Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
File:                     jTUmuzG54wxJBF9DaMYC7pi-wBo.mft (raw, json)
Hash identifier:          OCaQPAGvEhLb9VLceENyMq1im6LYVdW23pk/iuCn4dM=
Subject key identifier:   A1:51:A2:06:B0:45:DC:A9:21:DA:E9:F3:39:F2:06:FE:6F:44:10:5B
Authority key identifier: 8D:35:26:BB:31:B9:E3:0C:49:04:5F:43:68:C6:02:EE:98:BE:C0:1A
Certificate issuer:       /CN=8d3526bb31b9e30c49045f4368c602ee98bec01a
Certificate serial:       01962ECFBBE64A43482F2069D8B03A820944
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
Manifest number:          0238
Signing time:             Sun 13 Apr 2025 11:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:27 +0000
Files and hashes:         1: e6xoJBVIfdJmiKe2nJgRQGtQ5ww.roa (hash: JfuVzsuhmGpnCucojoUfItSJOnwkZRw4nitsAmYaRLg=)
                          2: jTUmuzG54wxJBF9DaMYC7pi-wBo.crl (hash: bUGSwBvwfiYQE8gtmAnNfho82VJII/qTmh8vPAl65ZE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:bb:e6:4a:43:48:2f:20:69:d8:b0:3a:82:09:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3526bb31b9e30c49045f4368c602ee98bec01a
        Validity
            Not Before: Apr 13 11:01:27 2025 GMT
            Not After : Apr 14 11:01:27 2025 GMT
        Subject: CN=a151a206b045dca921dae9f339f206fe6f44105b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:96:de:83:3c:ae:69:50:2a:b8:eb:94:c4:06:
                    4e:12:9b:21:2c:b0:00:6a:48:4c:91:92:33:74:25:
                    ce:af:28:3f:e6:00:b3:1a:89:ff:62:f0:aa:ce:cb:
                    a4:0f:0d:a6:27:d5:6a:9a:29:54:14:c2:9d:17:9a:
                    9f:c1:a8:02:5c:5a:58:07:ae:6c:36:85:3e:3a:7c:
                    62:ce:37:87:79:c0:11:2e:88:90:02:d1:34:eb:a7:
                    63:25:68:ce:97:d2:46:d8:cb:6a:b9:9d:f8:3b:21:
                    ac:e5:6a:7f:3a:cf:7b:82:2b:5a:34:79:62:19:f3:
                    18:19:2f:20:e4:89:77:89:74:50:52:d2:28:ec:30:
                    42:f4:4c:dd:4a:9e:4d:77:c8:29:51:45:01:3e:11:
                    e9:f8:d9:44:c6:24:80:71:0e:d9:aa:e5:82:f2:bd:
                    a1:51:b3:99:ad:14:20:de:7e:a2:2b:f0:89:b0:ad:
                    fc:91:39:c5:08:44:c8:fa:d5:62:ac:07:f7:21:53:
                    5f:32:42:3b:3a:5d:ac:97:92:84:aa:04:ff:71:12:
                    a2:08:44:cc:2e:ae:0b:00:1b:ce:e7:78:fa:94:9e:
                    09:70:a8:75:94:ea:bc:bb:89:cd:35:ae:c1:5d:e6:
                    4c:a6:9a:df:e3:77:01:40:e5:e0:8c:21:b9:f5:8b:
                    7e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:51:A2:06:B0:45:DC:A9:21:DA:E9:F3:39:F2:06:FE:6F:44:10:5B
            X509v3 Authority Key Identifier:
                keyid:8D:35:26:BB:31:B9:E3:0C:49:04:5F:43:68:C6:02:EE:98:BE:C0:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:19:23:e1:58:5c:6a:ee:0e:67:c5:e4:20:0d:cd:8d:81:d1:
         e7:47:82:af:28:fa:3d:57:7d:f4:68:86:22:c4:a4:d0:b7:e0:
         eb:bc:ca:1a:7f:2d:9b:0d:c7:88:a8:48:39:cb:af:b1:9e:47:
         ea:01:64:b9:84:f7:1d:4c:d4:2f:f0:e6:09:c9:f1:3c:09:9b:
         c3:9e:a1:b3:b8:71:5e:7d:7f:a1:c2:73:e8:3b:9c:aa:b7:d4:
         c3:73:70:6b:68:ad:1a:08:a7:da:c6:fe:07:92:e6:2a:a9:c2:
         e1:97:fa:b8:f5:8f:75:1e:a7:ff:99:3c:05:08:a5:87:7e:c1:
         9f:01:ce:07:1e:4b:ea:39:b7:73:e1:1a:c5:d6:60:2e:c2:34:
         f9:ba:15:46:47:6a:38:f4:e5:cd:42:20:6b:ba:f8:61:3c:67:
         da:b0:bc:70:27:58:ce:f3:68:c8:62:d0:5d:ea:b1:50:87:8a:
         6b:81:00:54:ac:80:e6:ee:ef:90:0b:53:37:e7:21:3f:ff:4b:
         4a:a8:d3:6e:39:bd:a0:f7:d7:5d:55:0a:47:05:10:b2:35:bd:
         f8:89:13:db:40:e7:ec:f3:3b:2a:c7:17:9d:4c:b8:bb:82:67:
         2d:e3:53:d0:6f:e0:58:7b:33:5e:b2:85:70:49:dc:a1:e9:c4:
         70:46:98:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----