Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
File:                     JI9eJvHAj0SGyZEci2Cerotst00.mft (raw, json)
Hash identifier:          TpPshhDoZ8cmrUAXTE+mtiaCoUjPEAQoBvPE/kXNcFI=
Subject key identifier:   AF:AA:6A:2C:EC:E1:28:A2:B9:33:CB:A7:E2:AA:99:2B:5E:62:59:6F
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Certificate issuer:       /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial:       01962E99C5E488887B280071C8534558B02E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 10:02:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:31 +0000
Files and hashes:         1: 4-VMs7WjnHapNWAogJtHgkJT3FU.roa (hash: gSDXueJPuBUvKo0WOnGXmd8a/t7YwU/fLnYXo72JtQQ=)
                          2: Iqxcd_fV1QsWB5O74ZAh4NM18cs.roa (hash: 6qhxk3bJhMiZ9tGHAGhJE2mV7NKSco7uvbYg30YDR94=)
                          3: JI9eJvHAj0SGyZEci2Cerotst00.crl (hash: RNlAGIKFpuaeg/ZPKdNrjz9GQkAqI5tTSr7aW4XbEKU=)
                          4: XFRqozBjRCDgkRfk1bxKNY0dgFg.roa (hash: u1yLOLEkwAxOilmwTuOs1qXXdE33hg/Nh8HsoI+27dM=)
                          5: _bqODjPn-Rd4cBmxTx3qtm9oavg.roa (hash: y2y1qSWU+HMBsyjHGzEQQZsskHsqz5iR/DyAxLMfaoM=)
                          6: p68H3uMjio8Wt8Lw5I34yYxIxUU.roa (hash: Cl/bx139AnmJ9IE64HvUFHSswl0yNbebsilLqxaX8Po=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:c5:e4:88:88:7b:28:00:71:c8:53:45:58:b0:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
        Validity
            Not Before: Apr 13 10:02:31 2025 GMT
            Not After : Apr 14 10:02:31 2025 GMT
        Subject: CN=afaa6a2cece128a2b933cba7e2aa992b5e62596f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:65:45:43:83:e5:70:71:4e:08:f2:32:f6:09:
                    a9:df:5d:7c:1d:f8:88:d6:80:b6:ce:6f:1b:b7:78:
                    a6:da:59:e6:e3:c5:3f:9d:90:1b:aa:73:5e:40:fa:
                    a8:e0:fe:43:31:76:be:c9:bd:eb:15:47:8a:ab:8d:
                    fd:22:8a:ef:60:cf:b3:78:fd:f3:de:1a:f7:52:a0:
                    1c:74:a4:32:1f:d8:cb:7f:78:f5:49:e8:61:74:dc:
                    20:47:3c:2b:69:a4:98:eb:0b:33:68:f9:92:90:49:
                    df:3a:61:78:7d:cd:c4:92:bc:53:5e:44:c9:2b:ae:
                    af:3a:13:61:e8:38:2d:18:21:14:37:40:d1:80:74:
                    24:6c:41:ee:d0:c4:04:e9:5c:68:53:20:84:78:2f:
                    c1:86:62:26:0b:c2:6e:56:0b:b7:db:3d:8a:6e:6e:
                    da:43:63:bf:6a:20:9d:69:a7:6e:64:03:48:c0:76:
                    88:fd:25:ca:63:86:e6:28:f6:18:3f:9a:45:2a:c6:
                    a7:18:09:6c:85:9c:8c:01:1f:b6:15:34:54:bc:e2:
                    6d:4c:1f:1a:36:cd:ca:8c:cc:fe:a1:83:37:67:97:
                    70:20:b8:05:84:90:4e:23:d0:36:68:a8:7d:d4:79:
                    3c:02:96:b0:62:d3:81:cd:44:47:d1:f3:95:4c:72:
                    d7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AA:6A:2C:EC:E1:28:A2:B9:33:CB:A7:E2:AA:99:2B:5E:62:59:6F
            X509v3 Authority Key Identifier:
                keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:be:db:31:51:aa:af:09:e2:47:10:2d:69:45:2c:d4:e1:ae:
         05:c5:19:84:e9:75:c0:89:45:a4:b2:0e:5f:2a:06:76:c4:22:
         b6:66:10:e1:e5:75:1a:f8:80:5b:70:80:8d:a2:bc:6e:d5:0c:
         56:6b:2e:58:39:11:cf:22:95:fd:bb:fd:a2:e1:23:c8:eb:a3:
         db:a8:1d:e0:d1:6a:f5:6c:f2:72:57:23:62:c9:aa:9d:a4:ed:
         f8:42:6c:d5:25:a8:41:66:c1:0a:d2:7d:2c:1e:7f:8c:33:6e:
         3e:51:ff:34:18:d2:34:cb:da:17:a7:a3:9c:06:f8:43:da:2f:
         95:f3:f1:cd:bc:36:3d:f7:45:38:22:df:d9:02:20:3a:14:d0:
         1f:d3:93:39:56:d9:bb:fe:ca:fa:10:6e:d6:78:e0:61:7c:4b:
         78:bb:ff:d5:09:58:30:2f:64:76:2f:88:a0:33:8f:60:fe:20:
         8d:af:83:ae:fa:6c:1b:8c:b6:64:62:e6:42:c2:1f:7c:45:1f:
         0d:48:00:4b:52:d8:88:1e:70:ea:fc:44:c4:6b:9b:dc:01:51:
         37:ed:5e:ac:ef:1d:c2:fc:e5:c5:af:c4:75:4b:fd:1b:e1:cb:
         2a:a1:12:11:72:71:ca:32:b9:c3:dd:f9:8a:0a:01:ad:ba:cd:
         69:ad:1b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----