Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
File:                     J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft (raw, json)
Hash identifier:          77gNrst/4Jy+QbkDhg3fVztl2c8iTe9rcczRjIJzhmI=
Subject key identifier:   AC:EE:52:8B:82:65:84:C3:A1:1C:5E:00:48:87:E1:0E:65:85:35:AA
Authority key identifier: 27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
Certificate issuer:       /CN=27802685da734b157a2db9ccff76dd4e48911928
Certificate serial:       01962F3D8B150D8932524EE48F2F72A04190
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
Manifest number:          1203
Signing time:             Sun 13 Apr 2025 13:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:24 +0000
Files and hashes:         1: J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl (hash: WioP46BLDM/AFGuBieIpObTaZtCQ+SfQT+S1+YZ2Z4I=)
                          2: bMRktPBk3GJGItNskNyUqcrOWmw.roa (hash: oN+XpyM7329DMObxCObtViAvj7EaNMyaASixYhlQlxY=)
                          3: qA9dHWC6g1Mf2FGuCg-UfT6dHa4.roa (hash: tu6gozK2xpe2ojLmfpogjmMhCMxCaqiedX62p8ai78g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8b:15:0d:89:32:52:4e:e4:8f:2f:72:a0:41:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27802685da734b157a2db9ccff76dd4e48911928
        Validity
            Not Before: Apr 13 13:01:24 2025 GMT
            Not After : Apr 14 13:01:24 2025 GMT
        Subject: CN=acee528b826584c3a11c5e004887e10e658535aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:77:91:ec:66:33:b9:81:b7:34:ee:90:08:d2:
                    21:33:40:7b:17:b9:32:4b:fa:66:0f:a6:f2:9c:12:
                    6f:dc:d6:5c:3a:5e:82:bf:a8:b9:3c:e5:52:54:eb:
                    12:d6:fa:20:07:0c:50:a3:42:f2:c9:7f:a0:c9:d9:
                    b1:80:ab:1a:a7:bc:55:2e:cd:a5:6d:b8:8a:b8:49:
                    cd:a2:92:8b:d9:2d:00:a5:cc:d6:5c:84:e2:f0:67:
                    2b:86:f2:32:61:a0:17:5f:85:be:3d:5c:98:8b:00:
                    4a:7d:dd:c8:85:4c:6c:a2:c7:03:ae:88:48:8d:b0:
                    06:ec:70:e9:b0:33:6e:1b:83:58:bc:e3:15:43:bb:
                    ff:4f:dd:1a:bf:2f:57:97:db:f9:1c:8f:2c:60:fd:
                    0d:fe:0b:16:23:76:fa:9c:33:1f:4e:54:fa:ed:3f:
                    e5:c7:43:28:c4:20:dc:78:63:42:e8:21:18:91:1e:
                    3e:90:ec:19:85:7f:36:94:ab:9a:80:68:fb:85:05:
                    af:06:ff:d8:7d:e2:c9:d6:08:f9:7d:c1:0b:7c:52:
                    be:7a:8a:34:6b:b6:c8:91:c3:28:58:ac:9b:df:dd:
                    87:c1:1f:2c:38:e5:31:f3:8c:72:8d:ca:f8:94:82:
                    93:62:0b:85:bf:70:38:87:a0:6b:81:84:b9:23:6e:
                    21:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EE:52:8B:82:65:84:C3:A1:1C:5E:00:48:87:E1:0E:65:85:35:AA
            X509v3 Authority Key Identifier:
                keyid:27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:2c:ca:97:4b:42:e9:dc:52:3d:d0:5a:dd:ba:84:dc:ac:bc:
         63:31:c2:d6:c9:f2:86:08:79:0f:ae:f8:91:08:53:b9:fe:4d:
         3f:95:e4:25:07:46:ed:68:7e:28:61:83:4b:23:cb:c4:08:70:
         95:fb:42:86:89:3c:94:7f:4c:e5:53:9a:76:88:26:86:53:20:
         32:12:3f:39:f6:9e:7d:42:ec:d5:dd:fb:4e:30:07:fd:8f:1f:
         69:23:8d:1d:d8:90:4d:6e:21:56:2e:16:05:f6:17:cb:c0:fc:
         cb:ec:fb:e6:37:0d:c1:18:18:ec:ff:54:59:a8:19:87:7a:4d:
         48:36:c4:72:9e:67:d5:45:e6:30:89:f3:30:70:60:86:9d:d5:
         63:7b:64:3e:6a:d0:5e:40:c4:16:88:0f:64:e2:72:0b:f9:d2:
         6f:51:a9:11:06:66:8e:6a:23:a7:a2:6e:5e:91:79:e8:65:84:
         cb:7a:3e:ee:02:8c:5f:e9:69:17:00:9f:b6:d6:c3:0d:6a:20:
         41:43:87:b8:c8:2f:e8:b7:30:3b:3c:fd:45:f0:93:9c:c4:74:
         3e:c8:76:ba:3a:20:b9:9f:de:29:5a:9d:52:14:aa:f1:46:d9:
         c8:e2:bc:94:69:05:32:a3:33:e0:17:11:b2:56:72:7b:0c:7d:
         29:16:36:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----