Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
File:                     jzztMLKFLlUseDdGcAPxdepZ3nM.mft (raw, json)
Hash identifier:          VjKCd8J+mR8tXNo6TQFHRW/M6AuKqiigrv1RJbihar8=
Subject key identifier:   31:FE:C0:A6:BF:48:9C:28:C6:9C:F4:6C:B4:D2:9A:D1:D1:20:3D:0C
Authority key identifier: 8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73
Certificate issuer:       /CN=8f3ced30b2852e552c7837467003f175ea59de73
Certificate serial:       01962F067330B0E458BEC8A3288505F29268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
Manifest number:          09F2
Signing time:             Sun 13 Apr 2025 12:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:13 +0000
Files and hashes:         1: jzztMLKFLlUseDdGcAPxdepZ3nM.crl (hash: BXN2GvqnWOOEJ8TMYWVDB8gQbx3/zlteKL7GE3d1g3s=)
                          2: zFUJjDGEsZJOucFbVCUxDXzsMU8.roa (hash: 2ZiCqHTVImshB2FLBBPRqOl/4XNJLXBYYXR20S0fJAg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:73:30:b0:e4:58:be:c8:a3:28:85:05:f2:92:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3ced30b2852e552c7837467003f175ea59de73
        Validity
            Not Before: Apr 13 12:01:13 2025 GMT
            Not After : Apr 14 12:01:13 2025 GMT
        Subject: CN=31fec0a6bf489c28c69cf46cb4d29ad1d1203d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:17:ee:55:f3:c1:45:70:02:20:3b:96:6f:b6:
                    43:8b:e1:6b:fe:7e:16:a1:22:0c:d7:63:c1:16:bc:
                    3c:cd:e3:5e:5b:f3:a7:0a:b3:ae:9c:8c:fb:ee:fe:
                    80:fe:f8:e7:1b:63:6b:ed:2e:91:93:0b:68:d4:dc:
                    51:86:e6:6c:5a:40:03:53:e2:44:e5:9d:d7:96:1f:
                    15:c2:26:55:28:58:1c:3c:bd:63:aa:88:cb:fc:8a:
                    ee:0e:21:d9:3a:0c:96:f3:60:68:0e:84:b7:f7:6f:
                    44:75:9f:b4:61:be:e1:9e:6d:05:60:38:3a:28:3f:
                    ad:f0:3b:48:77:60:bf:b7:de:84:51:a2:2d:00:d6:
                    99:e6:b0:ec:23:63:fa:b6:c9:5c:06:56:77:be:11:
                    e6:64:f2:96:19:1e:6b:6c:a6:1f:cd:28:ee:04:4d:
                    76:41:d1:a1:b2:0c:03:5f:ae:f9:cc:2c:f6:22:e6:
                    02:ac:6a:94:cf:54:da:4f:ee:3b:d5:81:58:c1:05:
                    c5:56:74:6b:53:74:90:10:14:fb:91:b2:80:ab:61:
                    52:68:4d:c1:4d:d7:28:f3:d9:46:20:9b:79:b4:b0:
                    5e:25:72:29:31:34:4b:48:8b:57:3b:d7:44:59:ee:
                    98:26:28:e1:e2:2d:61:06:72:f5:bf:03:e5:53:a3:
                    36:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FE:C0:A6:BF:48:9C:28:C6:9C:F4:6C:B4:D2:9A:D1:D1:20:3D:0C
            X509v3 Authority Key Identifier:
                keyid:8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:1f:6f:f9:ee:70:9a:b8:58:97:97:77:2f:6c:70:b1:dd:27:
         e6:16:74:ad:ad:4c:c3:22:28:1c:15:6a:6c:da:07:fd:f4:6d:
         d3:aa:ba:cb:99:f0:bb:ed:92:dc:a6:a9:61:9e:b1:cf:9f:3d:
         51:8d:fc:20:89:18:fe:3d:64:78:ca:42:86:51:ef:a5:4c:31:
         61:c5:01:fc:b7:77:44:a5:53:af:80:4c:44:a2:a3:24:62:3c:
         dc:ba:76:54:9c:49:53:95:9d:4e:9f:86:c7:4f:bc:7e:58:c0:
         cc:a1:00:89:35:44:5a:a0:eb:d3:13:04:c3:b5:de:9d:4a:2f:
         9a:19:03:f3:af:1d:33:e8:60:90:36:e0:9d:e4:8c:7e:eb:e8:
         c1:36:b5:58:e9:e2:b3:77:6d:a0:58:ea:29:32:be:2b:c1:e7:
         86:e6:36:da:7b:ee:35:a2:46:32:a5:5d:26:08:78:31:05:41:
         00:2e:9c:00:36:1d:43:c0:a6:0c:9e:d0:77:a3:5d:d2:57:96:
         94:4b:87:c9:c4:3c:d1:6d:f2:75:2f:9a:78:b1:66:1a:c5:cc:
         c9:83:98:2d:7b:69:1c:13:00:c2:7e:5b:33:03:4c:3a:20:fd:
         24:45:61:de:b8:eb:0a:14:46:33:6c:12:28:fe:5a:c0:8d:b4:
         8a:c5:d8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----