Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
File:                     JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft (raw, json)
Hash identifier:          RCdqwRhjWOwM9WQyNpElZLBotP51ipYU3sLiMHTNQ2U=
Subject key identifier:   D7:13:D1:B8:29:DA:FB:D0:F8:81:20:69:02:02:8B:70:87:9E:7C:98
Authority key identifier: 25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
Certificate issuer:       /CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Certificate serial:       01962E9861CB4D96BCBB726CDA997DD369FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 10:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:00 +0000
Files and hashes:         1: 2ilYjSsUyg0i-EOl5hfGDwVlKj4.roa (hash: p8QjhotvBCdHOmxF54vBU0ccs9eUkA9Pdd1QgMIFymw=)
                          2: 7qLq7aTWNHbxDovy4cDmNUB81ok.roa (hash: 45Whc0u7xWoUwZs881UVCIUC5K/sXDTJpbpU9JZ3Gm0=)
                          3: JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl (hash: 5n3JraxvS+hDGowpsOQ/tFuC/51AInJdrKXkMgImGVc=)
                          4: Jf85FwwWGAMm_y1gyBMRf8ZylY8.roa (hash: hqLNtg3bR55HcspgRfJxtmFSYZlPqsuiPGUD5+xKsFs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:61:cb:4d:96:bc:bb:72:6c:da:99:7d:d3:69:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2588b1b560f998eccd3a6eff40543b59204d67b8
        Validity
            Not Before: Apr 13 10:01:00 2025 GMT
            Not After : Apr 14 10:01:00 2025 GMT
        Subject: CN=d713d1b829dafbd0f881206902028b70879e7c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:69:86:09:d3:b5:34:ce:0a:5e:1f:4d:93:6e:
                    23:ac:78:29:0d:33:2d:db:9e:d5:86:bf:9e:7a:d5:
                    78:b5:b1:6a:2d:9d:d3:9d:88:ff:11:72:d8:fc:9c:
                    3c:0d:18:79:f6:6b:0d:20:19:05:61:37:1d:f9:fa:
                    43:54:ec:95:1f:cc:fe:8b:76:91:78:6d:ee:3d:b6:
                    e8:9b:67:93:e0:cf:b4:62:e3:16:bb:92:fd:6e:74:
                    dc:2d:7c:ef:73:5b:af:e2:26:ca:3f:2f:2d:32:63:
                    fd:29:13:bd:7e:b8:51:63:3f:91:c9:f8:64:b9:94:
                    fa:ba:1a:bd:9f:26:60:e0:28:61:01:1e:bd:39:73:
                    4e:09:e0:9f:14:80:92:95:f5:bb:68:f2:9d:b7:14:
                    07:4c:ad:26:16:9f:8a:ed:77:0c:01:fc:59:e7:b2:
                    fc:8b:35:ed:3c:61:68:33:f3:fb:fe:89:4a:20:d2:
                    4d:ac:b2:21:7f:16:de:12:d8:71:2f:52:39:4d:a7:
                    b0:ec:ea:78:d0:96:3a:ab:1f:28:5a:4e:98:41:ce:
                    60:ff:ca:a3:3f:cb:de:32:1f:7f:e1:71:1f:54:c5:
                    a8:e7:0b:f3:b8:9c:4d:1a:30:95:5d:c8:f2:58:0d:
                    dc:d2:27:88:d6:f1:8a:9a:59:6c:aa:7e:c1:9f:1b:
                    e8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:13:D1:B8:29:DA:FB:D0:F8:81:20:69:02:02:8B:70:87:9E:7C:98
            X509v3 Authority Key Identifier:
                keyid:25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:7d:8c:c8:19:af:70:7e:ee:44:ee:4b:0a:00:f9:8b:c2:b1:
         f4:38:4d:1a:4e:ca:ce:f7:a3:53:3f:ad:cb:08:6d:4d:fb:15:
         ae:3f:b2:04:70:13:d1:22:45:dd:00:2f:cd:3e:d8:e8:46:75:
         69:fe:fb:8f:09:6f:ba:37:a0:d0:ed:02:3c:82:16:98:07:f9:
         c3:1a:7d:05:91:dd:f9:21:a4:1b:67:6c:70:62:bb:2a:ce:f7:
         48:28:eb:1a:49:09:3f:5f:64:e4:fb:ae:63:63:ad:11:c7:90:
         55:83:38:7d:8a:96:42:58:d2:4a:0f:81:d4:6f:14:c2:3f:d3:
         a9:46:fe:f3:ad:7d:2e:64:0d:13:30:a3:9c:a9:c0:8b:41:31:
         a0:e6:96:72:a2:51:39:84:cf:4b:88:8b:ba:7a:65:7b:f5:fb:
         7e:77:14:22:47:28:de:e0:cd:f2:2d:db:19:c9:38:68:51:9b:
         d7:18:34:bb:0b:be:3f:40:4d:2e:28:aa:37:cc:42:33:8d:ac:
         bb:a7:ad:92:cc:6f:27:94:9c:c0:f2:76:87:51:8d:62:ca:4b:
         fc:7e:66:0b:00:f3:04:f7:5e:28:4f:a7:9b:46:96:e5:6a:1c:
         57:96:95:f7:e9:98:76:82:7c:f3:cc:51:bf:ab:09:f6:7f:7c:
         f5:8f:7c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----