Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.mft
File:                     JKnYTG0WwIMJPDNxtFddNu9Ej-Q.mft (raw, json)
Hash identifier:          QDzj2bofeFtDedxxZx7rMMTpmagUxgaDFa+Z2s4dJA4=
Subject key identifier:   3E:8F:A8:50:76:39:5F:E5:CF:10:45:DC:60:5D:BD:BF:CC:20:B0:2E
Authority key identifier: 24:A9:D8:4C:6D:16:C0:83:09:3C:33:71:B4:57:5D:36:EF:44:8F:E4
Certificate issuer:       /CN=24a9d84c6d16c083093c3371b4575d36ef448fe4
Certificate serial:       01962F3DE8C8DE94E80B990BA301A8AB8CD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.mft
Manifest number:          089C
Signing time:             Sun 13 Apr 2025 13:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:48 +0000
Files and hashes:         1: JKnYTG0WwIMJPDNxtFddNu9Ej-Q.crl (hash: mrdRe8J0pFu4sMS2TQj8sNzGswsNTVHR7O/LQETL2bE=)
                          2: sEY4t-bPe6btAR7wv3UJWwU-X2E.roa (hash: aU4yEzDR1E1BJAYcSFYYldSWQZ2ELBxfjYhJldcUrMM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:e8:c8:de:94:e8:0b:99:0b:a3:01:a8:ab:8c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24a9d84c6d16c083093c3371b4575d36ef448fe4
        Validity
            Not Before: Apr 13 13:01:48 2025 GMT
            Not After : Apr 14 13:01:48 2025 GMT
        Subject: CN=3e8fa85076395fe5cf1045dc605dbdbfcc20b02e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:59:62:11:bd:b8:92:7d:8c:7e:0a:61:6e:69:
                    21:bb:68:45:14:94:29:7c:45:6b:70:50:72:0f:36:
                    79:20:75:1f:48:5d:74:f1:f4:83:c9:a2:fe:1d:99:
                    3a:fa:e8:f4:27:16:36:00:80:b7:01:cb:b0:c8:2b:
                    f8:69:41:2d:eb:78:4c:a8:5c:92:49:47:e4:e2:a5:
                    6c:52:9f:45:6f:91:02:be:fa:12:1a:49:69:bb:e3:
                    d1:6f:3c:50:09:f5:bb:0e:e4:17:4c:02:4f:8d:31:
                    00:83:23:ae:c4:1e:1e:32:5d:8c:bf:c9:a3:52:79:
                    22:33:bb:75:53:f6:f8:1b:38:df:65:da:a2:bc:51:
                    57:05:92:5d:36:92:e7:02:a0:b0:02:bb:a3:4f:3d:
                    3f:01:87:bc:f2:bf:fc:b2:88:e4:f4:ee:98:f0:95:
                    a9:29:2b:50:2c:b0:bf:31:1f:f9:45:96:60:3f:85:
                    4a:d6:7c:da:06:09:6b:45:14:a8:e9:c2:dd:5d:0d:
                    5b:fc:2d:cb:6d:20:4e:78:5f:7c:6e:16:68:f0:99:
                    56:99:da:91:85:e5:af:b9:c7:9b:31:fc:c5:98:f9:
                    a4:a3:5d:f0:92:7a:e4:42:d9:57:ea:92:7f:4d:28:
                    32:d1:c3:71:f1:0b:df:41:06:c7:be:50:fa:1b:22:
                    b1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8F:A8:50:76:39:5F:E5:CF:10:45:DC:60:5D:BD:BF:CC:20:B0:2E
            X509v3 Authority Key Identifier:
                keyid:24:A9:D8:4C:6D:16:C0:83:09:3C:33:71:B4:57:5D:36:EF:44:8F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:02:e6:ad:9c:5f:b0:b6:f9:0f:ab:b2:75:e8:a2:9f:91:a7:
         23:55:e6:d2:e4:f5:e7:d5:4e:30:95:2c:11:62:2b:4f:c0:d1:
         0f:94:58:71:3e:45:43:70:9b:81:9c:29:d6:0e:80:70:f8:50:
         e6:7f:8b:10:4a:be:26:0e:2e:db:1b:76:88:21:9d:72:8b:dc:
         0a:a8:78:23:f9:e1:d7:d0:22:c5:08:ad:64:fc:6e:f4:82:c5:
         38:73:0b:e7:91:1b:5b:5e:58:71:2d:d4:41:1a:a2:eb:f6:63:
         75:33:c4:14:de:13:ca:c8:73:71:61:d2:41:3b:24:7d:3a:5d:
         20:1b:d8:99:a7:cd:7d:d0:1a:c6:ce:c9:dd:ee:da:c3:c8:f4:
         51:0a:ef:43:02:82:02:c1:cc:0f:74:ab:92:60:30:04:12:af:
         80:69:01:58:e8:f6:cb:58:1b:be:04:70:a1:60:1e:53:f3:a6:
         12:5a:fd:85:13:96:9e:75:3a:04:a0:b3:5d:cb:fe:e4:f0:de:
         86:fd:ae:32:71:87:2e:80:f5:4a:45:c8:7a:ec:4b:83:04:40:
         2c:5f:1c:b3:87:e0:ed:81:4d:f3:e8:80:c2:ac:3c:bc:48:bb:
         b2:65:c0:69:23:07:66:8b:f5:53:ca:9b:d9:52:12:52:3c:44:
         68:ff:74:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----