Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
File:                     JpildU3unu9vIkViy4I5rIvbBbg.mft (raw, json)
Hash identifier:          8lJMkP0TYV8/YmnLxblXJBZW9k/Xz/Q/IpXmvB0umXM=
Subject key identifier:   19:9F:E3:87:F3:BE:61:D8:CE:FE:A0:9D:98:4F:39:32:EA:02:7B:10
Authority key identifier: 26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8
Certificate issuer:       /CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
Certificate serial:       01962FAB0CB84C2E06C9D24BA5EEE7C3ABB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:01 +0000
Files and hashes:         1: JpildU3unu9vIkViy4I5rIvbBbg.crl (hash: WYc5xaIx7UbAmPdWWTQvCQNOy6KdUsMypwV4Hnk+qEE=)
                          2: aBjEn09c9jlvq3tyQ6uQKbAuHow.roa (hash: k2Il8Q6rfTX6EoDV8IvCybU7+NvXuouKuK8ZTUniptc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:0c:b8:4c:2e:06:c9:d2:4b:a5:ee:e7:c3:ab:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
        Validity
            Not Before: Apr 13 15:01:01 2025 GMT
            Not After : Apr 14 15:01:01 2025 GMT
        Subject: CN=199fe387f3be61d8cefea09d984f3932ea027b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:61:97:e6:f2:af:38:43:11:7a:a9:ba:43:df:
                    2b:4a:e6:70:31:27:36:5e:ee:7c:40:e4:c2:ce:4d:
                    6a:62:17:ec:40:4c:cb:1a:89:5c:16:70:b0:13:1c:
                    45:76:46:e5:c1:23:62:21:ff:92:74:eb:c4:cc:93:
                    0d:6e:f4:63:ca:8e:d0:0d:c0:bc:7c:8d:24:1a:be:
                    73:50:80:80:ba:17:d3:1f:81:c8:f8:e9:cc:e9:dc:
                    bc:1f:b8:51:f8:52:09:0e:ca:1d:86:b8:f1:bd:77:
                    ba:17:a9:5e:8c:ef:16:a0:25:7e:0c:4c:ca:dc:c0:
                    8a:f4:2f:95:de:e0:ce:01:7e:ec:4d:ac:ac:1c:7f:
                    d9:2f:8a:97:1f:b5:88:5c:d8:0c:aa:ff:da:58:3c:
                    15:76:c0:d6:c0:9a:d2:b5:24:b0:e4:d5:e6:ad:50:
                    bc:48:ad:23:12:bd:d5:66:36:a6:58:04:19:f5:86:
                    a6:f5:a5:2d:88:4b:66:b0:70:c1:06:60:03:70:1a:
                    fb:7c:59:cc:16:e3:14:a1:08:e0:70:71:66:08:c0:
                    e3:eb:fe:b4:ca:84:97:8f:ea:8e:76:3f:3b:13:61:
                    58:70:e0:a7:23:5f:34:48:60:58:e3:40:91:bc:e8:
                    62:a9:4d:0d:69:eb:b8:ab:51:fc:c0:c1:64:07:06:
                    17:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9F:E3:87:F3:BE:61:D8:CE:FE:A0:9D:98:4F:39:32:EA:02:7B:10
            X509v3 Authority Key Identifier:
                keyid:26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:42:00:56:14:e6:6f:4f:f7:a9:a9:49:90:af:3e:83:7f:98:
         78:24:2e:c1:8c:7d:1a:a9:03:38:7e:e9:f8:f2:8b:2d:5b:b4:
         4c:d0:c4:ac:3c:70:12:c2:71:26:f0:c1:1f:f3:2f:5f:22:79:
         e5:e3:cb:8a:6b:10:53:0d:bf:e1:4a:37:ff:ed:bb:b3:b7:43:
         0e:c2:6f:df:3a:c1:ed:3d:ff:f5:eb:19:b1:a0:bf:cf:52:80:
         8a:e6:fd:a2:96:2e:36:47:d4:4f:97:7c:27:25:55:48:55:b5:
         9b:12:88:73:fc:c0:e6:5d:22:88:10:f4:50:f2:79:05:5c:94:
         1f:92:3a:f4:04:fb:39:a8:6f:d0:5c:d2:3a:41:c0:af:fa:96:
         ec:27:59:5a:cd:6e:76:7d:bf:f8:eb:c2:fe:a6:c9:56:32:42:
         0a:ca:64:07:87:9a:5a:38:a0:2c:7f:72:ab:48:63:29:1a:a0:
         74:ed:a5:37:0b:4b:75:b4:0a:6e:b2:73:22:e6:73:0a:64:b9:
         1c:17:43:5b:ef:f2:b7:3a:62:4e:2d:23:a8:f1:28:3d:ea:ff:
         ef:8b:63:78:ca:8e:88:a7:ec:e7:c3:1c:49:67:0b:fd:fa:37:
         53:0a:1c:fe:fc:aa:2c:a6:8f:e3:29:97:cf:1e:c5:f0:31:78:
         2c:7c:ec:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----