Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
File:                     JUzEq11IxScNQOn-UOcjlt7sWGk.mft (raw, json)
Hash identifier:          9NcaesLXCPYWSac9MToyote4iQ2QgtFsQnfedMxy/Xs=
Subject key identifier:   92:75:E8:56:59:DA:D1:B6:34:3A:44:4E:16:43:8B:8A:F0:DD:FD:BC
Authority key identifier: 25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
Certificate issuer:       /CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Certificate serial:       01962F06755CEA3E54086673E15355F12B8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
Manifest number:          0ABF
Signing time:             Sun 13 Apr 2025 12:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:14 +0000
Files and hashes:         1: C2ecozniAHAj0uhFfwHN_H6EGZA.roa (hash: EZUOiLLYsi9hRi0qVE5EwgylGRW0PHLtxyCT19uY13Y=)
                          2: JUzEq11IxScNQOn-UOcjlt7sWGk.crl (hash: dqE62H2rBfmHDAqMuuZ6O5ZIsuT/fV8owI7AZUlCbj4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:75:5c:ea:3e:54:08:66:73:e1:53:55:f1:2b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
        Validity
            Not Before: Apr 13 12:01:14 2025 GMT
            Not After : Apr 14 12:01:14 2025 GMT
        Subject: CN=9275e85659dad1b6343a444e16438b8af0ddfdbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9c:52:90:c1:b4:97:95:64:d8:e8:da:7f:c0:
                    d3:c8:ec:9d:dd:36:f5:48:8c:76:eb:ce:2e:77:c3:
                    95:31:83:9b:7b:68:59:c5:90:f5:5a:c5:34:8b:b7:
                    d7:27:f3:84:65:fb:4a:db:7d:df:62:63:18:90:11:
                    31:cf:cd:b0:26:05:83:38:a6:eb:26:c0:2c:b7:ea:
                    91:89:89:aa:aa:82:06:a2:37:bf:01:3e:5d:ea:ef:
                    36:41:73:b1:71:f0:bc:79:47:a0:16:0c:0b:ab:a0:
                    1f:cf:f6:5f:a8:27:c4:a2:95:7d:e7:96:f9:d8:c7:
                    25:b0:b0:89:e3:fb:b3:34:5c:2d:7c:f6:14:af:da:
                    18:23:a3:9e:dd:a7:7d:b4:23:5a:26:bd:e0:52:32:
                    81:71:55:ce:38:6a:ff:ff:2a:4d:9f:a9:f7:92:99:
                    3e:46:41:8d:ce:2c:f0:1b:b0:2a:e8:b1:03:2a:3e:
                    31:05:24:ce:83:c9:69:8e:48:75:13:8e:02:58:ab:
                    97:9f:50:1f:c5:0a:b7:e5:16:cf:93:f8:ba:5f:9f:
                    f0:bd:f0:7e:3d:49:f7:52:25:e2:36:77:85:7c:82:
                    68:6c:56:48:83:ee:7b:5a:7b:d5:5b:09:42:4e:2a:
                    b5:e4:46:c9:26:0d:ef:71:b7:91:40:a4:c8:be:e4:
                    48:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:75:E8:56:59:DA:D1:B6:34:3A:44:4E:16:43:8B:8A:F0:DD:FD:BC
            X509v3 Authority Key Identifier:
                keyid:25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:0a:cd:4b:3b:b7:db:6a:3a:f2:51:36:15:fa:e4:c5:61:8c:
         ff:76:50:23:fb:5a:97:9a:80:c7:63:7c:03:99:63:d7:20:c8:
         86:98:17:59:00:b0:c7:b8:22:53:52:74:3e:4c:4d:e1:44:69:
         6a:de:b4:08:17:63:1e:7f:08:ba:ea:3f:1b:f5:d3:9c:6b:5b:
         37:62:7b:ce:4a:df:b8:3b:bc:c1:e6:4c:00:03:ad:d7:62:cd:
         fc:f5:3c:1b:e6:46:36:bc:39:ce:1b:5d:96:04:0e:d4:76:a9:
         dc:ef:67:c3:48:61:e8:1e:fa:ba:cd:b6:1b:ac:5b:bc:69:77:
         50:0c:ed:60:ce:c8:7f:dd:45:6e:80:6a:32:40:fa:dd:d7:d2:
         38:64:90:d8:d1:86:be:29:a7:ed:f3:4a:c1:3e:72:fc:61:67:
         95:b1:b6:ad:01:be:1e:61:d3:65:7c:eb:64:cc:63:e3:73:e3:
         66:85:f6:93:1b:e8:70:d3:ba:a6:c6:a1:c4:75:fd:0b:7f:f2:
         ac:72:c8:5c:c5:29:94:10:ad:72:a8:f0:86:df:ac:6a:3a:e0:
         cb:57:ad:32:27:92:e4:bb:72:e4:2e:33:28:c9:c8:ab:20:bd:
         70:7e:8d:95:b5:ae:ce:37:2e:7b:3e:e2:12:6a:d4:24:ad:27:
         ed:3e:13:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----