Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
File:                     JGdgNiMUO9G8eo_J2OedlVlhGGA.mft (raw, json)
Hash identifier:          eP8PtyG7HhJ6kj58k+1ODIaEBaKKvePisVLy6ditTtM=
Subject key identifier:   B7:74:5C:DC:F2:47:86:C0:C9:FA:9B:41:D6:16:F9:A2:E1:58:1D:F9
Authority key identifier: 24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60
Certificate issuer:       /CN=2467603623143bd1bc7a8fc9d8e79d9559611860
Certificate serial:       01962ECF95A76F9DE9E9AF3DEEC1F1445230
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
Manifest number:          13BF
Signing time:             Sun 13 Apr 2025 11:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:18 +0000
Files and hashes:         1: JGdgNiMUO9G8eo_J2OedlVlhGGA.crl (hash: mFKSM2oCgzDQxyDuoA8E/uF7v3nbKsoNlJlnZcg3B0A=)
                          2: l2gwnONgJJmc9aNFKVJiVvqzx2A.roa (hash: yyAEtXytlbDfVZErAQi0Mk5MO/WKce+c66TOzBmN5Ww=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:95:a7:6f:9d:e9:e9:af:3d:ee:c1:f1:44:52:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2467603623143bd1bc7a8fc9d8e79d9559611860
        Validity
            Not Before: Apr 13 11:01:18 2025 GMT
            Not After : Apr 14 11:01:18 2025 GMT
        Subject: CN=b7745cdcf24786c0c9fa9b41d616f9a2e1581df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5e:31:5d:e2:1c:27:8f:2f:0f:b9:18:96:2c:
                    82:66:0c:f6:cf:47:5d:49:ac:55:77:df:25:4a:40:
                    f4:6c:2f:a9:35:fd:41:20:0d:66:cc:aa:9c:ab:b2:
                    d6:9c:77:ca:92:2a:b8:95:00:9c:11:c9:64:fc:d5:
                    8a:bf:0f:9a:f0:15:77:c3:b3:c2:de:2a:b1:4f:ac:
                    64:36:6a:74:e0:fa:11:ad:72:2e:14:24:66:70:d5:
                    d2:3e:0e:56:cb:57:6f:6d:fb:9b:23:22:a2:df:8a:
                    b4:71:c2:1c:86:f8:1b:4e:6c:cb:be:ad:e4:d2:0a:
                    b0:33:97:c7:12:a0:a8:77:70:6e:d5:68:4c:ef:75:
                    a5:56:b5:60:b6:fb:1a:1a:be:87:2b:8d:d2:65:f4:
                    48:4e:d3:8b:5a:4c:37:e8:fc:7a:38:c8:8a:e6:56:
                    08:4c:8f:91:0c:21:e8:89:56:70:91:26:04:52:13:
                    98:d5:17:2a:1e:f4:46:ed:9f:f6:1e:85:51:05:10:
                    2b:11:a2:4d:42:70:b4:d6:17:e7:1e:f2:82:44:1b:
                    2c:09:6d:77:e9:4a:e5:dc:5e:41:bc:5a:86:69:87:
                    7c:48:c2:11:25:ed:4d:aa:1a:a3:c2:9c:f4:21:07:
                    6d:70:d2:1d:31:12:07:7a:09:a2:08:e7:fb:94:6e:
                    b5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:74:5C:DC:F2:47:86:C0:C9:FA:9B:41:D6:16:F9:A2:E1:58:1D:F9
            X509v3 Authority Key Identifier:
                keyid:24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:75:73:5c:8d:2c:47:f6:13:21:84:0a:6d:c5:33:68:20:b0:
         d1:53:28:f2:e4:97:37:13:36:0f:89:48:8c:fc:9d:9a:1f:69:
         b9:81:6e:dd:fa:31:13:3e:43:40:e9:34:34:02:7a:68:68:d1:
         b9:47:fb:10:b0:1c:11:22:06:e2:d4:a7:7a:8f:0e:1f:8f:c2:
         76:52:7e:8d:27:1b:68:c7:b6:81:f2:5c:41:80:3d:d5:46:df:
         b1:1c:6c:10:40:f3:ea:ab:b5:2b:dc:04:b7:a2:ee:69:af:3b:
         37:7e:1c:c7:96:24:2d:77:96:4b:74:8e:13:75:c1:74:57:45:
         4f:11:20:61:73:d3:07:14:e3:6c:7b:61:9f:7c:1e:ca:f5:ee:
         1e:4e:a1:75:e9:52:07:46:fd:64:e7:f2:d6:4b:07:43:23:c9:
         58:ed:62:16:47:c8:aa:31:4d:ce:10:ad:3f:86:ca:3a:f7:29:
         b2:76:8f:4e:f6:c2:a5:ad:ba:b3:ae:4d:64:ed:dd:9e:d6:57:
         17:fd:35:b9:65:4d:97:59:e3:f8:bb:21:3d:91:b6:59:50:48:
         e1:af:30:7a:e0:8e:78:28:e3:7e:80:f7:df:17:3e:6f:6a:8a:
         b6:4e:fb:50:b8:2a:ed:72:41:92:e8:45:68:74:58:1b:52:ee:
         cd:48:3d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----