Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/115961-b872-444d-beaa-be795250cb50/1/JV_ylgEpdHxRvatuGDxg_3h6xeY.mft
File:                     JV_ylgEpdHxRvatuGDxg_3h6xeY.mft (raw, json)
Hash identifier:          x4XDitfj/hv0FCBLpD3IOQyBCMJNDboMcFyXAGuyt78=
Subject key identifier:   B1:D0:8C:DA:52:FD:CF:E2:89:6C:F1:24:9D:E2:A6:29:42:21:27:35
Authority key identifier: 25:5F:F2:96:01:29:74:7C:51:BD:AB:6E:18:3C:60:FF:78:7A:C5:E6
Certificate issuer:       /CN=255ff2960129747c51bdab6e183c60ff787ac5e6
Certificate serial:       0195C9BEE71B7D3530E506485DE47C690E55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JV_ylgEpdHxRvatuGDxg_3h6xeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/115961-b872-444d-beaa-be795250cb50/1/JV_ylgEpdHxRvatuGDxg_3h6xeY.mft
Manifest number:          14B8
Signing time:             Mon 24 Mar 2025 20:01:26 +0000
Manifest this update:     Mon 24 Mar 2025 20:01:26 +0000
Manifest next update:     Tue 25 Mar 2025 20:01:26 +0000
Files and hashes:         1: JV_ylgEpdHxRvatuGDxg_3h6xeY.crl (hash: 4gNg4nn96SnAWZC8SckTKxk2MIHscpNrUAQPDZWHb5E=)
                          2: wiQSuhZ2Rx9mYVDutpY_6Jaiq9g.roa (hash: IcXFbOy2kL3XD2CXj0cfmypyYeMpopQ8OdQl+N2lEgM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:c9:be:e7:1b:7d:35:30:e5:06:48:5d:e4:7c:69:0e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255ff2960129747c51bdab6e183c60ff787ac5e6
        Validity
            Not Before: Mar 24 20:01:26 2025 GMT
            Not After : Mar 25 20:01:26 2025 GMT
        Subject: CN=b1d08cda52fdcfe2896cf1249de2a62942212735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9d:07:0f:e6:ea:fb:c0:a7:1c:bb:f4:eb:14:
                    44:39:59:24:80:2b:83:7b:fc:6d:4b:09:23:58:f7:
                    4a:46:3a:35:68:43:24:a2:80:a7:29:b0:f0:ec:ca:
                    4f:ce:97:ed:06:b8:e0:48:f0:58:61:af:85:29:73:
                    2f:5e:67:0e:d3:9e:51:e4:b0:d8:5b:4b:a2:f0:56:
                    5b:88:55:8c:cf:2b:74:0d:6d:84:60:ee:2b:54:98:
                    24:4b:6a:3f:23:0d:be:ec:3d:cc:e6:bf:0f:40:ba:
                    aa:dd:5d:64:c5:be:b6:62:91:07:cd:39:9b:44:c2:
                    2e:3a:7d:87:18:0c:0e:86:c0:f5:25:58:7f:e9:ec:
                    59:ec:0a:b7:48:d7:72:e7:43:a5:c5:6a:c1:8e:12:
                    9f:fb:9e:a8:e2:12:6a:bd:78:54:f6:8e:12:d6:79:
                    9f:51:88:2e:1a:d6:0c:61:bb:22:28:f2:aa:21:ce:
                    9e:b3:25:8f:a3:8a:a3:b5:95:23:c8:32:c8:74:d0:
                    d3:da:b1:fc:c9:b8:27:76:64:b3:1e:97:fb:ff:97:
                    d7:5f:d5:8d:6d:25:c1:01:66:5a:d0:76:f4:44:12:
                    ec:74:89:59:c3:ca:48:0e:f1:9e:b0:e1:60:e6:74:
                    ce:98:4c:36:4c:d5:3f:96:6a:5d:77:69:91:b2:3a:
                    97:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D0:8C:DA:52:FD:CF:E2:89:6C:F1:24:9D:E2:A6:29:42:21:27:35
            X509v3 Authority Key Identifier:
                keyid:25:5F:F2:96:01:29:74:7C:51:BD:AB:6E:18:3C:60:FF:78:7A:C5:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JV_ylgEpdHxRvatuGDxg_3h6xeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/115961-b872-444d-beaa-be795250cb50/1/JV_ylgEpdHxRvatuGDxg_3h6xeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/115961-b872-444d-beaa-be795250cb50/1/JV_ylgEpdHxRvatuGDxg_3h6xeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:97:db:f8:29:17:e9:00:a0:98:a3:12:be:70:4a:0f:27:f4:
         8a:9c:e7:79:da:f1:50:7f:67:e7:b7:5f:94:49:10:0c:fa:93:
         76:04:1c:1d:b0:50:65:d6:9b:b4:a2:24:07:30:6a:c5:f1:22:
         ef:1d:3b:0d:04:68:d5:55:17:38:7a:63:0a:64:22:e9:64:c7:
         38:14:3b:19:4a:08:ac:28:f8:59:ec:d0:62:22:3c:17:34:d5:
         a6:1a:52:00:ab:38:a9:f4:a7:a8:6b:9a:bd:34:4b:3c:b7:b8:
         99:52:b2:ef:6b:25:32:5e:79:9f:7d:89:a3:74:cd:0e:2a:1f:
         d8:69:95:75:87:7e:f9:a4:05:da:3d:d4:e6:db:f1:1f:40:e3:
         9b:c1:7e:bf:d8:e0:a4:ff:16:25:40:43:aa:f9:4e:b7:dd:e4:
         99:d7:41:06:d2:65:42:c2:c7:61:94:3b:57:ff:e9:7e:4e:3e:
         24:4f:3d:c0:f6:e3:0a:33:7b:c1:ab:c6:72:a5:ba:cd:f2:eb:
         c9:ae:8c:31:9c:ed:5f:12:c9:f5:35:db:c0:4d:90:97:f9:8d:
         0e:6c:59:81:a4:f6:5b:a0:d8:25:bb:8c:91:c6:e1:5e:99:48:
         9f:c8:08:d6:d2:b2:7d:cd:1b:ab:fd:d3:30:2f:05:91:ec:15:
         9a:96:de:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----