Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
File:                     JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft (raw, json)
Hash identifier:          RfKJzrjWl+uvmfjNxZ9J9Qs5ymHn8R+piEdXvztc3os=
Subject key identifier:   37:98:63:A9:6D:CE:62:8E:0B:27:12:6E:AA:63:F0:CF:73:A2:34:D2
Authority key identifier: 24:53:DA:50:E8:79:BB:A7:D7:CF:F4:F0:7D:2C:AA:5E:9C:01:08:7D
Certificate issuer:       /CN=2453da50e879bba7d7cff4f07d2caa5e9c01087d
Certificate serial:       01962F06DC430CC849F93804CE229D863CC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
Manifest number:          082E
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl (hash: FI4l4TPVNGsrEVoQrWBoTcyqBtb5oq57sp7Rgdvr3Wk=)
                          2: a4Rgp8ho7PzxQQPKwdBZtuvECRY.roa (hash: RsAUUp6bEgrlBTHA6hUkPwZnwkAi94Oxg46FrwXwg0g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:dc:43:0c:c8:49:f9:38:04:ce:22:9d:86:3c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2453da50e879bba7d7cff4f07d2caa5e9c01087d
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=379863a96dce628e0b27126eaa63f0cf73a234d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:70:3b:ab:20:58:58:3f:06:c6:9f:8b:9f:e8:
                    6d:6c:73:f6:09:40:25:a1:64:0b:a4:16:40:a1:97:
                    c6:c7:23:f2:af:2a:42:6a:83:8e:0a:a7:a8:34:cf:
                    0f:e9:f9:59:75:aa:de:11:20:d2:10:5e:15:27:54:
                    97:c2:d8:09:54:3b:8f:97:1e:57:95:1b:65:7b:f9:
                    75:ad:b8:fd:89:41:a2:17:45:2d:80:69:20:fb:47:
                    c8:25:9b:34:25:58:b3:f1:85:2d:4a:bd:32:93:a1:
                    2a:b6:33:8a:cd:c4:8b:ae:1e:7f:5a:b9:10:36:db:
                    47:37:af:af:55:24:cf:e3:a0:0d:34:72:74:5c:ab:
                    06:af:74:88:cb:3f:80:8e:be:1f:0f:85:e7:98:f3:
                    51:1a:6b:8a:d4:42:57:05:97:50:5d:59:a0:d8:60:
                    e8:7d:a1:d2:9e:a2:74:c9:68:b7:5f:17:58:97:39:
                    07:2b:83:c7:0b:45:42:93:ea:a3:62:ed:e2:56:51:
                    dc:33:76:13:f6:df:0a:e8:9c:a6:54:1c:ad:de:0e:
                    46:b8:ae:41:14:65:07:98:4c:ec:bb:cf:45:f8:77:
                    b2:d8:b3:e0:1c:1e:97:c8:be:86:0e:28:f5:33:e7:
                    8d:55:54:90:e2:38:1c:62:bf:d6:d9:4e:2d:09:d7:
                    77:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:98:63:A9:6D:CE:62:8E:0B:27:12:6E:AA:63:F0:CF:73:A2:34:D2
            X509v3 Authority Key Identifier:
                keyid:24:53:DA:50:E8:79:BB:A7:D7:CF:F4:F0:7D:2C:AA:5E:9C:01:08:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:cf:72:c4:07:9e:07:06:2b:2b:49:a7:7e:c9:13:d8:b8:55:
         0d:6f:00:e5:78:ac:b5:b6:87:3c:67:de:b1:bd:03:56:75:c9:
         b3:dd:55:33:89:76:fe:66:4b:f6:48:b1:d9:01:48:a9:bd:88:
         13:27:a6:18:77:56:2a:73:fe:80:8c:61:1e:82:dd:c7:cf:27:
         35:30:1f:b6:8f:df:0a:36:d6:25:5b:95:5a:7e:15:c5:c9:ba:
         ad:d6:9a:a5:75:df:c7:4c:3a:e5:80:45:cd:a7:92:53:10:62:
         5b:bf:88:43:d5:17:d9:32:c7:61:11:f0:f3:e4:c3:57:d7:7e:
         8d:20:51:f8:5d:59:8d:25:ad:39:7d:8d:4e:a3:ee:be:b5:3e:
         04:29:26:b0:65:81:2a:c5:7d:9a:91:8d:f2:bb:d4:25:ee:1c:
         6b:ba:54:12:91:6a:b1:2c:9f:8b:9e:91:75:91:8f:5b:d1:57:
         94:33:c7:52:b2:5d:6c:fb:3e:16:5f:c6:98:df:e5:f6:94:34:
         15:75:d0:8b:83:8f:24:bb:79:8c:9c:3c:ef:69:59:24:cd:e1:
         99:10:a7:75:2b:0e:fc:b0:56:41:59:b4:0f:81:33:ae:62:fa:
         fb:9d:5a:4c:83:73:86:fe:91:8d:c3:9f:a6:7f:98:ec:ab:fe:
         c1:6a:30:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----