Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
File:                     j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft (raw, json)
Hash identifier:          OixH3wURsmyItIQ/pEzk8GtY36LkYIesTILo5KsEgf0=
Subject key identifier:   5C:64:CA:68:7D:74:26:A5:56:29:CF:5F:6A:04:31:14:EC:C5:E4:74
Authority key identifier: 8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
Certificate issuer:       /CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Certificate serial:       01962DF411B506004690CB84FAE3997A0D4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:32 +0000
Files and hashes:         1: Ouc3RvEDnyO6PZ6J8vBTm0umZLo.roa (hash: O9/4o6Al8uD1wslgbyQKwgMo1+JOp/WhUeraCAmbd1Q=)
                          2: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl (hash: MDOitik7tmK8s9GFI0cJIiUB4vnkL84Hpj5fwkjAFuQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:11:b5:06:00:46:90:cb:84:fa:e3:99:7a:0d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
        Validity
            Not Before: Apr 13 07:01:32 2025 GMT
            Not After : Apr 14 07:01:32 2025 GMT
        Subject: CN=5c64ca687d7426a55629cf5f6a043114ecc5e474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:69:a1:16:57:81:72:36:58:3c:69:cf:ac:1f:
                    9e:73:40:57:86:b1:e2:5d:9b:3d:0d:05:20:41:bc:
                    be:f7:ab:84:61:29:68:07:12:e3:7f:54:e5:50:55:
                    db:5a:22:05:f0:3c:4b:aa:43:3b:cf:f9:7b:44:76:
                    00:ea:8f:71:47:65:af:7f:a0:74:33:ad:84:33:2a:
                    6c:16:24:cd:71:30:64:66:44:81:7f:74:38:88:69:
                    a1:9c:30:8f:e9:dd:18:30:af:1a:52:b0:ca:ec:10:
                    e5:e9:e7:8b:49:8d:dd:f9:84:78:3c:50:7f:5d:1e:
                    1b:ba:9d:19:21:3b:ca:a5:e7:d6:5c:76:c0:5d:b1:
                    83:50:a4:a6:a3:ec:80:ae:09:0e:5d:ca:a5:38:34:
                    5d:8f:2b:9a:fe:4a:b8:79:62:10:cc:88:2e:86:91:
                    7d:8b:97:69:05:75:71:98:75:e4:a9:ca:b9:9d:c1:
                    0d:e3:c2:5b:c9:da:38:71:7b:c2:ad:d2:5e:c7:b1:
                    13:5a:6d:30:f5:2b:5b:07:28:3d:2d:47:aa:5f:2f:
                    63:04:93:da:5e:3c:00:d4:56:37:a6:da:ed:da:76:
                    61:a7:10:f6:e4:be:7a:31:f0:22:31:d1:2c:22:e1:
                    b3:c8:e7:7a:31:ff:2c:50:ae:1d:01:ff:75:e2:5d:
                    22:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:64:CA:68:7D:74:26:A5:56:29:CF:5F:6A:04:31:14:EC:C5:E4:74
            X509v3 Authority Key Identifier:
                keyid:8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:eb:ec:aa:c6:19:50:8c:89:83:67:c6:68:f4:72:91:d3:e3:
         86:c8:37:a0:45:e8:0f:de:8b:67:ae:21:ef:7b:70:c5:8a:90:
         7f:a0:b9:2d:e0:ca:6f:0f:f8:5d:87:50:89:0b:50:56:19:5d:
         3f:e2:0d:b7:08:1d:5e:e5:b1:9f:ba:d5:43:f1:cc:89:92:3e:
         11:a5:f8:46:be:10:4d:0f:72:ee:80:96:86:13:3f:dc:20:5a:
         17:bb:80:a3:7d:80:0f:f6:52:59:1d:b1:19:ab:23:c0:e5:ab:
         08:a3:2b:a8:33:cb:4f:27:4f:21:87:6d:1a:ef:b5:7f:ae:5c:
         c3:d7:49:2b:8c:9f:26:1b:54:56:93:cd:9b:d0:73:ea:d2:b6:
         d2:e9:f9:9d:92:20:41:ec:b8:89:29:a5:fe:27:cb:0a:89:b4:
         0f:b5:0d:95:c0:ea:25:1f:e0:e7:44:b8:4b:31:24:36:63:90:
         5b:8b:87:c7:14:25:3b:23:81:92:d7:4c:1f:cd:ac:13:f7:78:
         b9:d9:9e:ed:a2:4a:44:9b:39:ec:50:90:7f:4d:e6:96:bb:7b:
         0e:92:90:b5:5a:cf:4e:3a:db:5d:a2:b1:87:94:3e:e3:f1:37:
         52:e1:4e:6e:09:b8:dc:a0:02:2d:01:fd:f5:fa:8a:fb:7b:a0:
         1f:68:20:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----