Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
File:                     jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json)
Hash identifier:          l620X6Qk3/qa0gySCmcBWJG4LeJUMdWzEncdA8jLqS0=
Subject key identifier:   74:5D:C1:0C:AE:B3:6C:6B:D7:BA:86:57:16:98:9F:2C:D6:DC:36:7D
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Certificate issuer:       /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial:       01962E2B0AB3332061379DD4348ED197C5D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
Manifest number:          0DF9
Signing time:             Sun 13 Apr 2025 08:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:34 +0000
Files and hashes:         1: bmmsoMxYv54D3Mc8ZLTs5VomINo.roa (hash: kqjLBEFpjOoFx6G/izyFkQ1F3RKWyrbgiXrW4EShNUE=)
                          2: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: HcM3BXNYAMZsNGRvrsR9s8dhd3bqbacY8vfnsc6oFZ8=)
                          3: snNBqH-54jS2dGd9kUA2wImuV_A.roa (hash: +KuCAVSEZ2fMvcpoRb3reL7YI4QgXbzX9w7SZK+eaHQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0a:b3:33:20:61:37:9d:d4:34:8e:d1:97:c5:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
        Validity
            Not Before: Apr 13 08:01:34 2025 GMT
            Not After : Apr 14 08:01:34 2025 GMT
        Subject: CN=745dc10caeb36c6bd7ba865716989f2cd6dc367d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:91:d8:fc:86:05:86:b4:11:16:c3:e3:3f:21:
                    47:f6:62:11:81:54:a6:6f:3b:58:a2:a2:f5:ae:62:
                    cf:d4:2d:9c:c5:b2:ca:30:26:4a:25:0f:fa:0c:11:
                    e9:9a:30:83:eb:b0:ab:f2:20:9e:da:9f:96:5f:5a:
                    eb:53:08:e1:22:11:01:24:e6:f2:4f:da:79:bf:2b:
                    ae:31:9f:1c:06:e6:8d:38:85:cb:4e:79:e2:07:8b:
                    b0:4a:22:42:fb:13:d8:26:6b:12:15:52:16:58:2a:
                    82:b6:7d:f4:e8:50:3d:a3:2c:d3:8d:26:0d:46:89:
                    bb:71:7b:08:82:67:42:79:28:8a:4a:52:d7:a4:af:
                    7d:dc:40:1c:9c:ad:51:90:ef:73:db:cb:1a:89:44:
                    68:7e:50:2e:b4:2b:4c:ed:22:89:4c:fc:79:56:d6:
                    40:43:5a:1d:16:15:90:3d:7a:5d:1f:79:b2:70:2b:
                    a3:ca:38:2f:34:61:36:9d:9a:5e:55:da:6a:47:9b:
                    fe:5c:7b:e8:1d:b1:72:a0:aa:07:61:6d:61:b5:df:
                    d6:00:61:89:b2:1e:cc:ee:ba:3f:c2:6d:81:6b:a5:
                    e3:9c:43:06:d9:2c:7a:38:25:d7:6a:11:44:44:a2:
                    28:fa:fb:ce:b5:4f:ee:26:38:9b:39:e6:0f:1c:8d:
                    4c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5D:C1:0C:AE:B3:6C:6B:D7:BA:86:57:16:98:9F:2C:D6:DC:36:7D
            X509v3 Authority Key Identifier:
                keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:bb:da:9a:4b:65:5b:23:84:e3:80:69:37:9e:b4:4d:f5:be:
         de:89:29:3c:6e:58:88:b8:2c:6b:73:84:2d:6c:64:f3:ff:81:
         eb:9e:3c:3a:7d:e5:e6:f1:d0:fb:b7:4c:5a:3e:1e:1b:2e:60:
         39:57:ab:66:37:ba:04:55:09:c5:49:85:43:d5:19:53:53:28:
         dc:ed:f8:3d:ae:4b:58:a8:f4:2e:a2:0f:5f:94:54:95:78:bb:
         8f:2f:9b:16:8b:64:a2:7c:c3:18:2b:e5:5f:cd:4d:80:76:7e:
         41:cc:fa:93:1b:e1:1d:d9:b1:1f:85:11:e9:1a:d7:74:b7:e7:
         37:bc:7c:68:c7:02:44:42:bd:4f:24:61:65:08:4e:e6:fa:4b:
         ba:f4:77:d5:b3:a8:ac:86:ed:0f:1f:3e:6e:96:48:dd:f3:38:
         ff:54:17:2d:bc:10:fd:c3:16:93:b6:71:80:a0:1a:01:0f:03:
         38:68:80:94:d4:f6:94:46:4a:12:e3:25:12:0b:6a:80:56:cb:
         2b:4a:8b:31:80:c0:a4:85:03:87:ac:b9:07:a1:b7:db:20:3e:
         41:77:82:cb:fc:86:28:78:80:70:f3:10:e3:2a:80:22:fd:1a:
         4c:53:b4:2f:a9:d5:3a:cc:e6:0c:87:43:38:26:fb:98:08:93:
         46:d3:38:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----