5b:b5:
         8f:02:df:9a:2b:22:72:5f:1f:65:df:6b:ee:6c:06:c0:41:5f:
         c2:e5:d9:54:61:88:e7:9b:96:b0:6a:5e:63:d7:3d:ad:06:1e:
         b9:44:79:42:70:77:12:f8:16:5d:a4:89:9d:e4:ab:7a:bf:ee:
         cf:d9:e3:cf:36:49:fd:99:41:c1:26:5c:b4:b2:cb:e9:4d:d4:
         a2:37:9c:6c:49:66:09:0a:a8:03:36:f9:8d:bf:23:26:3d:47:
         a1:2f:45:79:45:25:76:84:08:d5:ef:f3:56:86:c9:22:49:76:
         e6:6c:d0:9e:46:29:3e:f4:5b:ac:8f:15:c4:8a:eb:04:75:2b:
         75:e3:c9:de:49:a7:94:2f:60:f9:df:b1:27:cb:05:b4:54:92:
         7e:5d:b8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----