Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
File:                     CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft (raw, json)
Hash identifier:          oMS7BBkXswXOR5XDBXWnHgU3ULFRfjUKktclKy1p7Qw=
Subject key identifier:   7F:55:4C:44:45:11:83:54:76:0E:8C:5A:D5:69:CB:77:A2:71:71:6A
Authority key identifier: 08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
Certificate issuer:       /CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Certificate serial:       01962E9978AA5F32660021BA2E2259F36CBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
Manifest number:          11EE
Signing time:             Sun 13 Apr 2025 10:02:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:11 +0000
Files and hashes:         1: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl (hash: bzCZaCOjtzgf81CnTlKHZdIQR5T8fiqPoiz2OfZ4IYA=)
                          2: b5Jj4qgundIuSAAGFCkt8JiFnho.roa (hash: 06WuFnYu9V9s1QGtR8S6F/K40CDV7ycfNQPEsDlVYUY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:78:aa:5f:32:66:00:21:ba:2e:22:59:f3:6c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
        Validity
            Not Before: Apr 13 10:02:11 2025 GMT
            Not After : Apr 14 10:02:11 2025 GMT
        Subject: CN=7f554c4445118354760e8c5ad569cb77a271716a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ee:49:ea:68:9f:d6:f6:e9:2c:9c:7a:2c:4b:
                    0f:bd:1e:27:3f:4a:ec:3c:fe:0e:07:6c:ca:f0:01:
                    3d:64:15:46:2f:ea:dc:b6:f8:a5:9c:d0:fa:df:b9:
                    58:48:a0:23:2b:57:42:93:f3:05:8d:58:fb:ce:d3:
                    af:df:24:6b:ba:46:b8:7c:0d:ab:b9:de:51:9c:e9:
                    bd:22:d8:d7:9a:86:dc:03:13:55:0e:09:93:a7:15:
                    cd:33:d3:b4:d6:4e:31:d7:bd:b0:e1:a1:f4:0f:96:
                    74:1a:aa:f4:e6:82:43:11:dd:be:5a:6d:7c:46:6a:
                    8d:b6:df:07:2e:49:fd:02:f5:66:e0:d4:78:e4:62:
                    30:b7:7a:1e:4f:3f:4c:06:a1:d8:25:2f:b0:4a:ec:
                    5d:61:c7:65:d8:7d:90:16:f3:37:49:5a:ad:78:a2:
                    2c:3a:f9:60:e4:86:a8:14:53:b3:3d:78:16:75:59:
                    b2:8e:f5:bb:07:34:0a:bd:80:32:0a:f9:42:94:15:
                    7b:c9:65:24:fa:6b:69:a7:d4:43:8f:27:99:03:e6:
                    9f:ab:46:e1:b8:2e:9c:22:99:7e:f6:9e:9a:70:46:
                    07:fc:b5:63:29:0e:c1:9b:b6:f3:4c:e8:6f:22:b0:
                    36:79:e7:ec:b8:e7:d3:02:b7:23:3e:21:0a:19:f2:
                    75:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:55:4C:44:45:11:83:54:76:0E:8C:5A:D5:69:CB:77:A2:71:71:6A
            X509v3 Authority Key Identifier:
                keyid:08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:74:40:87:5b:db:38:09:16:92:34:30:9f:b9:e5:f2:c3:8a:
         83:a0:bb:fc:5c:81:d7:2c:29:0a:16:f0:96:f6:ef:dc:11:a6:
         f6:fe:13:1f:1b:1c:bf:19:68:69:bb:37:6e:9a:8c:23:a0:66:
         c0:7e:b8:5c:f9:3a:d4:11:f2:19:bf:e1:15:e0:70:e8:30:79:
         52:07:eb:cb:86:2e:77:84:bf:0c:8e:58:ad:03:2f:28:11:18:
         6b:ac:75:ca:65:7b:d9:a3:5e:36:b4:f6:33:9c:20:28:8a:8c:
         f4:96:7f:f9:91:29:a0:c4:a8:5f:53:cd:11:7d:3d:04:34:c6:
         e6:e2:f0:16:e2:a6:b3:93:4c:8f:7d:cc:d4:81:fe:8b:29:8f:
         66:35:ef:f8:bf:bc:9e:ba:35:67:10:aa:98:3c:39:35:c1:97:
         01:47:2a:30:07:49:ce:90:18:2c:5f:41:2b:0d:88:bb:7e:ed:
         78:e6:a6:bc:4e:28:f4:2d:53:12:7f:62:c8:3e:24:d8:60:6a:
         bd:3d:71:0d:0d:b6:e3:e9:46:b8:a5:18:a0:39:93:a7:73:2e:
         34:b6:e6:8a:67:79:6a:1d:22:a1:ec:a3:68:8b:e4:11:b9:da:
         82:6c:29:5a:d5:75:9e:30:c2:59:0e:8e:50:5d:90:88:08:46:
         fc:26:18:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----