Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
File:                     JUdfWtnsz_acNaYw3P8sWmY_188.mft (raw, json)
Hash identifier:          dUS5IfVlIJMWJlJrUtjtwJKBE/+w1iL4RlH+YwrIQKQ=
Subject key identifier:   78:76:57:D8:E9:56:E2:2B:B3:E8:9D:12:AF:D8:83:29:28:26:57:94
Authority key identifier: 25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
Certificate issuer:       /CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Certificate serial:       01962E9914094F71C5141F5CD4F619D04AC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:46 +0000
Files and hashes:         1: JUdfWtnsz_acNaYw3P8sWmY_188.crl (hash: puptMz5dyqZuAO6yGHETxjrqAbt4W0g5HhgVF2yoA98=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:14:09:4f:71:c5:14:1f:5c:d4:f6:19:d0:4a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
        Validity
            Not Before: Apr 13 10:01:46 2025 GMT
            Not After : Apr 14 10:01:46 2025 GMT
        Subject: CN=787657d8e956e22bb3e89d12afd8832928265794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4f:01:a9:bc:de:f8:aa:7a:cc:90:46:ea:62:
                    85:59:91:a7:05:48:17:de:72:75:57:9f:42:c1:44:
                    f4:2d:f9:5a:79:1c:40:6c:86:41:c4:a7:b6:a7:30:
                    08:ff:34:6c:bd:0c:92:a6:34:92:10:89:18:0b:ca:
                    15:b1:3f:02:58:15:e4:e0:4b:75:0d:2c:41:43:5a:
                    9d:5c:98:31:9d:e7:e7:98:c1:b5:dc:1e:82:4c:b6:
                    0e:43:1a:91:8c:9a:ce:0e:bf:81:b0:f3:4d:9c:e8:
                    86:2f:d2:ea:6a:1f:a3:85:1a:fa:11:da:7c:74:e8:
                    71:9f:f8:42:15:f1:ed:14:75:c0:93:d1:24:0d:f7:
                    38:08:a1:fd:32:54:5a:ea:e7:08:a6:1d:ef:d2:c2:
                    07:ac:ff:f8:88:da:9b:b3:d2:66:a5:d5:12:09:16:
                    21:8d:4a:09:2b:d7:1b:25:ce:57:dc:7a:84:db:bf:
                    e2:16:29:2f:23:39:49:5e:cd:a4:df:b7:95:ac:dc:
                    5f:b2:62:72:60:54:6c:8e:99:cc:3a:ca:ca:2b:b7:
                    dc:26:16:62:a7:46:cd:5d:1f:58:88:f5:d9:93:e6:
                    f2:07:5c:d3:5e:4c:ef:5f:cc:94:ba:23:61:a6:15:
                    b5:94:04:90:03:38:35:c1:f7:67:1f:18:c8:96:3c:
                    11:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:76:57:D8:E9:56:E2:2B:B3:E8:9D:12:AF:D8:83:29:28:26:57:94
            X509v3 Authority Key Identifier:
                keyid:25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:8a:c0:69:2f:f5:84:0a:27:cc:04:c1:51:6c:e5:1e:ee:1e:
         ce:ec:0d:18:76:06:b8:f1:2f:02:7c:bf:c1:68:00:04:bb:f6:
         7a:6b:63:35:16:cc:7f:a5:8c:d6:fa:4c:11:56:c8:ad:cc:e8:
         a8:1b:ac:1e:cb:00:2d:7d:c6:cb:56:00:2a:43:62:df:97:1c:
         ac:a8:68:fe:5f:58:d8:5e:6e:af:5c:e9:21:30:c2:8d:f7:3a:
         02:54:9a:49:1c:6e:8a:27:2d:45:95:98:09:12:c6:5c:2b:9a:
         76:3f:09:94:ae:d1:2d:fd:73:16:58:ac:a5:51:3a:60:2e:f7:
         ba:42:52:c3:37:ce:45:ab:8f:7f:2b:8c:09:c0:5e:a7:17:5c:
         0d:9e:b5:2d:e0:15:f7:c8:51:f7:a5:8e:07:0a:dc:ab:3e:c2:
         31:c0:1d:88:f6:79:7f:5d:f0:6b:ab:7c:7d:43:27:53:d3:a7:
         67:4d:fe:c1:fb:a0:bc:99:64:82:1f:7b:9c:e2:30:54:c9:d8:
         36:0e:ff:ec:69:16:7b:c7:90:1b:a5:22:56:6a:6d:ea:7c:ba:
         b2:ef:bb:3b:2e:fb:29:95:3f:51:d7:d0:7e:11:22:72:b8:29:
         49:c6:a5:db:e0:f9:cb:82:f5:d8:8d:81:88:c9:d7:b8:01:87:
         87:82:df:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----