Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
File:                     JTKlzyuhjHU-3JXuILZmKT3wLVs.mft (raw, json)
Hash identifier:          ettmb0KRsBQ32/jmR5Z8omodZMz5sEEmY9ALxqzlAuM=
Subject key identifier:   95:B1:93:27:09:B1:4A:1F:A1:7C:14:F5:51:42:8C:CB:83:17:C5:EA
Authority key identifier: 25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
Certificate issuer:       /CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Certificate serial:       01962F74781EA2BBDE6E11EC74BFD726645B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
Manifest number:          0FCC
Signing time:             Sun 13 Apr 2025 14:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:24 +0000
Files and hashes:         1: JTKlzyuhjHU-3JXuILZmKT3wLVs.crl (hash: ZlmkPzfzEv1BxCRwppQRogOK6RP/LkSueXlltDpru90=)
                          2: oBH_u1PqllstMg1clbDeim1fyyE.roa (hash: L3SOkvuxnMh5EHKE9/YilBcdLKJMaucr/0ncA4MIDhw=)
                          3: zHs9cFuQEsCg45LnMiCsOF3kF4Q.roa (hash: C6+fwUFGNJ/F4sEfe/qDP+eEAltXpbDsycsJBFRmzqw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:78:1e:a2:bb:de:6e:11:ec:74:bf:d7:26:64:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
        Validity
            Not Before: Apr 13 14:01:24 2025 GMT
            Not After : Apr 14 14:01:24 2025 GMT
        Subject: CN=95b1932709b14a1fa17c14f551428ccb8317c5ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c0:08:f7:60:eb:71:d3:63:bb:25:c5:6e:fa:
                    b0:d3:b0:91:d2:60:e2:f2:69:20:52:f5:9f:b7:be:
                    4e:48:a5:36:25:1a:bb:e3:b6:cb:8f:04:26:ab:76:
                    80:fe:52:4b:60:7a:34:a2:47:ef:80:7f:05:7d:30:
                    8e:15:08:91:4b:3e:1e:a6:e1:b3:cb:8e:54:ff:95:
                    21:06:5e:5e:c5:33:82:33:31:79:61:67:87:cc:4d:
                    43:14:61:1c:fc:fa:55:26:f4:d8:26:da:26:17:4d:
                    3b:69:a9:aa:b2:f6:14:19:ba:e4:6d:3d:d3:f7:e9:
                    dc:fe:a9:2f:04:af:ae:15:42:42:04:51:00:8f:7d:
                    22:6d:65:b3:42:28:d2:e5:ab:fa:28:97:1a:85:05:
                    24:bf:fe:46:a9:32:42:da:d0:44:0a:cb:ae:e3:9b:
                    78:54:ff:1f:5b:e0:1e:1b:0b:a7:d4:e0:f7:4e:26:
                    ff:1a:c1:ef:c7:87:23:fa:cd:44:99:c2:16:d0:b6:
                    c0:c3:7c:0a:44:30:e3:0f:d3:9f:a1:a1:e8:06:47:
                    2e:43:bb:d6:84:2b:13:5e:37:6a:3f:53:50:40:e8:
                    31:42:2a:c5:cc:37:a0:fd:ae:8b:64:93:fb:4c:d9:
                    1a:54:12:a2:f1:e6:b7:59:29:08:38:72:d8:dd:7b:
                    5d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B1:93:27:09:B1:4A:1F:A1:7C:14:F5:51:42:8C:CB:83:17:C5:EA
            X509v3 Authority Key Identifier:
                keyid:25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:c4:1a:a7:20:c2:45:a5:b8:19:20:79:b9:91:e2:8e:43:c1:
         d0:dc:46:fb:90:46:04:cc:5f:2a:82:89:f9:40:2d:9b:fc:d5:
         1a:2b:cd:f4:a6:85:e7:1d:78:87:54:78:e1:88:55:a5:45:57:
         f7:d0:f1:1f:cc:0a:66:df:c8:1a:ec:18:6b:4b:d2:7c:56:c0:
         4f:4a:9d:9b:cd:ec:1f:06:7a:48:a1:33:34:e1:a7:2d:ab:e1:
         6b:f5:6b:c0:07:6f:67:ff:72:fb:00:1c:9c:e6:6c:a7:aa:e4:
         51:9a:c5:13:e8:7c:f7:79:10:e9:c7:8f:d4:e1:95:05:f3:e3:
         ea:2f:40:1b:b5:bc:bd:82:79:a1:51:a5:c6:d3:c8:63:b5:0c:
         38:74:15:0e:84:8c:0b:8f:a0:91:ac:d0:f3:2b:d1:ce:33:0a:
         f3:aa:98:f4:a2:fc:6e:b0:80:76:28:52:f1:28:15:80:dd:12:
         25:bf:86:dd:65:c6:dd:bd:31:ea:38:24:58:c5:6d:9f:21:c9:
         e8:14:46:29:52:6b:9d:53:a8:93:bc:23:08:64:5c:c9:c8:a4:
         21:bf:0a:d2:a7:03:49:fe:9a:87:4b:20:c0:97:d9:7d:31:b5:
         32:9d:b1:89:a4:45:0f:bb:3d:a9:af:75:15:75:15:26:e4:80:
         e5:87:74:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----