Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft
File:                     JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft (raw, json)
Hash identifier:          9ypBnA/YWcLxUr8kBQIwX2QY+6xB8Nx/xbVL7vvJTFI=
Subject key identifier:   08:0D:64:31:A4:6A:A4:E6:A6:37:80:41:5B:8B:72:9B:CD:2D:C0:AA
Authority key identifier: 24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81
Certificate issuer:       /CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081
Certificate serial:       01962F06D87F8EB83060D194FD6E3CD41379
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl (hash: QEw277NZgPS0LaH91u25Qw5o1QbMyfqgaEUQyDB9o1I=)
                          2: gMRvTZlzAH8OSJTttCNJ8Cyj7p4.roa (hash: p+544aG9xmj27ntfAfl2YzT4JNjkf/4dF3LHwwe9mf0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d8:7f:8e:b8:30:60:d1:94:fd:6e:3c:d4:13:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=080d6431a46aa4e6a63780415b8b729bcd2dc0aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3b:06:8c:f9:ca:0d:f4:16:5c:3e:36:f4:35:
                    20:55:27:92:ef:e0:84:09:7f:da:c5:7e:ff:69:08:
                    bd:c5:c4:41:8c:80:e3:76:29:5a:98:2f:32:73:c9:
                    88:8a:bc:d8:61:72:e0:af:dd:2c:2a:f9:97:87:80:
                    f3:a9:e3:5f:28:04:f0:bb:3b:c8:61:59:9f:04:da:
                    cd:d0:c8:b7:c1:72:2e:ed:42:b0:3e:0f:dc:ce:5e:
                    a4:5f:02:28:8a:5c:c7:0f:3d:59:d1:f5:d9:a4:18:
                    ed:8e:52:3c:2a:ef:f6:00:40:b9:06:49:37:04:c4:
                    90:cd:63:04:eb:7f:bc:1b:42:57:ed:e8:2e:1a:d2:
                    84:c7:ba:c1:6c:7d:95:dc:55:42:0d:dd:35:19:20:
                    95:b9:67:f2:74:4c:52:c0:1d:77:ce:3b:51:da:09:
                    88:f0:6e:25:e6:c9:01:3b:8c:b7:17:2c:ea:bc:fb:
                    44:04:29:17:66:6e:bd:78:fb:88:2d:00:ee:26:87:
                    17:57:a1:dc:d1:7d:4c:5e:41:f3:c6:f2:55:63:01:
                    76:5f:79:b9:09:86:4a:a5:21:aa:e0:b6:5f:fd:2e:
                    64:a1:03:5e:cd:9f:69:d2:ed:ba:65:f1:b0:b4:55:
                    1d:50:cb:5b:c2:9f:37:fe:88:75:66:47:c9:0a:ac:
                    0e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0D:64:31:A4:6A:A4:E6:A6:37:80:41:5B:8B:72:9B:CD:2D:C0:AA
            X509v3 Authority Key Identifier:
                keyid:24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:5e:b7:05:e4:ed:ed:70:ea:a9:06:90:f1:b2:2d:cf:60:79:
         83:14:42:8e:b6:29:2a:7b:fe:75:30:f4:2d:a2:84:ad:df:bf:
         66:d4:36:dc:4f:21:9b:e7:67:8e:7c:4e:64:78:92:3a:b4:ae:
         4c:43:ed:fd:64:06:7c:1e:99:40:65:d5:60:c6:19:18:42:ef:
         39:c9:8d:82:d0:17:94:ff:d0:0c:cd:f3:7e:cb:b3:30:86:9a:
         42:0c:28:1a:d5:9c:3f:6c:62:6f:2d:5e:73:7d:80:7f:bc:5f:
         a0:b2:90:27:c9:a9:88:33:21:10:9e:54:c4:76:71:c3:59:10:
         7e:83:c4:0b:8a:18:a1:7d:1c:54:93:7c:66:60:7c:1c:b7:06:
         a9:f4:29:3d:8d:0c:19:c6:4f:65:41:fc:96:a3:59:18:48:bb:
         c9:05:10:b3:cd:3f:8c:75:49:2c:b2:fd:3e:96:08:78:04:b1:
         c8:d2:6a:a4:72:43:13:78:77:12:09:1a:72:a1:90:d5:03:65:
         e0:2c:21:cc:fb:fd:42:2f:ad:98:81:00:15:fc:e2:60:38:f4:
         b5:7d:e1:45:57:fe:1a:2d:e2:4e:d2:8a:7f:b7:0e:d2:5d:2f:
         7e:ed:9e:80:6e:66:0c:fa:fb:9e:a0:45:ff:ce:ad:6c:02:6a:
         41:d1:9c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----