Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft
File:                     Jw__IYVmW535AIyeG-YmARiafXw.mft (raw, json)
Hash identifier:          I1MjPsSAmhWD6WSgQzg6hEagdrU8ucRlOkCfqAp7FfE=
Subject key identifier:   D3:1C:FC:84:37:DA:76:28:75:51:5F:EE:12:1C:2F:8F:56:38:A4:77
Authority key identifier: 27:0F:FF:21:85:66:5B:9D:F9:00:8C:9E:1B:E6:26:01:18:9A:7D:7C
Certificate issuer:       /CN=270fff2185665b9df9008c9e1be62601189a7d7c
Certificate serial:       01962E2AC6E59E4ABAEC804411E9CEA42D1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft
Manifest number:          0893
Signing time:             Sun 13 Apr 2025 08:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:17 +0000
Files and hashes:         1: Fy2IYBN9hjZkWkvbtPQPrYui0qc.roa (hash: JelZKBaztB5j8Dd3i30kr2+tTI62dQSAVwbIQZ0Mhyo=)
                          2: Jw__IYVmW535AIyeG-YmARiafXw.crl (hash: qK59z+JRf75my0hRw96BrNgGIumbe/r7HbWvomA4YRk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c6:e5:9e:4a:ba:ec:80:44:11:e9:ce:a4:2d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=270fff2185665b9df9008c9e1be62601189a7d7c
        Validity
            Not Before: Apr 13 08:01:17 2025 GMT
            Not After : Apr 14 08:01:17 2025 GMT
        Subject: CN=d31cfc8437da762875515fee121c2f8f5638a477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e0:0a:4b:20:c8:31:43:54:c0:2b:6d:ed:95:
                    fa:66:db:7e:47:ab:9b:2e:09:6b:dd:34:8b:49:e2:
                    82:e1:48:c5:52:46:82:59:37:de:65:6d:23:36:14:
                    e7:4b:04:6a:cd:ac:87:1a:f9:e1:7f:f5:7c:c6:b6:
                    46:ab:52:11:05:71:b2:c9:09:10:b9:76:80:ba:99:
                    df:de:2b:59:96:63:ac:02:7b:68:d7:32:bf:d4:56:
                    76:bf:8c:a1:21:f5:14:62:03:48:fe:a3:b2:37:30:
                    0f:be:b2:e4:74:00:bc:15:56:b2:36:d5:4c:92:1e:
                    7d:aa:d9:5e:22:8e:e7:01:a3:cc:00:f0:4e:e8:af:
                    e9:49:9a:a1:c4:17:b9:f2:be:87:28:b8:11:39:be:
                    82:a1:f8:b5:bd:0e:69:30:31:bf:0f:23:ad:41:b2:
                    5d:97:d9:57:a5:70:ba:b9:a1:48:bb:91:19:94:01:
                    4d:f4:d6:51:31:29:b3:4d:99:18:3d:a1:a3:42:10:
                    6f:d4:15:6d:e0:e2:fe:e6:41:b7:64:9a:96:74:90:
                    2a:7f:aa:f6:63:59:61:f1:c1:e9:e6:c6:0d:6f:77:
                    3a:c2:c5:23:3e:ff:4e:33:0a:13:8f:74:4b:63:9d:
                    ea:02:33:14:41:b3:29:eb:88:06:67:41:3d:55:2c:
                    58:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1C:FC:84:37:DA:76:28:75:51:5F:EE:12:1C:2F:8F:56:38:A4:77
            X509v3 Authority Key Identifier:
                keyid:27:0F:FF:21:85:66:5B:9D:F9:00:8C:9E:1B:E6:26:01:18:9A:7D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:38:88:13:46:63:51:7e:98:32:34:5f:17:ce:60:f8:95:b7:
         9b:d0:cc:29:a4:31:f7:c0:07:d0:c0:47:82:a3:fd:8c:2a:59:
         bd:a6:f9:09:86:cd:b3:32:70:83:a4:e0:7b:66:d5:75:e6:94:
         b7:c8:37:58:ae:91:5b:1d:a6:42:0a:04:37:1e:d2:7d:f0:b6:
         ff:07:0e:1b:85:0b:dc:4d:15:34:4b:b7:01:aa:af:cb:f8:d2:
         bb:81:9b:5c:7b:c9:72:56:72:9f:63:70:31:3d:78:46:f3:73:
         a1:3e:23:fe:c7:0c:2b:12:12:7e:e7:20:0b:72:61:46:71:21:
         b7:47:10:56:f8:47:90:fa:36:50:c0:32:33:aa:f0:36:f0:a0:
         8c:ec:42:da:c3:d8:b1:87:2c:19:0e:e6:9d:92:f4:8c:65:c4:
         5a:90:2d:21:e9:49:d2:80:18:44:2d:ef:e5:da:04:fa:0b:23:
         07:67:e3:9b:79:8d:88:d6:c8:12:62:5a:49:a5:9b:7a:1d:d3:
         61:b7:50:bf:f6:ee:ed:ff:42:f0:9f:14:67:c3:ff:5a:99:35:
         99:d2:4e:f8:70:68:d2:4a:ec:26:79:19:38:52:4f:4d:61:28:
         a1:53:fb:7b:f1:4f:cb:39:73:34:52:f1:09:ab:3d:0c:b8:92:
         00:ee:78:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----