Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
File:                     JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft (raw, json)
Hash identifier:          IgEMXFv2yJ/HSufqDOwQpB1Nj7kQY454opWYlnm6zbc=
Subject key identifier:   7B:9C:3C:00:64:0B:75:DB:55:C7:0B:29:09:72:C4:4B:5D:06:9D:09
Authority key identifier: 25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1
Certificate issuer:       /CN=25d25dfc652483cc7bffd6136f47735bd190d5a1
Certificate serial:       01962FAB3D3D02AB286E882BF4CF0ED1DAA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
Manifest number:          044C
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl (hash: J2WwXc1iiVDnI3/OFUCdAMFJ6Z/A1wHLWaTYL7mxrFk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3d:3d:02:ab:28:6e:88:2b:f4:cf:0e:d1:da:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d25dfc652483cc7bffd6136f47735bd190d5a1
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=7b9c3c00640b75db55c70b290972c44b5d069d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:40:b4:67:26:68:f6:29:9d:a8:b2:56:3a:
                    6d:61:5c:51:b1:77:78:51:95:88:7d:73:e4:85:b3:
                    43:c7:aa:3e:7f:81:1c:fa:df:38:78:51:8d:df:fc:
                    14:f8:96:cd:57:d6:a1:c3:82:ed:0f:dc:63:b4:7f:
                    f4:bc:a8:a4:a8:86:63:40:50:d1:a8:8b:f2:a2:87:
                    5c:f8:27:d0:87:07:0d:b1:1b:01:06:03:f7:b0:fb:
                    24:2c:08:6b:5f:31:d1:64:64:82:9d:5f:d6:16:04:
                    f8:7a:a6:09:a8:b9:8f:94:98:48:b1:8a:e3:17:ca:
                    90:b4:84:e9:ca:ff:45:6a:d0:31:cb:95:73:39:48:
                    f5:4f:01:d2:84:81:6f:45:90:2f:e1:ac:ca:a6:eb:
                    f6:cd:2d:db:fe:8d:a9:1f:13:90:c4:44:4e:56:01:
                    0c:9b:8d:c2:f0:d2:c2:df:80:b0:fd:3e:cf:08:5b:
                    16:0d:d6:84:7a:50:b3:13:7c:76:6a:10:db:c5:f3:
                    ea:6d:32:9d:72:89:3a:1b:5b:62:0a:0a:e3:83:60:
                    ff:bf:e2:8c:99:3e:ff:99:25:be:96:2b:bc:90:9c:
                    ae:63:fb:50:5a:50:3c:ab:1f:6c:20:0b:6d:63:cc:
                    91:21:76:af:69:86:9e:fc:26:92:ef:31:3c:a8:50:
                    db:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9C:3C:00:64:0B:75:DB:55:C7:0B:29:09:72:C4:4B:5D:06:9D:09
            X509v3 Authority Key Identifier:
                keyid:25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f0:fd:15:22:a0:81:74:69:4e:84:56:dc:50:7b:94:85:de:
         80:c1:1f:f2:9e:62:d6:98:6e:03:5b:21:1d:e8:da:b1:c0:51:
         8a:49:ea:42:56:50:f9:fa:ce:58:07:d4:a6:9c:42:5e:40:a5:
         68:44:cd:ad:b8:9e:54:f9:ca:a0:09:38:67:fd:7e:c1:e6:39:
         1c:3f:43:cf:8c:d9:49:ee:c9:81:80:b5:3e:71:33:6c:46:22:
         54:0b:07:dc:ec:bc:bf:d1:78:24:7a:38:28:73:b0:b3:4e:1d:
         6d:9d:f6:a2:68:40:5c:ca:e2:98:fb:1e:39:59:81:36:54:96:
         64:43:ce:f1:e7:66:82:3d:73:69:4e:8d:3f:c7:08:35:48:f6:
         86:e6:51:0c:fa:5b:44:ae:6e:9a:44:bc:2e:01:1b:74:c0:9b:
         ec:d0:80:9f:82:6b:7c:db:52:2c:ba:25:a7:be:0f:30:99:ad:
         41:ad:ab:dc:ae:f2:21:6c:38:70:80:1d:cd:9e:f1:7e:04:10:
         4d:0a:c5:69:61:9e:fe:18:1c:04:a9:5c:cb:2e:12:bb:76:cd:
         ef:93:ed:5c:bd:bf:93:94:ad:13:c5:30:d3:7e:ff:3d:11:4d:
         29:44:73:b3:a4:e8:34:6b:3a:f1:4a:1e:d7:d4:f6:61:44:c4:
         35:70:e7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----