Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft
File:                     Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft (raw, json)
Hash identifier:          lU0rUHnqT1OPyClZiiMAhCtj8EMN89kl434IG6VsWyc=
Subject key identifier:   93:8E:B8:E9:E7:48:6F:3E:99:63:43:19:DE:D0:9C:34:60:B6:38:E7
Authority key identifier: 26:7E:59:5A:B2:26:CB:FC:53:C0:B8:96:50:F1:B3:96:70:FF:0B:4E
Certificate issuer:       /CN=267e595ab226cbfc53c0b89650f1b39670ff0b4e
Certificate serial:       01962E619EDB88C711957F796F274A852477
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 09:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:11 +0000
Files and hashes:         1: Jn5ZWrImy_xTwLiWUPGzlnD_C04.crl (hash: LQKP3aTCRKHXnZ5nlzlNaDxQZ7fsjlu/uthzH2rhzL4=)
                          2: s_vj38_GYCn4aemkK1p2_MaatWQ.roa (hash: 3JnnhuGGZqjdBr8pR/nRqhjcsI/Mjb5T38Y9Ho7lfvg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:9e:db:88:c7:11:95:7f:79:6f:27:4a:85:24:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267e595ab226cbfc53c0b89650f1b39670ff0b4e
        Validity
            Not Before: Apr 13 09:01:11 2025 GMT
            Not After : Apr 14 09:01:11 2025 GMT
        Subject: CN=938eb8e9e7486f3e99634319ded09c3460b638e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:97:9a:4a:2b:52:e8:2b:a5:a4:ba:a0:0d:ba:
                    9e:8f:92:23:86:7b:6e:8e:05:3f:6f:d5:62:bf:8c:
                    45:fb:9c:66:ef:b6:81:4d:7d:d8:3a:1a:73:21:3f:
                    5e:34:86:58:18:78:5c:20:2e:9d:eb:43:c7:d8:e9:
                    81:cc:45:13:f4:0f:ca:e2:0a:55:a0:d9:c0:0c:d3:
                    74:73:8d:e5:1d:e0:a6:20:3e:cf:ff:e9:13:ac:d4:
                    45:3f:87:2b:bd:0d:26:0b:54:ea:c0:e9:4b:b4:6a:
                    b1:b4:89:61:ae:f4:1f:30:87:25:dd:62:b0:a5:32:
                    cc:f8:f0:37:6b:3a:5c:8a:9b:50:f9:57:e0:7d:a3:
                    4d:af:92:76:05:80:fe:be:4e:91:e3:65:95:f1:92:
                    41:80:56:ae:f4:8a:4a:cb:02:f8:e6:b9:88:c1:2b:
                    af:b7:7f:91:79:45:c0:95:b7:26:06:e4:ce:17:e6:
                    b4:e4:7e:0c:37:41:5c:b4:04:3d:3c:16:6e:31:5f:
                    2a:b2:11:1e:74:4d:7f:f5:30:5b:69:a7:81:94:3f:
                    50:d1:6e:2a:97:1f:09:f3:b5:2e:ec:91:f5:d6:24:
                    90:f0:d8:af:fb:ae:f6:9f:e5:c5:8e:f1:8a:55:c4:
                    41:08:6f:c7:51:ef:57:13:af:46:ab:cf:44:a6:57:
                    e6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:8E:B8:E9:E7:48:6F:3E:99:63:43:19:DE:D0:9C:34:60:B6:38:E7
            X509v3 Authority Key Identifier:
                keyid:26:7E:59:5A:B2:26:CB:FC:53:C0:B8:96:50:F1:B3:96:70:FF:0B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:ce:04:53:88:cd:bb:76:ce:cf:1e:f2:27:cd:d5:03:da:06:
         de:ad:ab:9b:20:be:cc:37:98:a4:7c:1f:d7:7a:42:be:3a:6a:
         d0:e5:7f:75:4f:19:68:b5:63:1d:c4:83:8f:31:5a:42:96:6e:
         b7:b4:8e:28:07:24:ed:83:30:33:56:2d:55:c8:cf:87:47:64:
         e8:78:9d:bd:ad:96:1b:43:84:40:e2:35:ac:6a:42:8a:91:3a:
         11:8e:4b:b3:62:df:43:5e:90:8c:08:b0:25:8e:d5:3e:a6:56:
         80:30:7d:bd:89:aa:d3:8b:cc:62:8f:0b:b1:bd:f9:04:c6:9f:
         b2:2d:18:87:52:7c:f2:7f:77:3b:cf:c6:3e:0f:1f:83:d0:dc:
         bd:00:7a:60:24:15:d9:17:f9:e3:3d:f5:19:8b:ac:79:5e:71:
         49:d2:9a:2f:2b:b0:2c:10:a0:90:ab:74:2e:3b:5c:1a:e3:cf:
         39:d5:60:38:a5:5f:b1:d2:3a:56:9a:96:1b:59:d8:11:30:d9:
         d3:72:d0:3b:d7:b5:f5:82:23:1b:0f:36:e7:32:61:0a:0b:45:
         20:d8:75:bd:44:90:60:cd:4b:67:7d:4c:12:3d:dc:ff:80:eb:
         c6:b8:05:77:b4:1f:cb:fe:05:d5:ed:5e:91:64:d5:ad:67:d9:
         91:2d:55:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----