Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
File:                     JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft (raw, json)
Hash identifier:          Vq9Ve8F8kV6eDxRuZcXdmbBXr9n+vpf3IupJgO7PilU=
Subject key identifier:   36:12:F3:19:20:9F:55:98:24:3D:83:07:47:2F:F5:E1:99:CE:07:60
Authority key identifier: 26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
Certificate issuer:       /CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Certificate serial:       01962E2ADDEBC49861DC5428E28657BD1620
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
Manifest number:          0D14
Signing time:             Sun 13 Apr 2025 08:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:23 +0000
Files and hashes:         1: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl (hash: SMg7W93nVhx8jtKo5Qq9f7gpAbpYFR+RcNeeJsPhzX0=)
                          2: zZ4Hlb2x-3mX0RpLcIDR2DBRVWM.roa (hash: rtcchc9xlTzl7W167gpB0l7rHLuWsqswJuQgbOgsw/0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:dd:eb:c4:98:61:dc:54:28:e2:86:57:bd:16:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
        Validity
            Not Before: Apr 13 08:01:23 2025 GMT
            Not After : Apr 14 08:01:23 2025 GMT
        Subject: CN=3612f319209f5598243d8307472ff5e199ce0760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8a:7c:81:56:7d:96:12:76:24:c8:25:4e:61:
                    34:2f:87:78:a3:bf:5e:3e:03:06:26:12:69:5c:af:
                    63:df:99:10:e1:c6:a5:69:ac:4c:59:4a:1f:22:9f:
                    66:8a:af:d2:67:f0:5e:8d:da:3a:92:5b:4a:fb:bd:
                    f6:2d:7c:df:6c:3f:b2:10:05:3e:b4:a3:d1:f4:9e:
                    6f:83:c2:da:7a:23:8b:c9:7a:d9:7d:cc:d9:c1:7d:
                    22:2a:97:16:8e:19:74:4b:1a:07:b9:98:00:98:b8:
                    d8:0a:7f:b7:fb:96:35:cd:42:b9:cc:04:54:e6:3d:
                    3f:ff:9e:74:e3:b4:bf:60:98:7a:aa:13:c7:19:32:
                    bb:61:36:07:bb:59:73:04:a8:3b:eb:cf:fb:de:7c:
                    a0:2e:bf:2b:ab:ca:38:91:da:e9:88:87:cc:44:83:
                    9d:6e:5a:bc:bb:99:dc:e7:d8:85:9a:49:86:bd:1e:
                    ba:a8:e1:9f:92:8a:85:3c:86:5d:2b:69:a9:a7:c2:
                    20:f6:71:2f:55:ba:51:d2:24:5a:fd:02:55:7f:1c:
                    cb:c8:bc:61:41:38:a7:53:c9:0d:97:3c:45:30:6e:
                    7b:73:24:c1:bb:23:8e:a2:59:04:6e:16:b5:a7:5d:
                    a0:04:aa:f6:db:e4:83:ac:58:42:01:b0:aa:ab:70:
                    56:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:12:F3:19:20:9F:55:98:24:3D:83:07:47:2F:F5:E1:99:CE:07:60
            X509v3 Authority Key Identifier:
                keyid:26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:87:15:f1:3c:03:38:64:2b:70:e1:1f:9d:ae:e2:d5:8f:c4:
         6b:04:fa:13:d0:5d:a1:38:27:11:54:67:05:08:22:99:27:5f:
         71:76:a4:96:39:e2:5f:13:d3:aa:17:2e:8e:10:7d:dd:98:a4:
         91:52:51:03:47:9f:e3:f0:dd:4c:99:0a:6f:19:7d:dc:bb:c2:
         00:23:65:ff:2d:0b:f1:03:aa:0b:e8:c9:8e:ec:47:29:b4:7d:
         b6:82:2a:bf:f0:d1:70:2d:24:f5:4b:58:3b:ee:60:8a:ed:7d:
         0e:2c:be:b4:f5:01:02:7b:de:df:ed:65:2c:d0:3e:51:52:84:
         57:93:51:6a:40:b1:c7:5f:43:e2:bc:94:dc:b6:12:2d:8b:43:
         0a:4e:bd:f9:8a:0e:b1:b0:60:48:d2:b8:b1:1c:ad:9a:29:11:
         f0:c5:e5:1f:7d:86:49:d9:3b:ff:77:b5:c7:74:3b:16:c1:f7:
         3f:8e:2c:4e:0e:22:d7:c4:7c:75:42:15:41:87:9e:de:d5:1d:
         98:79:a3:bb:f6:f8:ab:ee:22:46:5e:4c:bb:1d:1b:62:a4:9c:
         77:62:bc:1e:65:c6:6c:f4:14:39:34:15:d4:f4:af:3e:dc:64:
         a8:90:8e:19:eb:76:c0:48:7b:24:be:23:bc:7e:92:ad:39:93:
         a6:0e:8c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----