Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9cedd9-113b-4061-a632-4e1d167f0a9c/1/JOuXPcgi1CNuy911UB0mxD4chzk.mft
File:                     JOuXPcgi1CNuy911UB0mxD4chzk.mft (raw, json)
Hash identifier:          Cfz/TKaufTl/lDOAQqCL0SPv3i6+KB6mqmDrbbHequs=
Subject key identifier:   D9:AD:A1:C5:8D:76:A2:5B:B6:2F:C5:7F:E4:58:9A:DF:29:73:A1:AC
Authority key identifier: 24:EB:97:3D:C8:22:D4:23:6E:CB:DD:75:50:1D:26:C4:3E:1C:87:39
Certificate issuer:       /CN=24eb973dc822d4236ecbdd75501d26c43e1c8739
Certificate serial:       01962E98E72C8948DE6AA78AA4560244694D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JOuXPcgi1CNuy911UB0mxD4chzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/9cedd9-113b-4061-a632-4e1d167f0a9c/1/JOuXPcgi1CNuy911UB0mxD4chzk.mft
Manifest number:          098E
Signing time:             Sun 13 Apr 2025 10:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:34 +0000
Files and hashes:         1: JOuXPcgi1CNuy911UB0mxD4chzk.crl (hash: KhKIchK0ESz05Cc2Vt94jUN8jL00i56gXZ08gSTRBKc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e7:2c:89:48:de:6a:a7:8a:a4:56:02:44:69:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24eb973dc822d4236ecbdd75501d26c43e1c8739
        Validity
            Not Before: Apr 13 10:01:34 2025 GMT
            Not After : Apr 14 10:01:34 2025 GMT
        Subject: CN=d9ada1c58d76a25bb62fc57fe4589adf2973a1ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d3:dc:d7:27:11:f6:49:86:44:ed:f9:19:59:
                    65:7c:61:fb:be:9f:50:57:d4:1f:4f:d7:95:30:21:
                    cc:21:b4:9e:21:62:c7:14:b5:eb:b0:2c:85:4f:56:
                    e3:5d:5b:0f:39:0a:56:cf:c7:f8:19:0f:87:56:b2:
                    0b:4e:32:12:a6:a0:09:f2:d7:27:16:b4:d0:95:b7:
                    51:eb:87:d9:55:c4:ad:3f:91:19:2e:90:ae:8d:15:
                    68:89:19:03:9d:7f:38:25:e5:da:05:50:39:c6:74:
                    6a:01:7f:43:d3:97:09:90:62:71:b6:91:14:2f:b0:
                    8f:18:dc:51:b5:12:c1:e9:95:ca:01:2c:6e:b9:b4:
                    b3:16:aa:1e:80:5b:79:46:51:db:91:49:2b:29:12:
                    f6:90:90:79:38:e7:25:61:52:d3:73:c3:7a:13:a4:
                    cc:e9:78:e7:d9:26:83:01:fa:eb:67:1e:78:59:65:
                    4e:1a:9a:c1:cb:4c:24:c1:97:2d:20:48:b4:af:eb:
                    3f:94:46:b0:4b:8f:bc:31:9e:2d:f7:e7:68:3d:13:
                    6e:58:aa:0f:aa:b1:a0:8c:8d:a4:3d:43:1c:fa:44:
                    52:10:da:bd:45:40:e1:e0:1c:c6:94:64:9d:b6:8c:
                    76:43:ad:cc:e1:d6:32:28:02:9b:8f:41:d4:49:2d:
                    5d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:AD:A1:C5:8D:76:A2:5B:B6:2F:C5:7F:E4:58:9A:DF:29:73:A1:AC
            X509v3 Authority Key Identifier:
                keyid:24:EB:97:3D:C8:22:D4:23:6E:CB:DD:75:50:1D:26:C4:3E:1C:87:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOuXPcgi1CNuy911UB0mxD4chzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9cedd9-113b-4061-a632-4e1d167f0a9c/1/JOuXPcgi1CNuy911UB0mxD4chzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9cedd9-113b-4061-a632-4e1d167f0a9c/1/JOuXPcgi1CNuy911UB0mxD4chzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c3:7c:41:9e:c5:c5:bb:19:6e:17:8b:01:28:f4:39:6a:1d:
         0d:44:a1:8b:b2:ae:45:bd:f7:7e:f8:b1:94:09:f1:e6:56:df:
         40:ce:40:0b:c8:d1:63:e9:9b:75:8b:df:0b:8e:43:fd:c1:7b:
         e8:93:68:29:55:4f:d9:6f:e4:b5:96:d3:07:09:28:16:1c:fb:
         4d:f2:2a:28:09:dd:0e:99:d9:20:ed:42:ab:2d:c9:5d:ee:7b:
         26:72:44:ed:c5:66:d1:fd:21:74:31:2a:e3:6b:4a:3b:f5:ff:
         70:e0:69:0b:54:e7:7d:71:f4:09:7c:b1:d5:88:c0:72:d2:e1:
         cc:fe:bd:f2:b7:35:1a:20:63:e8:fb:52:32:ea:d1:93:9b:e1:
         c7:4b:bd:d6:04:d6:7a:0d:33:35:86:56:1b:69:aa:eb:af:e4:
         1c:e8:f1:8d:ff:ae:39:73:21:8f:79:57:80:2b:82:36:c3:93:
         9a:b5:e8:93:fd:96:01:3b:12:18:67:77:0a:68:0c:40:90:25:
         cb:36:36:6c:80:84:b3:62:0f:3e:70:e8:7a:df:3f:de:4c:2d:
         a5:50:84:6a:6b:f6:61:5a:ad:5e:f1:24:d6:e2:cf:42:6e:9b:
         9a:8e:0a:89:d3:ec:97:b7:ae:95:76:87:34:df:83:42:b7:43:
         88:23:dc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----