Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
File:                     jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft (raw, json)
Hash identifier:          i5pknMYiqPU2XmoDUhHCO5bCYTdTW0KE6zJBmfUExWM=
Subject key identifier:   07:1F:EE:2C:E7:77:21:75:C8:A1:EC:B3:DE:7B:06:EB:93:72:A8:24
Authority key identifier: 8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
Certificate issuer:       /CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Certificate serial:       01962F071703610E40DD6D658F28F0D9974A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
Manifest number:          05C5
Signing time:             Sun 13 Apr 2025 12:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:55 +0000
Files and hashes:         1: gN1BkwtfLG0CVafSuu-7jUV0eE0.roa (hash: kgY2FVBsviF4YuznOeSj1jvbVSAFPg3ICiRBU7zTAS8=)
                          2: jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl (hash: HClQTY1KpoD1mbGtfIL5Kq8z0wonytCtIXZldkEWKHc=)
                          3: rDlkyigziSazpq7KkBehs1Ktw-g.roa (hash: 0blcMDi8SQKGoP7zdqimF2o0peaDeYPg+Ie2kFh43K4=)
                          4: tLaWKw3WmHb20kxwM4G1kQ4uW9w.roa (hash: obhetsuugpMrSbVSqt3NiPZQ+jRMpp3fx8OhfxyMvVc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:17:03:61:0e:40:dd:6d:65:8f:28:f0:d9:97:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
        Validity
            Not Before: Apr 13 12:01:55 2025 GMT
            Not After : Apr 14 12:01:55 2025 GMT
        Subject: CN=071fee2ce7772175c8a1ecb3de7b06eb9372a824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0b:dc:42:c8:18:83:5e:6d:95:00:b6:50:bc:
                    69:b2:a7:ea:f1:48:8c:5b:14:3d:83:09:36:26:d7:
                    ca:3c:ef:5e:2d:76:42:f4:32:c7:a9:d9:21:85:e3:
                    e8:f6:a9:7d:d4:e2:0f:67:de:6f:43:97:90:66:93:
                    6f:d4:00:cf:d3:56:15:1f:ff:a0:83:3d:74:10:89:
                    94:d0:97:7b:31:fc:54:1d:0b:e8:ca:c0:f9:61:a1:
                    21:79:bb:15:9e:2e:6c:2e:95:81:33:27:9c:ab:69:
                    98:9e:81:a5:c7:aa:ec:7f:0f:83:df:cb:da:98:06:
                    b7:8b:cb:4d:7f:bb:35:f6:d6:ed:c0:12:6a:67:00:
                    59:c9:74:f0:24:70:0a:f1:89:d7:4f:e1:5e:15:c2:
                    c2:2a:ef:59:93:ab:30:33:8c:55:e3:4c:df:8e:7f:
                    dc:f7:46:9d:55:93:a9:71:94:05:be:cf:64:2b:ab:
                    a2:50:ab:4c:2e:e8:86:d3:50:6e:57:6f:13:72:af:
                    95:03:c3:79:6d:53:d1:06:a7:c7:ec:5e:7e:8e:db:
                    06:93:79:42:2e:b6:10:b4:3a:70:2d:dc:c2:b9:d2:
                    b9:7c:6f:dc:3a:a9:aa:90:60:93:41:d9:9e:1a:04:
                    52:83:7a:87:1a:34:69:3f:bc:49:89:3d:83:6d:0a:
                    c4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1F:EE:2C:E7:77:21:75:C8:A1:EC:B3:DE:7B:06:EB:93:72:A8:24
            X509v3 Authority Key Identifier:
                keyid:8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f5:52:80:bb:90:cf:8f:bb:d1:10:2d:95:e3:b5:b6:78:75:
         a4:b2:b7:48:f3:a7:a1:93:ae:fa:6e:c9:e7:95:40:09:17:48:
         41:3f:ab:ce:65:e9:bd:ea:dc:ff:72:18:ed:89:60:87:9d:23:
         49:3b:be:84:f3:26:39:f4:9d:28:f5:e7:01:ec:71:4e:3c:30:
         ae:35:e2:ff:dd:e3:bd:f7:5a:b3:1c:45:e4:f7:4a:49:ff:b3:
         c9:07:52:21:a8:6f:29:55:38:93:4b:a7:47:20:d4:49:44:ca:
         38:83:6a:ca:68:51:df:f2:a9:f3:8a:12:e6:b0:9d:26:9a:41:
         d1:73:ef:bf:eb:b3:2a:61:ba:8c:8a:25:84:17:4c:01:dc:b7:
         38:31:cb:e5:a2:cd:8a:14:c5:25:c3:fd:9e:0f:94:6a:01:b0:
         50:c7:b0:8e:b3:c0:e6:16:d5:20:75:40:7f:2a:90:8b:38:6b:
         b3:26:ee:f7:6e:db:92:30:05:b9:bb:58:16:21:3d:a2:8c:05:
         dc:d0:db:cd:05:0e:2e:e2:c3:95:c3:7c:1b:de:07:fd:15:37:
         7d:35:76:c8:42:5f:dd:4c:b0:5d:e2:2b:da:83:66:7e:8e:34:
         b9:be:54:81:db:de:21:79:fe:6a:bc:4b:82:e6:e1:61:dc:c7:
         84:46:69:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----