Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
File:                     JTNYNY66UbU00_rppsuHHeY34AA.mft (raw, json)
Hash identifier:          7Uaum8JlLiVtDriR5FaFN6Ls/DHz1lLZit8ae2EHD/A=
Subject key identifier:   0D:BB:0C:19:53:FF:18:3D:1B:A3:17:C5:01:3E:A4:CE:B5:6B:75:69
Authority key identifier: 25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00
Certificate issuer:       /CN=253358358eba51b534d3fae9a6cb871de637e000
Certificate serial:       01962E999E5E73B9A33DFB99E06369602C0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
Manifest number:          0888
Signing time:             Sun 13 Apr 2025 10:02:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:21 +0000
Files and hashes:         1: AznASXPtSsVB0QJTrOLEwvRqJvg.roa (hash: AIlADlzguhRYCJM9H8PKNEWx4IayFm+wVXpreNrn5jI=)
                          2: JTNYNY66UbU00_rppsuHHeY34AA.crl (hash: H7CjWC8Riky+pQCOTeXFM1YB3XuH4UgBNaxx243V5KY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9e:5e:73:b9:a3:3d:fb:99:e0:63:69:60:2c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253358358eba51b534d3fae9a6cb871de637e000
        Validity
            Not Before: Apr 13 10:02:21 2025 GMT
            Not After : Apr 14 10:02:21 2025 GMT
        Subject: CN=0dbb0c1953ff183d1ba317c5013ea4ceb56b7569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1d:4a:60:3f:6f:2b:ab:c1:8a:29:10:e9:a9:
                    76:41:87:59:fb:e9:3b:b2:6f:cf:b0:d1:0d:18:d4:
                    d0:bb:0d:a5:66:b4:6a:7e:53:86:c3:be:50:04:1d:
                    71:f6:e6:fd:67:cc:0e:20:39:72:b1:a5:8b:f6:db:
                    d7:39:09:51:65:ed:42:6b:6e:dd:ad:d5:18:e7:8a:
                    ff:c2:5d:50:d7:5d:13:19:eb:7c:93:87:62:52:94:
                    4c:c1:75:76:6a:56:a8:a6:01:70:83:e3:32:21:d6:
                    85:e9:bd:f5:53:9b:03:bd:48:0f:8b:d5:3f:ad:dd:
                    46:1d:37:90:97:7a:57:13:69:20:89:4b:a8:e7:74:
                    50:94:90:32:6a:64:5f:58:10:f0:a5:d1:d6:17:d7:
                    30:f8:1b:d7:13:ac:70:4a:09:d4:28:0e:93:6b:68:
                    96:e2:f3:ad:52:6a:e3:b6:67:fe:6b:82:64:0a:44:
                    74:27:7d:77:7f:bb:d9:e9:46:58:14:08:31:8d:a0:
                    57:52:68:ba:3a:0e:53:72:8e:b4:c1:8c:cb:27:d3:
                    85:a3:9e:85:32:d8:47:0c:98:76:a9:e1:d5:12:9f:
                    69:78:ff:8e:ca:4a:d2:b6:21:60:45:a5:51:42:e6:
                    70:94:6f:7e:70:fd:77:4d:f3:a4:2c:24:d9:c7:4d:
                    7b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BB:0C:19:53:FF:18:3D:1B:A3:17:C5:01:3E:A4:CE:B5:6B:75:69
            X509v3 Authority Key Identifier:
                keyid:25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:2f:8c:ce:ab:6b:d9:6a:2f:2c:cb:71:cb:1a:d2:ef:d8:f8:
         33:1b:c0:c8:fa:10:41:b6:12:28:fe:7e:17:f2:69:a0:41:bd:
         94:33:6b:7a:05:3d:de:16:85:e0:72:e4:2e:42:2e:ce:b1:28:
         cc:b4:6c:60:1d:0e:d2:0f:9c:3c:e7:26:e5:17:0b:d0:f2:a9:
         68:15:79:22:0b:a0:2b:d4:91:89:70:3f:1a:00:f4:73:d4:fc:
         04:20:03:d5:87:87:fe:7a:68:57:01:8b:29:cb:f0:09:ee:81:
         e1:f6:0e:bc:09:3b:52:fd:6c:01:e8:6d:bd:34:27:c3:b1:59:
         11:1c:71:d9:ca:6e:cc:31:46:6d:a6:19:5c:c3:11:57:76:f6:
         00:45:19:2f:79:70:3d:45:a9:a1:0a:bf:29:a4:bc:8e:b8:1c:
         7f:18:12:3a:2f:66:01:eb:8e:47:c7:dd:e6:3a:1d:1e:90:2d:
         c3:a9:c6:75:b0:67:1b:59:47:30:cd:20:1b:fb:1e:c8:5b:cd:
         e2:1c:2a:d8:f5:e4:7f:d3:3f:9e:ea:75:89:96:59:d1:d3:54:
         da:a0:72:15:10:05:3e:01:b8:53:eb:01:9d:54:25:4d:77:bb:
         64:63:5f:11:6c:b6:f5:bb:be:f5:f6:53:93:b1:7a:8d:b3:81:
         e7:6f:5f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----