Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
File:                     Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft (raw, json)
Hash identifier:          N47n8V/ULNmCH/+TtJAg4dAIRaUlYhLZL4acTv9qUIc=
Subject key identifier:   E9:A7:BD:EF:39:BF:BB:31:B2:D3:1E:17:9A:5D:3F:6C:06:4E:78:5F
Authority key identifier: 25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
Certificate issuer:       /CN=25fd5781576f3d4225af99453e93a92598527126
Certificate serial:       01962E997A7BDDBEE011E09B6BC8DAB88811
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
Manifest number:          1305
Signing time:             Sun 13 Apr 2025 10:02:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:12 +0000
Files and hashes:         1: Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl (hash: w+Wm+MmD+dbdgXIpE4el4anEnxEAChbRN4vQjIXVdmw=)
                          2: ShfkVecVvyoW3_YQq7LwcMaYmQs.roa (hash: BoQNVikNhGTcu9edVXF4u7v7ipMyHbA4n2LulfglPKU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7a:7b:dd:be:e0:11:e0:9b:6b:c8:da:b8:88:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25fd5781576f3d4225af99453e93a92598527126
        Validity
            Not Before: Apr 13 10:02:12 2025 GMT
            Not After : Apr 14 10:02:12 2025 GMT
        Subject: CN=e9a7bdef39bfbb31b2d31e179a5d3f6c064e785f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f4:dc:84:96:a9:9d:79:96:ec:7e:44:cb:94:
                    32:93:20:04:87:c3:44:b9:12:35:d1:ea:b1:5a:02:
                    38:2e:c7:83:92:c6:4b:80:a2:45:90:da:9b:cc:de:
                    7b:42:3d:fd:4d:a0:8d:a0:e5:49:f8:9d:be:69:b3:
                    a1:8c:bf:4b:bc:fe:07:e8:6f:12:6e:01:0a:5b:b4:
                    48:e6:7a:62:5b:a5:7f:de:d6:eb:da:96:32:62:88:
                    7b:6c:63:a7:09:19:8a:14:d0:60:a9:a7:df:85:42:
                    93:2e:d6:81:cd:8f:a2:f2:f6:5b:39:ec:39:e2:a7:
                    b5:12:92:3b:70:82:e1:17:dd:77:33:dc:bd:30:ec:
                    5b:92:61:34:65:0a:6f:94:66:f8:ee:ba:7b:6c:7c:
                    06:65:df:23:94:c4:c5:d4:30:f3:a9:5f:71:7d:d5:
                    48:45:ca:a6:d4:d1:bb:31:00:ba:cd:f7:4f:6a:47:
                    b6:23:a4:fe:bf:3d:64:9d:1c:24:45:6a:0a:e4:a0:
                    55:b6:26:66:b7:89:87:7f:cc:82:c5:de:54:18:67:
                    71:c6:64:a9:56:ad:53:a6:12:b5:68:d3:f2:66:7f:
                    58:dd:f6:38:f8:20:5a:03:3e:74:be:57:b7:fb:a2:
                    ad:1a:0a:74:2e:57:6e:1e:cb:8f:6e:31:a6:ba:05:
                    a3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A7:BD:EF:39:BF:BB:31:B2:D3:1E:17:9A:5D:3F:6C:06:4E:78:5F
            X509v3 Authority Key Identifier:
                keyid:25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:d6:ca:57:50:9b:e7:96:2a:e2:ca:9a:4f:b7:ae:69:96:b4:
         d6:1b:50:6a:d7:fb:b0:5c:74:0f:c7:fe:d6:0c:9d:3e:f0:b2:
         7d:40:12:1a:f6:06:2b:c0:8c:46:41:17:3e:b0:1a:69:4e:c5:
         7a:71:fd:5b:20:a6:db:c5:9e:96:07:db:61:b9:28:51:e5:69:
         49:b8:b8:c0:09:68:97:a1:f1:59:0e:3c:8b:ab:1a:c0:2c:63:
         77:36:75:7c:bf:00:aa:6a:4b:8c:7d:c1:5a:cc:53:68:f7:4e:
         7e:cd:c1:7f:ed:c5:bf:ec:06:9c:c4:b7:df:c6:56:59:27:f7:
         cc:e8:f3:cc:2d:9f:ec:c5:d6:c7:63:55:cc:86:65:9d:0f:19:
         d3:d1:70:3e:4f:42:05:ad:42:5e:d1:69:83:00:bf:01:e0:14:
         0a:e7:9f:7b:31:65:f7:2b:e6:ad:0c:43:a4:44:cd:fa:da:91:
         f5:e7:7e:0a:26:6c:a6:4a:48:02:a6:f3:2f:1e:9d:84:ac:f7:
         1a:b6:83:60:e9:36:ce:e5:4c:7a:5f:53:79:37:57:07:bd:2e:
         65:2c:f5:3b:98:5d:6f:fb:b4:10:79:2b:3b:af:35:39:e0:37:
         f1:b8:31:4d:46:00:05:ee:e5:45:04:4f:e8:71:b3:a5:af:62:
         72:f2:1e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----