Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
File:                     CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json)
Hash identifier:          sIEFUB0h5SC7q9Qx79X6dzYDJoU7UYOFDMQ3184Qlq4=
Subject key identifier:   06:5D:EE:0C:08:88:EA:90:0D:2E:18:1B:15:4C:B1:2D:EC:6E:32:5A
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Certificate issuer:       /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial:       01962F74BFB62C72E02CA4368FA39BE8AEFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: b9MRvnSjlSk5YRf7mVwoIjp8RKgZVosFclXKPKiWERY=)
                          2: y1lINwCoifyovhdAeAf2rHi3ZHU.roa (hash: wdFrAh4YUjbnThTYrymA+tW+SWC0S+T+ZCRyXfvs7nw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bf:b6:2c:72:e0:2c:a4:36:8f:a3:9b:e8:ae:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=065dee0c0888ea900d2e181b154cb12dec6e325a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1d:1b:9e:54:51:b4:e0:b9:67:33:f2:c5:32:
                    08:ab:72:50:2b:e0:53:38:ab:6f:0c:43:6c:e7:31:
                    0e:74:0f:46:54:85:92:65:ea:2e:3e:8c:29:a0:89:
                    57:47:ca:ef:b9:28:10:c6:ed:1c:07:e5:3b:74:7a:
                    47:b6:e6:d6:61:f9:3b:8f:23:fb:29:9f:5a:99:01:
                    e2:f0:7b:e6:e8:29:99:18:f3:e4:bd:fd:38:9f:97:
                    e2:c0:2c:30:d8:a4:59:c3:d6:ae:ea:e0:d6:8f:39:
                    25:03:5c:c5:71:7c:a9:dc:35:d6:f7:a7:c5:f1:d8:
                    e8:dd:6e:bf:69:f8:e3:12:d7:5b:e4:38:02:d2:79:
                    aa:1e:78:fc:2c:a9:d8:a0:91:df:00:ca:6c:6a:d5:
                    11:83:b3:00:f1:14:74:c0:f0:df:48:c6:92:62:46:
                    f0:ee:cf:0b:21:24:56:10:85:4b:75:cf:d5:a7:3d:
                    9e:98:21:aa:f3:74:05:c3:79:be:09:76:d7:0a:8e:
                    eb:b3:be:3b:73:e8:89:f4:43:83:ed:75:66:cc:5f:
                    d1:48:90:64:ac:ad:1c:e5:dd:99:b5:c9:59:c4:56:
                    a2:1b:a7:26:e6:7c:76:d7:7d:86:08:6b:4d:29:c8:
                    c3:48:50:4b:e7:42:9c:14:5b:35:ad:09:30:92:7e:
                    b1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5D:EE:0C:08:88:EA:90:0D:2E:18:1B:15:4C:B1:2D:EC:6E:32:5A
            X509v3 Authority Key Identifier:
                keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:bc:48:15:b3:d5:dc:a6:de:cd:be:e8:ce:73:b1:62:15:98:
         c2:83:d6:b0:c8:44:1f:d5:17:d4:8d:2f:bd:f7:97:d9:42:31:
         fb:1f:9c:79:e9:56:ca:9f:3a:e4:49:24:1c:14:17:8e:69:00:
         8f:7f:b0:11:02:a1:5e:d1:0e:a8:d6:ef:38:30:14:f7:c0:e8:
         da:19:d0:c6:d5:c5:4e:10:a7:82:5b:7d:ca:ac:8f:89:53:cf:
         9a:b3:cb:2f:b0:91:50:9c:33:c1:ea:cd:8d:0c:d7:3c:89:a4:
         96:16:01:bc:8f:fc:68:6a:88:8f:4c:c6:50:06:a1:55:b1:5e:
         06:f1:04:a1:0e:d3:6d:c7:ff:11:0b:f9:4f:4d:27:31:17:37:
         24:3b:5a:ad:ec:8d:b0:ad:ee:ec:a2:1f:a8:7c:4a:bd:c5:90:
         97:e6:9a:d8:99:6f:ab:b1:0c:80:10:b9:4d:59:ad:0e:39:26:
         6f:57:ea:f3:3c:2a:e8:86:3a:9d:ea:81:93:56:97:2c:e9:88:
         ee:4c:2b:10:35:c9:60:b2:93:2c:24:fb:f7:ff:26:dc:72:9f:
         a5:16:bb:18:61:d0:12:a7:dd:86:58:9f:50:8c:be:08:ba:a1:
         4f:45:31:4f:9d:ec:86:28:12:b4:7c:05:e5:cc:33:04:db:97:
         8b:a7:37:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----