Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
File:                     JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft (raw, json)
Hash identifier:          MPe5VgYtV1xZvHRtwJLsj11rkS09bvIoJ3Wbztb70lE=
Subject key identifier:   FE:9A:D8:36:A8:3D:F2:B1:68:78:7B:5B:8D:53:92:07:24:1C:61:7C
Authority key identifier: 25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
Certificate issuer:       /CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Certificate serial:       01962E98BD03F34FF1F6C8A9E0D5C2E7209B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
Manifest number:          0830
Signing time:             Sun 13 Apr 2025 10:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:23 +0000
Files and hashes:         1: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl (hash: kZmFBGrJLIxOkLVyr+YPe0RwnRERe114JgFRkozVEcA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:bd:03:f3:4f:f1:f6:c8:a9:e0:d5:c2:e7:20:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25443e3e03a67f946e63b225f43c914bb9325ccb
        Validity
            Not Before: Apr 13 10:01:23 2025 GMT
            Not After : Apr 14 10:01:23 2025 GMT
        Subject: CN=fe9ad836a83df2b168787b5b8d539207241c617c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:85:a9:c4:14:e0:b8:ad:6d:b6:8d:c9:e9:f6:
                    32:d3:52:c4:e3:b3:d6:31:90:8d:5f:a1:20:28:9c:
                    fb:73:0a:74:1b:4b:13:a2:dd:b6:6f:2b:a4:3b:1e:
                    38:aa:80:f2:1e:e5:92:6c:ed:27:f2:8c:76:18:5f:
                    f0:53:ac:fb:cb:e6:9f:29:00:86:0d:88:d7:e0:74:
                    65:90:37:e6:42:b9:0f:ea:93:ae:e2:97:c4:95:13:
                    55:00:4e:d5:43:ff:6f:e2:74:2c:1b:3e:e0:21:3f:
                    6c:1f:a9:33:b9:be:85:f8:36:20:9f:da:ff:85:89:
                    9e:c8:e8:cf:0b:eb:49:0e:8b:6c:d1:df:fa:52:44:
                    2c:c8:02:fd:6d:5f:45:11:5c:5f:77:30:4b:e7:9c:
                    0f:60:fa:b2:5e:19:f2:4c:1a:7a:83:eb:38:5e:73:
                    3e:29:30:14:d4:71:83:6d:0e:4d:ec:a3:20:cb:f8:
                    49:9b:ee:65:34:99:2b:33:ff:f8:cb:4d:38:28:63:
                    5a:87:f3:ea:6f:d7:f3:dd:30:75:51:7f:de:f2:56:
                    6d:7f:61:be:3c:e0:21:8e:47:73:06:1c:cd:95:76:
                    c3:40:a8:c5:e6:54:fb:2c:0a:55:4c:2c:b2:34:2e:
                    39:14:76:3d:52:7b:4b:51:7c:e0:1a:94:8e:81:55:
                    52:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9A:D8:36:A8:3D:F2:B1:68:78:7B:5B:8D:53:92:07:24:1C:61:7C
            X509v3 Authority Key Identifier:
                keyid:25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c5:06:9d:5c:4b:69:82:02:9f:a6:0e:9d:07:60:5f:df:5c:
         d0:9c:ae:51:ed:fe:bd:93:45:1d:9e:97:4e:fb:06:d8:ee:f2:
         3f:c0:b2:ab:28:38:91:dd:8d:29:9a:28:45:6e:a5:65:5b:5a:
         71:34:b3:58:c8:38:53:c2:0c:f4:11:a0:cd:9f:2e:f3:d8:80:
         99:68:c2:b3:38:1e:8c:b6:14:a5:e3:53:64:dd:9c:6c:72:bf:
         48:74:d0:e8:8c:df:91:fc:e7:f5:ec:9a:2c:f4:70:ba:95:57:
         e4:07:0f:9b:6f:3b:9b:d2:8e:b1:2c:8b:31:e9:bc:6b:de:e6:
         90:20:82:46:0e:7a:67:aa:b9:6a:b0:e4:92:e6:b1:9d:9e:bc:
         5f:71:38:c9:05:7c:fc:a8:92:51:72:62:7b:b1:c8:c0:c6:12:
         9b:74:57:22:a0:54:d2:b0:2d:f0:d3:19:5e:ea:1c:3f:15:88:
         a4:0c:0b:57:be:40:90:f8:89:48:ce:cd:ac:ba:8b:a6:7a:b5:
         10:97:23:37:07:10:89:00:31:42:ad:2c:cd:ff:42:8b:7a:d7:
         02:c3:f4:c3:ab:65:e2:d6:c6:eb:58:c1:8c:ec:9d:7b:7b:e9:
         73:45:27:4b:dd:ed:36:b9:18:2b:a8:c3:53:65:10:dc:d2:8a:
         3b:d9:d6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----