Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
File:                     JdgP5rl_Uihnw3qMU_CljncJ-8M.mft (raw, json)
Hash identifier:          Cl7TJAsSUJ7/ZVNGS3x79TPNpgWszWHO8lLuoU3BReM=
Subject key identifier:   44:AA:C0:C8:65:E7:32:A8:43:05:6F:85:D5:E1:AD:96:88:F0:B1:D6
Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
Certificate issuer:       /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Certificate serial:       01962E61C23606AB937DDFEF4FFCA8FAD7DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
Manifest number:          0D88
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: JdgP5rl_Uihnw3qMU_CljncJ-8M.crl (hash: ZYfF1V7gXqaDl3gFlzjPl2MRQj70gRZpHgoOc8rSJeQ=)
                          2: h-jm1BLS9IvvXFUt65doG6SmjKs.roa (hash: SPX4w9cc6FxiyrggBKn+FUAfxJuZhXsTTQy+RHHDQmQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c2:36:06:ab:93:7d:df:ef:4f:fc:a8:fa:d7:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=44aac0c865e732a843056f85d5e1ad9688f0b1d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:34:e7:78:04:77:31:f4:bf:39:7f:f0:84:89:
                    71:d1:6a:a9:61:24:f4:15:1b:34:b7:70:11:ca:5c:
                    ac:c1:0c:d7:f6:63:e7:17:08:a3:4e:c6:88:e6:86:
                    85:b4:74:5b:4b:16:19:24:35:fe:6e:2c:7c:26:a4:
                    a5:c8:90:1f:9c:93:ea:64:69:09:72:3b:b4:ab:a2:
                    60:91:a5:63:c0:b8:09:39:04:bd:90:15:84:78:05:
                    a6:f4:5a:c6:61:02:50:d1:fb:a4:13:c4:f2:0a:30:
                    27:08:4e:ac:87:4b:20:b3:b0:fb:65:98:9f:f7:ed:
                    60:d4:42:d2:0f:40:92:8e:62:17:39:53:c9:62:4a:
                    99:60:4a:ce:5f:b2:e0:73:59:93:be:bc:cd:95:32:
                    fb:2e:c1:45:98:3d:0e:c3:9e:24:15:20:04:67:97:
                    99:1c:25:63:7a:bf:59:77:22:21:3a:4a:6d:d5:66:
                    b0:d6:c3:34:72:08:65:98:0a:86:fa:7c:ef:82:7b:
                    42:07:f5:89:05:4a:13:aa:d7:ea:03:ab:12:7c:c9:
                    14:66:0d:10:01:4d:c8:c9:4a:24:c6:e7:55:83:1c:
                    56:92:79:35:c4:39:14:12:d4:cf:e8:2f:1d:13:b3:
                    8f:79:17:4f:5b:56:de:89:39:07:c7:46:33:09:f8:
                    10:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AA:C0:C8:65:E7:32:A8:43:05:6F:85:D5:E1:AD:96:88:F0:B1:D6
            X509v3 Authority Key Identifier:
                keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ab:9f:58:e6:6d:1b:e4:bc:a3:34:71:5e:9e:53:3a:77:e0:
         2a:30:82:ac:ad:d3:f4:81:37:eb:65:90:78:5b:a5:5a:6f:80:
         6f:a4:93:4f:41:50:5e:76:d9:53:67:d7:37:fb:b1:84:5c:a6:
         25:c2:2a:bc:3b:c5:30:a6:7b:93:c8:e8:f5:5b:e2:b4:6b:03:
         b4:02:a4:4e:56:fe:42:f6:f3:f2:01:df:40:71:87:4f:4c:04:
         80:7e:ed:8b:3f:ae:59:0b:7b:dc:12:95:e3:ef:87:78:db:a5:
         26:4c:0b:bc:41:6c:e3:fe:f8:73:13:5d:9f:ca:93:f2:e3:31:
         80:98:d4:c8:90:80:5d:3b:1e:a0:4b:55:49:1d:1d:c1:3f:8e:
         14:3f:2d:27:cf:7f:82:c4:a6:25:08:a3:c6:f8:90:89:f9:f8:
         b5:6b:79:b7:89:66:c8:ef:0e:ea:20:50:cd:01:a4:1e:4b:58:
         12:86:ed:99:df:ca:ca:8a:07:17:12:44:d3:d3:72:4d:3c:cb:
         d8:16:fc:c9:23:4f:8a:07:36:7b:7c:f3:e8:c8:68:82:02:71:
         2d:4c:ce:98:81:8c:d7:1a:1d:5d:ee:e3:06:2d:2f:9e:b6:be:
         06:e4:6e:20:90:b0:a8:4a:69:af:37:c5:30:32:19:fa:d4:e0:
         c3:97:ca:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----