Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft
File:                     jZ9OgtuoAjmZ772tNLJxofSJLp4.mft (raw, json)
Hash identifier:          75wSU1+SvREo/z3dcvFDpBmdbqXR/Q4Rs/uS80PUjj8=
Subject key identifier:   68:5A:8F:4F:C7:D9:B6:BC:BE:1C:AF:33:F3:BE:C6:FE:65:7D:9B:73
Authority key identifier: 8D:9F:4E:82:DB:A8:02:39:99:EF:BD:AD:34:B2:71:A1:F4:89:2E:9E
Certificate issuer:       /CN=8d9f4e82dba8023999efbdad34b271a1f4892e9e
Certificate serial:       01962F067289E6270546509B30A96E6DA5E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft
Manifest number:          0243
Signing time:             Sun 13 Apr 2025 12:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:13 +0000
Files and hashes:         1: jZ9OgtuoAjmZ772tNLJxofSJLp4.crl (hash: n1AsqtcaMUEDqoXWVLgm68FPUwgLasHiwMoMM2mMsVA=)
                          2: x_n8t7M8D_Bv99KviCzCearCTfY.roa (hash: 6UUSvMuuFuiYjyRFMf2UhzrLvu7QDsz9ziOkSElPsPE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:72:89:e6:27:05:46:50:9b:30:a9:6e:6d:a5:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d9f4e82dba8023999efbdad34b271a1f4892e9e
        Validity
            Not Before: Apr 13 12:01:13 2025 GMT
            Not After : Apr 14 12:01:13 2025 GMT
        Subject: CN=685a8f4fc7d9b6bcbe1caf33f3bec6fe657d9b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f9:22:12:2e:7a:f4:90:cc:27:50:ba:b1:ac:
                    3d:9e:30:68:a3:ca:36:07:35:d0:64:d4:22:e9:a6:
                    d0:97:b6:6c:df:31:d8:fb:aa:c2:8b:ea:04:10:e3:
                    ba:c3:68:6e:da:42:86:f6:46:9c:76:41:01:ab:10:
                    55:d0:de:94:d6:b9:8b:21:74:a4:9c:22:da:28:f3:
                    d5:36:a7:c6:86:e1:1e:69:88:dd:b9:78:6e:d1:37:
                    3e:50:84:72:f0:43:9a:3a:c1:0b:0d:b3:e3:71:2c:
                    d1:cd:a3:7c:0b:e4:c9:cf:3a:b4:ef:9f:ad:7a:13:
                    27:07:1b:78:a2:84:8b:e4:32:f7:ee:59:f6:ba:69:
                    22:9a:f0:ef:f7:d8:6a:ee:5d:ec:ba:96:36:73:00:
                    80:4f:e8:de:d3:65:ff:cd:2a:af:2e:d9:e4:ea:39:
                    78:2a:d1:94:e2:d1:81:c6:b6:e3:f5:67:f2:ca:aa:
                    a4:cb:b6:88:0c:fb:e3:90:16:1f:33:37:8b:90:e9:
                    09:aa:5f:2f:0c:8c:69:e3:92:dc:b5:26:ef:b1:6c:
                    0f:0c:99:8c:e6:bb:0a:72:ca:c8:01:85:28:84:79:
                    0b:35:51:4a:c7:5d:56:06:b5:7e:a3:e7:a1:84:71:
                    dd:75:17:73:45:92:be:da:d3:cf:6e:df:46:81:b3:
                    ed:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5A:8F:4F:C7:D9:B6:BC:BE:1C:AF:33:F3:BE:C6:FE:65:7D:9B:73
            X509v3 Authority Key Identifier:
                keyid:8D:9F:4E:82:DB:A8:02:39:99:EF:BD:AD:34:B2:71:A1:F4:89:2E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:e6:33:aa:82:3c:93:98:29:5b:ab:61:b4:13:de:4a:1b:71:
         18:dd:07:cd:8b:ac:5e:ed:fa:63:5b:d2:9d:d6:2c:2e:f9:f1:
         93:2e:8b:87:bb:ad:47:a8:15:37:18:17:1f:42:45:ea:b9:b4:
         d0:b9:fd:bb:4d:68:7b:57:b8:7d:22:7b:a9:a4:85:8e:b8:ca:
         1a:5b:1c:4e:be:8e:08:74:6e:ca:51:aa:e3:c9:52:63:b5:18:
         4d:6c:5f:7e:7a:50:22:1d:8b:aa:c1:3c:85:52:4f:d4:8d:f1:
         79:38:9f:b4:e4:f4:e0:15:52:a5:24:da:e7:ff:17:86:b8:a0:
         ee:b0:fd:9b:3e:e9:de:21:23:ae:df:a7:46:fb:2a:b2:24:4c:
         79:f0:d2:95:97:08:82:7e:69:6f:af:e7:e1:63:69:e8:f7:c3:
         da:a5:7a:58:62:4a:9b:a4:34:2e:15:ef:3c:d0:ba:83:d9:c8:
         a4:a0:35:c5:fc:ee:92:96:a1:94:7d:39:86:9a:69:8c:e2:6c:
         fb:ae:36:6a:74:a5:0d:2e:23:e0:9a:17:d9:3a:b1:71:08:f6:
         e7:28:3d:bb:23:4a:ee:59:c3:cd:f9:1d:20:0c:7f:21:3a:00:
         8a:e2:21:ec:97:7d:10:54:e8:d8:de:81:c7:c0:8f:e5:08:5c:
         18:ba:d4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----