Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
File:                     JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json)
Hash identifier:          vZP92uGx0N6kNB6DAS4lXr6WLLmanIVk4Y3ju86NSsw=
Subject key identifier:   2A:73:C1:BF:12:80:85:C5:71:51:98:4F:7D:66:F0:92:8D:8B:E8:58
Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
Certificate issuer:       /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Certificate serial:       01962F3D3F6AA7285E4B57B636BB3BBAF090
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:05 +0000
Files and hashes:         1: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: Yd/3U9Kso48d13bMZG1YmQkiICcIggPXRiJwXibZFP8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3f:6a:a7:28:5e:4b:57:b6:36:bb:3b:ba:f0:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
        Validity
            Not Before: Apr 13 13:01:05 2025 GMT
            Not After : Apr 14 13:01:05 2025 GMT
        Subject: CN=2a73c1bf128085c57151984f7d66f0928d8be858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:63:aa:6b:a2:d3:d8:89:f6:f9:9b:36:d5:03:
                    0b:04:39:79:35:ef:2d:0c:ca:8b:b5:df:af:04:4d:
                    3f:a1:e7:a1:10:ae:08:d7:a7:77:c1:42:76:e3:47:
                    c2:1b:24:19:b3:1b:11:1a:c9:54:93:82:0d:b4:ea:
                    8e:5c:db:48:5a:a3:23:9f:ae:0d:ea:0d:29:d6:ae:
                    34:51:81:b3:b3:8e:25:91:77:9f:6c:ec:74:89:89:
                    ea:01:47:c7:44:30:95:a2:9c:1c:1c:d3:64:39:98:
                    8d:00:37:3e:40:15:1f:de:a7:56:96:d3:ff:44:45:
                    a3:99:55:d9:4c:a6:91:be:05:be:89:5e:3e:df:52:
                    a0:58:f8:fc:b6:9e:1d:2d:32:b5:8e:24:b1:5a:64:
                    c9:ca:10:a1:e7:a1:dd:e6:0e:de:c1:ad:f8:0b:12:
                    93:f8:9e:13:11:d1:c6:cc:16:1f:44:26:bf:b7:e3:
                    ff:97:e9:f0:f9:68:4a:2a:0c:35:72:35:87:bf:59:
                    97:fd:4d:36:6b:9c:bf:9a:06:a6:0a:5a:1c:a5:8f:
                    08:43:ff:a4:e4:99:9d:5e:a5:99:dd:26:23:16:47:
                    45:d5:3a:9c:56:64:ff:9b:f7:f6:38:00:24:2d:54:
                    fb:2b:d6:c7:f2:36:57:4e:f1:69:37:08:7a:96:2a:
                    16:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:73:C1:BF:12:80:85:C5:71:51:98:4F:7D:66:F0:92:8D:8B:E8:58
            X509v3 Authority Key Identifier:
                keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:3e:fa:cf:3c:88:d8:07:92:ae:ee:3a:0f:81:ba:4f:72:ea:
         cd:e6:a7:db:b7:d3:07:72:cd:ba:2c:8b:04:96:11:8c:51:4a:
         4a:b4:43:22:ba:83:29:5f:d1:e1:f6:02:2a:28:69:91:de:eb:
         31:53:4d:96:7b:9b:d2:88:cd:36:10:4b:bb:90:c1:52:1d:fe:
         7f:fd:f1:c8:19:32:8b:4c:b2:11:fd:6b:38:55:21:f8:a4:9d:
         a9:65:91:96:56:6a:91:40:b6:38:4b:03:49:07:90:29:01:21:
         f8:f9:dc:5c:81:54:a5:3b:c5:b6:58:05:a8:02:76:50:85:0b:
         d6:3f:8c:33:43:42:a2:2a:bf:e5:73:e2:73:dc:08:1e:a6:64:
         16:53:f0:dd:b9:dc:cf:bb:a3:52:fe:05:e9:05:65:b2:02:1e:
         fb:40:85:0f:ef:9b:aa:a1:58:50:bb:3c:82:e0:db:3e:95:58:
         93:6c:d1:52:8e:11:14:fc:cb:58:3a:2f:f1:09:22:94:fb:f9:
         f3:3d:b4:53:2a:41:4c:f9:c8:45:63:79:26:6d:be:d8:b6:d8:
         eb:6b:7b:43:c7:1a:02:ba:41:94:e2:d6:62:6b:63:5b:24:26:
         2d:ab:6d:ae:c5:66:3b:e1:ef:bc:9d:32:b8:46:9b:55:5e:c8:
         f5:c0:f3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----