Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
File:                     JFLek3DCDvG6TX_huwGPP239yc4.mft (raw, json)
Hash identifier:          Ra14l5O6nDxz3AdfgxSXOaZm6XbptvX6QVae7yMeBwI=
Subject key identifier:   7B:94:E5:C5:0E:B6:F5:5C:14:87:10:55:80:3D:33:AF:83:54:8C:AE
Authority key identifier: 24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
Certificate issuer:       /CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Certificate serial:       01962FAB9ED7FF122A01AC03A7992D41826C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
Manifest number:          0B7F
Signing time:             Sun 13 Apr 2025 15:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:38 +0000
Files and hashes:         1: DdP_Bqbhgl16gdJsvkBhi1YcDjQ.roa (hash: I6Jh8sH5S9Q2lg3Ub1gkdbdEGtUo1NZqfvOrCbSIvmc=)
                          2: JFLek3DCDvG6TX_huwGPP239yc4.crl (hash: i+4MmmDuPrW9qpN4+PxrXX+0MaB7fTaYG4RpyalG3J4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9e:d7:ff:12:2a:01:ac:03:a7:99:2d:41:82:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
        Validity
            Not Before: Apr 13 15:01:38 2025 GMT
            Not After : Apr 14 15:01:38 2025 GMT
        Subject: CN=7b94e5c50eb6f55c14871055803d33af83548cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:84:d4:8d:39:93:09:a8:2b:0e:22:77:0f:20:
                    73:fb:7f:23:e1:a2:f1:19:e2:d4:be:d7:21:28:af:
                    f7:52:9a:06:1c:00:5f:79:02:b3:9b:eb:9f:9d:73:
                    37:a1:31:d3:08:68:fd:57:02:e7:97:ae:50:92:51:
                    27:6e:ba:8e:71:95:b1:96:bb:92:2c:7e:ff:51:8f:
                    47:28:3b:2c:58:f6:01:79:e1:8f:df:be:de:f6:8e:
                    76:f6:e7:6c:d9:7a:cf:a1:c5:68:e8:ab:bb:40:18:
                    16:8e:14:a5:c9:bb:6b:54:1c:f1:af:78:69:6b:52:
                    d0:d8:f7:16:74:c4:53:08:8c:00:ae:1e:6c:8e:3e:
                    21:3c:9e:eb:e8:38:24:10:01:9e:9b:75:ff:42:ca:
                    af:5a:4c:90:2a:05:a2:ef:42:8f:31:4f:d0:bf:df:
                    9e:1f:a2:61:43:16:18:55:31:ce:a8:41:cf:75:99:
                    c1:a1:50:0a:0a:dc:23:e4:07:00:b3:49:cc:0c:56:
                    a8:e9:9a:86:9f:54:57:44:88:04:90:91:02:97:8f:
                    87:21:f3:e5:31:da:25:80:2e:f4:84:bf:71:47:52:
                    26:50:99:14:57:2f:af:78:1e:d9:e6:c7:5d:63:74:
                    87:3e:2b:ba:2a:6e:c0:77:f9:28:40:4d:40:8e:3f:
                    30:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:94:E5:C5:0E:B6:F5:5C:14:87:10:55:80:3D:33:AF:83:54:8C:AE
            X509v3 Authority Key Identifier:
                keyid:24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ba:dc:60:d1:f0:f7:67:20:e4:ca:2b:a1:c3:a4:55:d7:05:
         c2:00:d6:18:5b:8c:3c:21:83:93:4f:92:1d:41:16:e7:f2:ef:
         b4:4c:8f:51:18:50:06:8d:2c:d7:3a:05:74:de:92:ff:64:32:
         cd:61:ac:f1:08:7f:c7:89:8e:fe:3d:f4:6a:29:96:92:a6:06:
         07:19:97:e8:00:8c:91:9e:a7:4b:f0:57:ab:8f:f4:35:9e:a2:
         b7:81:ab:4c:f2:b3:4f:e7:fd:cb:61:16:a8:9e:09:93:4f:82:
         43:cf:e7:ab:84:ba:09:2c:fa:bb:af:c5:0c:4d:88:8b:c7:1b:
         0c:59:25:fd:7d:41:38:89:94:77:52:ff:a0:04:b0:58:76:7b:
         48:64:e5:b7:09:fe:62:d6:6b:1f:f7:3c:a4:1d:ac:2e:bd:81:
         27:dc:c5:1f:3e:52:a3:ad:93:e3:80:f7:ed:96:7f:89:c3:01:
         7e:d7:65:69:4f:54:4b:ff:41:31:9e:74:35:e4:b1:7d:91:e5:
         f0:28:4e:da:2a:86:e5:b0:4f:50:55:8a:c1:33:82:1b:6a:49:
         e3:c8:20:73:19:2c:be:c6:32:c4:60:ed:ba:35:0e:b6:1c:9a:
         ca:47:2d:f8:f6:39:3d:41:2c:fd:e5:d0:51:79:90:e0:4c:44:
         1a:bb:8b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----