Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
File:                     jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft (raw, json)
Hash identifier:          dJfXcLgyFXBvvGHXY+D49O0zQ5tG6K2gcDCk5v9LeFU=
Subject key identifier:   5F:38:AA:CE:9A:28:E3:1B:7B:D9:FD:45:2D:E9:EE:9A:18:89:71:76
Authority key identifier: 8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
Certificate issuer:       /CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Certificate serial:       01962E98BF5F62EF0144473E0DCDF3C25C8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
Manifest number:          07A6
Signing time:             Sun 13 Apr 2025 10:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:24 +0000
Files and hashes:         1: _XanHjYNZTT-5X0sROOr4g4zRS4.roa (hash: BSdib09dS8aBenYj0m64OabQQ/2b6u37mA8nYmBf36k=)
                          2: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl (hash: 3j4j7vCdwdIKURJkYbqR6+mAUTn3a5HfrHSScXr12fY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:bf:5f:62:ef:01:44:47:3e:0d:cd:f3:c2:5c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
        Validity
            Not Before: Apr 13 10:01:24 2025 GMT
            Not After : Apr 14 10:01:24 2025 GMT
        Subject: CN=5f38aace9a28e31b7bd9fd452de9ee9a18897176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e1:48:45:5f:ac:ed:f8:c1:17:ad:4f:e4:42:
                    a3:a1:1a:80:ed:ab:8e:c9:97:4f:2b:c8:d6:f0:4e:
                    27:50:da:27:7b:67:c6:e6:0d:39:58:14:e9:2e:f7:
                    c3:b8:cc:13:f4:ce:84:5f:ed:55:61:0b:1d:af:27:
                    e4:57:c4:2a:e9:97:ba:bb:50:2b:4a:64:3b:3c:46:
                    00:41:68:e5:f8:7f:0e:ae:d5:04:91:02:c7:fa:68:
                    61:39:04:02:ff:7f:a7:22:97:5d:f2:b1:81:0e:a8:
                    09:d7:39:75:b5:eb:24:d6:5e:f1:f0:99:58:99:e6:
                    91:f2:4f:34:a3:4d:90:4e:7a:4b:0d:eb:ab:26:d6:
                    fb:fa:06:07:eb:8f:b4:ca:9f:50:05:2a:1a:c1:e3:
                    fe:9d:f9:08:1f:d1:cd:ca:26:2a:38:ab:c4:2c:61:
                    fb:70:40:51:95:c9:a9:28:64:31:db:77:67:a9:c6:
                    6f:e0:83:5b:bf:59:b1:b3:6e:66:66:cf:98:a6:1f:
                    39:19:2e:8f:19:1b:f4:d9:da:a7:41:f6:57:85:aa:
                    04:48:1f:17:56:48:17:b8:f3:12:aa:9d:f2:51:d8:
                    b0:71:a4:aa:8a:92:8e:bb:1f:29:21:60:ef:3d:f6:
                    2d:55:9f:75:d9:d5:73:c8:d2:86:d4:2b:fe:f1:eb:
                    7b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:38:AA:CE:9A:28:E3:1B:7B:D9:FD:45:2D:E9:EE:9A:18:89:71:76
            X509v3 Authority Key Identifier:
                keyid:8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:7d:c8:b9:b8:15:88:d2:85:aa:8a:29:f2:c4:8c:08:50:d6:
         f6:0c:17:cf:37:13:b3:76:89:c4:33:26:fa:b0:64:1d:a5:45:
         51:be:76:11:a3:17:c8:d2:fa:ce:19:53:cb:5a:03:d3:91:61:
         83:63:23:2b:02:ad:f1:ae:b5:ba:10:56:83:da:f4:52:cc:38:
         e7:74:bc:22:4e:fb:74:6a:a4:19:39:58:99:34:35:79:c1:73:
         f5:4c:18:ca:49:d1:c2:c0:5f:c7:23:cb:2b:6f:76:e7:30:5d:
         40:0b:12:c4:a5:78:9f:58:38:ce:7b:6a:ad:2d:db:8f:b2:99:
         9c:e2:f0:12:e2:45:3f:ac:0f:55:35:f3:5f:3d:c8:61:ad:0e:
         e6:7b:18:29:30:44:2d:e7:10:1b:00:6b:44:17:06:ab:08:a1:
         57:a2:52:73:de:08:22:29:75:a3:87:4d:3a:c9:48:00:7d:ae:
         ca:f7:dd:da:87:ed:02:02:2d:7d:53:e6:0c:5b:d7:83:14:ef:
         9f:cb:71:77:b4:05:35:69:b7:2e:75:6d:3a:c8:e1:eb:a6:a2:
         be:a0:6a:1b:fe:47:62:3f:ef:a9:43:2e:91:93:56:63:fc:bb:
         b2:f4:7a:eb:27:55:d9:6b:3f:66:30:25:61:e7:6c:f3:e6:17:
         a6:7d:fa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----