Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
File:                     JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json)
Hash identifier:          N0LC4X8TA8wO4uep/3dSlg+IEHza0V1IIQWy6JHtxvM=
Subject key identifier:   7D:33:09:38:20:38:B5:E8:09:72:73:E2:98:3A:8F:9C:56:2F:16:02
Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
Certificate issuer:       /CN=240fd0d33886d839c5cc90103a186e13a348ad50
Certificate serial:       01962E9984A7121AB264B02C8CDB5E56812A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:02:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:14 +0000
Files and hashes:         1: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: lIf0C03FCQ3+oKyX9dAI6U0B3cCyPr50uKsF/7ZOprw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:84:a7:12:1a:b2:64:b0:2c:8c:db:5e:56:81:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50
        Validity
            Not Before: Apr 13 10:02:14 2025 GMT
            Not After : Apr 14 10:02:14 2025 GMT
        Subject: CN=7d3309382038b5e8097273e2983a8f9c562f1602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d1:da:3c:bf:64:84:d1:bb:91:72:4c:9b:ab:
                    e5:be:5f:ed:51:2e:23:d4:3e:4a:a8:2e:50:ec:35:
                    8a:4e:62:56:7e:f8:37:39:2c:4d:10:50:b7:84:0b:
                    68:c3:ff:04:3c:c6:4d:46:2b:28:43:f6:b8:ed:7a:
                    50:b6:87:6e:b9:36:fe:c8:78:47:fd:ef:01:c0:8f:
                    10:94:7b:0b:d6:29:be:94:59:9e:92:df:3d:41:48:
                    34:2d:e7:09:30:06:11:7f:10:4c:83:a3:90:e8:ad:
                    e6:35:88:94:4f:0c:4f:53:b4:50:25:6b:93:da:7e:
                    f7:f9:1b:35:ff:bc:7f:1c:e8:25:e0:d8:32:b5:a0:
                    e9:99:04:a9:36:35:0d:9a:67:af:9e:12:e1:15:e4:
                    dd:19:4b:fa:28:37:01:5e:cc:9a:53:de:63:1e:3a:
                    b0:ac:17:e0:b2:a1:e0:de:69:98:fe:83:7b:9b:e1:
                    60:23:0d:d4:91:ea:a9:ad:48:9b:d2:2f:5e:5b:62:
                    7a:a0:c6:be:8f:1a:a0:37:60:14:fe:34:6e:7f:d3:
                    54:df:45:14:f9:d7:0c:8b:39:a7:18:c8:bc:fc:42:
                    9d:10:92:5a:59:55:73:99:76:bb:95:1b:d7:8c:bc:
                    05:c4:96:3b:15:fe:7e:27:18:68:eb:d4:2d:30:64:
                    00:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:33:09:38:20:38:B5:E8:09:72:73:E2:98:3A:8F:9C:56:2F:16:02
            X509v3 Authority Key Identifier:
                keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:85:10:84:03:4e:87:54:c0:02:84:3c:39:e7:52:31:a6:94:
         14:2a:df:c6:6a:20:1b:b8:04:36:38:54:70:e0:28:4a:ec:84:
         f0:a2:f4:73:2c:69:1b:43:73:5b:fc:03:45:d4:59:67:2b:c0:
         46:53:df:3a:4a:71:4c:1e:44:1a:cc:50:6f:5a:60:12:1d:36:
         54:50:e6:8d:dc:c9:9f:bd:ef:e0:05:8f:41:79:3f:b0:50:c4:
         f5:47:1c:d3:28:b6:22:70:ff:b8:5b:9d:d6:49:aa:14:a4:3d:
         5e:fe:60:0f:0b:6c:a0:49:69:e2:45:e5:29:89:25:86:39:db:
         5e:80:15:80:39:66:f5:de:e7:62:49:48:72:04:58:34:1f:5b:
         3e:38:71:82:2e:bf:ec:42:b5:a2:26:7c:79:dc:cc:50:b1:ec:
         50:60:bd:e0:f5:9b:44:e7:d0:2d:51:02:a1:92:11:a7:8c:a6:
         54:b2:60:bf:6e:81:d2:04:13:eb:aa:d1:34:58:3a:ae:d5:e4:
         1a:55:2d:c9:08:46:e5:e2:00:0d:02:ca:db:96:a1:bd:17:78:
         cc:18:a9:17:8c:75:d6:b4:30:40:c1:55:11:83:1f:e0:e5:e2:
         76:d8:17:4c:12:b2:b0:7e:81:76:4e:fe:ca:9a:3a:d1:f2:6f:
         7b:3a:0b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----