Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
File:                     jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft (raw, json)
Hash identifier:          j6hkJp9kTyf+uPz3MfN/7M0m4Bn6hbCbP+ifi6VV3WA=
Subject key identifier:   90:73:52:9B:E1:1B:E7:84:D7:7A:3C:23:1A:27:D5:0F:F3:28:CD:01
Authority key identifier: 8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC
Certificate issuer:       /CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
Certificate serial:       01962ECFAC39B4BE0A296DFDDA924F2EFE5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
Manifest number:          04FC
Signing time:             Sun 13 Apr 2025 11:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:23 +0000
Files and hashes:         1: WNAfVktzCh-XkfS8vtyy2T-YFD4.roa (hash: pclJnnbGzgCJ76LUPv7qCyNBmq4QLgEVSLKPKMx/MiI=)
                          2: jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl (hash: +N0y7IpXNO/iif/BBgL9i+ocKJg06d1q9KrTV8LdzfM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ac:39:b4:be:0a:29:6d:fd:da:92:4f:2e:fe:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
        Validity
            Not Before: Apr 13 11:01:23 2025 GMT
            Not After : Apr 14 11:01:23 2025 GMT
        Subject: CN=9073529be11be784d77a3c231a27d50ff328cd01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f0:0e:33:eb:cc:0c:8c:cf:1f:61:39:f9:ad:
                    b9:11:b2:5b:35:b7:7b:07:d5:9c:cd:4f:38:58:1b:
                    0f:fa:f7:34:1e:88:8c:17:dd:90:43:d3:db:07:83:
                    86:ef:72:50:07:35:36:61:de:a6:f3:aa:57:99:c4:
                    b0:79:6f:94:02:72:90:c0:59:c9:49:01:c8:ca:aa:
                    33:28:da:82:fd:50:a3:00:c0:4b:41:4d:72:ed:55:
                    c7:bc:bb:b7:40:0e:e5:eb:04:cd:51:4f:95:d1:68:
                    5f:9a:94:cb:9f:75:62:03:ad:9e:0d:2a:7f:9f:ba:
                    c2:8e:47:bd:a4:c6:a7:06:d7:85:a0:79:1f:be:54:
                    97:1d:07:68:63:9b:0f:89:5c:78:ed:3e:79:08:01:
                    d3:c1:52:0e:c3:46:f5:62:58:bb:df:41:70:3a:b2:
                    4d:81:5b:b7:f7:26:ac:7a:f8:3c:8a:10:3e:d4:bd:
                    02:34:21:48:7b:08:da:0d:0f:a7:b0:e3:6b:d3:6d:
                    61:1f:61:fb:51:34:d2:3a:96:3d:7d:c4:c8:05:3b:
                    0f:aa:0f:83:c8:ce:b8:34:11:10:71:d2:c8:10:ba:
                    5c:7e:a4:1e:b5:8b:4e:e1:67:c9:11:45:6b:b3:10:
                    4f:1b:3d:29:e5:5c:e6:9f:4c:93:6a:43:6e:29:b9:
                    ef:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:73:52:9B:E1:1B:E7:84:D7:7A:3C:23:1A:27:D5:0F:F3:28:CD:01
            X509v3 Authority Key Identifier:
                keyid:8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:c2:ea:ea:02:9d:03:3c:90:c1:15:95:59:5d:f9:a1:ae:82:
         6c:d5:de:cc:4a:52:4a:17:b9:20:d0:d8:11:ff:87:4a:c8:3e:
         14:96:9c:05:30:50:2d:7e:7c:ad:7b:aa:3c:06:9a:43:63:e3:
         25:bf:61:58:bc:55:0b:49:05:20:bd:1a:78:29:33:9e:ee:4a:
         da:70:43:45:29:df:25:3c:78:82:05:66:b9:95:a1:d9:f6:f5:
         88:5c:fa:47:c4:0f:03:89:16:64:53:88:e5:19:f9:fb:63:12:
         bd:2a:b7:e2:e9:ec:96:fe:c6:c6:cd:d7:80:c5:fc:f7:5c:7a:
         00:d7:5b:90:1b:7e:fc:81:14:5f:95:1a:76:33:66:2d:5d:7c:
         47:cb:72:cf:e7:5b:c8:13:d9:2c:5a:07:7e:51:61:6e:d4:f7:
         39:21:a6:f5:4d:39:15:40:c1:46:6b:42:4c:c7:7f:a1:af:27:
         a9:f1:82:85:cf:d7:9f:f5:f3:b8:8e:8d:72:8c:17:27:03:00:
         41:bb:15:16:ff:61:19:03:db:8b:e8:36:2a:9a:d1:96:c0:8b:
         dc:73:73:87:04:ac:08:f0:db:00:4d:a4:20:fd:32:b6:87:8f:
         b8:a8:b0:14:c8:c9:fa:b7:f7:50:b2:e5:20:5f:b2:62:c1:a1:
         db:11:ab:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----