Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
File:                     JFjwpFOzL_OiHmajG3T-SdjkajM.mft (raw, json)
Hash identifier:          P8D13zDlhjfvH1OPHlv7/7f+EIXq8lBWraq3ppTeKAA=
Subject key identifier:   50:4B:CA:1B:8B:6D:4A:BD:5B:AD:3D:3C:54:C3:A7:46:4E:46:61:CA
Authority key identifier: 24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
Certificate issuer:       /CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Certificate serial:       01962F06AF3FD4583524D3BBE1143D261F48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
Manifest number:          1017
Signing time:             Sun 13 Apr 2025 12:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:29 +0000
Files and hashes:         1: JFjwpFOzL_OiHmajG3T-SdjkajM.crl (hash: T6i4TQu9T5OsM4s3/WNI/tDWktaK6hl+34TTUYJQj0E=)
                          2: _d1GEPj08rPnUJ5e0jIgKD6QCFQ.roa (hash: vnr1x2ojeLhbVafxW9oqVV43qotLr8cLQwIIuErWSfg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:af:3f:d4:58:35:24:d3:bb:e1:14:3d:26:1f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
        Validity
            Not Before: Apr 13 12:01:29 2025 GMT
            Not After : Apr 14 12:01:29 2025 GMT
        Subject: CN=504bca1b8b6d4abd5bad3d3c54c3a7464e4661ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:64:25:38:57:44:42:3b:d6:16:93:30:df:00:
                    4d:4c:e0:35:5d:b0:a0:c6:5e:5d:c6:d8:86:a5:21:
                    19:17:fe:8f:0d:59:40:ff:a8:74:8d:e9:7b:78:ac:
                    bc:4d:e4:72:99:31:36:77:3e:df:cb:3a:ef:2f:89:
                    71:9d:73:95:c1:ce:5f:f6:d5:29:3d:fc:02:00:cf:
                    31:e0:49:7b:ba:6e:be:c7:51:58:f7:d9:5c:a8:68:
                    bb:98:1b:55:a6:00:8d:00:87:2e:5b:aa:80:b6:16:
                    d9:12:bf:90:ca:90:13:cf:6c:e0:33:da:fc:dd:86:
                    14:6c:83:6e:5f:10:80:16:55:c2:30:e8:bc:71:d2:
                    bb:75:2f:d1:ea:6d:9f:8e:4f:72:ac:52:96:66:c6:
                    e0:aa:39:c5:cd:8e:52:ff:35:b3:08:67:ff:8c:73:
                    da:33:a2:86:4c:4e:ec:b3:d5:ce:61:26:77:f8:34:
                    bb:ad:63:dc:46:36:d8:ae:06:c0:97:dc:6b:6b:b7:
                    2a:62:ca:05:0e:0e:73:40:a7:b1:75:74:79:11:f2:
                    ce:7d:66:8b:53:44:16:f5:fb:dc:a1:1d:9f:f0:ca:
                    b6:7e:23:88:a6:7e:6a:4b:fe:15:80:37:67:0b:3d:
                    12:1a:30:a2:3a:24:ee:97:19:ac:d5:15:28:ee:cd:
                    16:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4B:CA:1B:8B:6D:4A:BD:5B:AD:3D:3C:54:C3:A7:46:4E:46:61:CA
            X509v3 Authority Key Identifier:
                keyid:24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:12:10:04:15:e1:ad:6e:7d:e0:ae:ae:65:9d:a7:48:55:11:
         5e:27:75:33:21:72:e0:91:d9:68:51:7b:13:09:ad:10:c8:07:
         f2:02:d5:83:67:57:ee:91:b8:03:49:60:0a:36:bd:3a:31:37:
         84:58:f9:57:66:a1:8f:9a:27:f4:aa:bf:bf:3f:7c:fa:bd:4a:
         5c:86:ec:78:40:e2:99:fc:26:b1:64:4a:8f:f0:c9:2f:c6:45:
         b0:b6:f3:13:e9:1d:f4:59:9a:53:61:50:b9:bf:7a:a4:ad:29:
         f9:db:da:f8:39:94:9a:14:f9:91:b6:28:38:9f:10:f6:ac:16:
         ec:57:3c:f0:ab:c8:2e:70:c4:78:b0:0f:75:23:ae:1a:97:a7:
         6f:3a:8c:fa:67:5b:f8:dd:26:9b:c2:ef:23:96:3a:88:5a:ab:
         30:27:ba:77:ec:96:ba:7c:5c:95:02:96:0f:17:df:df:a5:97:
         a4:25:84:78:88:42:5b:89:34:5b:e8:fc:a5:a8:bf:c4:fa:a9:
         a6:e7:18:33:a9:6b:47:ba:bf:58:b9:75:02:8d:c1:c5:34:a6:
         43:e6:b4:ec:7d:e9:e3:bc:b6:21:d8:96:15:9d:df:cc:f1:fe:
         68:78:ec:4a:62:a8:6e:e5:61:ea:d5:72:59:0e:75:22:d7:9f:
         78:d4:a9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----