Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File:                     JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier:          S/zTD6jHSb8UarpXJ4QHPb63RtWEQdHoKXI9VMz8vWU=
Subject key identifier:   8D:B2:D4:8E:BE:14:B9:85:EA:05:09:0A:01:87:F8:09:84:50:14:43
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer:       /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial:       01962E619F21A5C81869BCCE05F3DC5249FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number:          0775
Signing time:             Sun 13 Apr 2025 09:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:11 +0000
Files and hashes:         1: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: 7vy5uOB9w+zVuKpAebMAmWR84pYlNXMVIFLLQX27UQI=)
                          2: P7b5zmQiLmwTefl5liI-KoZJpcY.roa (hash: VJKcy+JlG04cLK8U6Txf4TogJYWS6O9qHAuZFHI6UVY=)
                          3: fkZMJf--qW7MT6bXdyPn8Rz0kGM.roa (hash: FGOPoxO9vvC4y9ljtcZplGO40KLgXf+OUCl+F6C8Bmk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:9f:21:a5:c8:18:69:bc:ce:05:f3:dc:52:49:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
        Validity
            Not Before: Apr 13 09:01:11 2025 GMT
            Not After : Apr 14 09:01:11 2025 GMT
        Subject: CN=8db2d48ebe14b985ea05090a0187f80984501443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:49:98:2c:eb:1d:5b:de:f0:01:6e:90:8e:86:
                    f0:10:22:c8:89:4f:5e:8c:41:f5:39:d5:6e:22:56:
                    fe:2e:37:4e:bc:b4:33:05:60:82:6d:a5:b0:28:d1:
                    3d:a2:1a:44:2b:12:4f:8b:c8:85:5f:f7:f4:70:f4:
                    1f:30:06:23:5c:ec:d6:b5:04:9d:e4:53:66:81:d7:
                    e9:a9:2e:bb:b1:bc:f7:2d:55:a3:07:45:d9:1d:c8:
                    8e:e5:28:bc:fd:ad:60:ed:bb:92:2c:99:dd:f9:a5:
                    3f:57:98:d9:16:5f:e8:66:24:68:57:57:4c:34:f3:
                    6e:40:bc:2b:fd:04:4f:bd:46:07:c3:84:c3:9c:05:
                    e2:36:30:46:b0:99:bd:1d:0d:7f:cb:2a:39:3b:66:
                    fe:ce:f3:12:0f:c9:a4:b2:a7:b8:32:14:c7:67:4d:
                    5e:4f:ad:d9:33:e5:af:9b:93:f4:13:29:93:61:e0:
                    9b:4c:20:31:f2:e6:ee:25:3f:12:f9:e2:33:c9:9c:
                    78:44:77:51:b5:60:70:51:3e:ae:13:04:19:34:0f:
                    56:50:e4:4c:2d:37:f5:59:c9:65:b9:40:67:91:23:
                    a8:45:c7:f6:ee:8d:37:a7:c3:09:19:88:aa:4e:49:
                    c5:a2:c5:6b:43:4d:c6:63:de:7c:58:86:cc:06:d9:
                    d6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B2:D4:8E:BE:14:B9:85:EA:05:09:0A:01:87:F8:09:84:50:14:43
            X509v3 Authority Key Identifier:
                keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:eb:62:0b:5b:2a:6a:03:0e:82:45:72:b1:02:22:6a:52:8c:
         ed:3d:ea:50:da:3c:01:98:9a:f0:6a:5c:8e:e2:f1:68:58:06:
         ca:68:73:0b:53:61:a9:20:36:1c:c4:54:0d:fa:35:07:12:2e:
         b8:10:46:ac:93:12:62:90:6b:52:04:f4:2b:76:d7:44:35:9b:
         1d:b4:35:5b:dc:6b:45:a9:91:37:2e:96:a1:c1:b0:e8:82:9a:
         d8:de:e1:fd:ca:20:c0:62:d4:55:a0:bd:48:e2:9f:3d:27:08:
         41:19:81:58:8e:99:d7:8b:be:89:f9:dd:1f:00:d1:c7:44:5f:
         d8:96:95:7a:0b:d9:b8:94:26:b2:dc:ff:f0:7b:98:94:bf:db:
         0a:93:53:58:a0:00:c1:57:d3:35:b0:e1:93:24:6e:f5:79:b9:
         83:cd:9e:3f:56:2d:36:5a:57:a0:e5:02:d8:94:3a:3b:6a:97:
         96:7c:4c:2a:42:dd:ae:2a:7f:4d:7a:68:18:39:d7:69:b4:99:
         70:91:68:a6:b0:c9:ae:3a:50:f4:b8:b0:39:78:86:35:66:16:
         c4:2a:05:0f:40:9d:67:8e:3d:dd:21:c3:f7:8e:18:29:72:a2:
         46:19:4c:0c:da:af:e9:f4:cb:d2:8b:83:6a:0c:a1:37:69:ad:
         85:5a:f0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----