Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
File:                     JQ599DyC0SChPTyGXx8G9JZEseE.mft (raw, json)
Hash identifier:          30a8BrQbvNQQZvNWo9Tct+fB8v5ydH14b0O54dI5E9U=
Subject key identifier:   46:3A:C2:F6:79:CE:3B:66:78:DF:58:90:D9:49:11:16:65:88:5B:F7
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Certificate issuer:       /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial:       01962DF3A7B0820F335333A1EA7772B07751
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
Manifest number:          0CCF
Signing time:             Sun 13 Apr 2025 07:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:04 +0000
Files and hashes:         1: JQ599DyC0SChPTyGXx8G9JZEseE.crl (hash: 7yYfhkzh//kx2M24rX6ld0YwfxqYr3dwYKy1szKwdpI=)
                          2: NxEFYabQ1De2D9MRDvZOgIu0R4g.roa (hash: lAojMYDzIDb75W7SBnvnLzGQZua9BCv398UHDwqthXo=)
                          3: uBhMU8FaL6yzEgI8KXo0amRkPt0.roa (hash: rZaJZ+vs9poyZNeTB4YM94eOiwwWluQ2wWx8JrMOGHo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a7:b0:82:0f:33:53:33:a1:ea:77:72:b0:77:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
        Validity
            Not Before: Apr 13 07:01:04 2025 GMT
            Not After : Apr 14 07:01:04 2025 GMT
        Subject: CN=463ac2f679ce3b6678df5890d949111665885bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:11:d7:f7:f6:dd:86:bc:54:97:f0:c9:25:32:
                    35:20:43:d6:a1:40:10:42:80:39:f9:12:75:b4:d3:
                    ab:bb:a2:d0:5d:28:1c:65:c5:75:66:7c:e1:cf:fa:
                    ee:9d:99:58:65:18:13:9a:69:7c:7d:29:19:23:b4:
                    f9:7c:ae:de:be:26:75:f5:15:6b:3d:ed:01:cf:ba:
                    cf:c2:bc:e4:f4:0e:7b:7e:0f:3b:53:e9:41:2f:80:
                    01:58:5c:ee:e7:3f:99:68:10:8d:a9:28:be:e9:4a:
                    ee:ac:5a:5a:bb:47:fb:d5:81:6b:d9:cb:2b:e5:f0:
                    a4:9a:96:e1:73:ca:0e:95:ff:22:9f:ab:8a:fa:6b:
                    43:2e:3d:46:5a:a0:48:f7:42:f2:91:7c:bf:60:b3:
                    ff:74:e7:80:b6:96:29:f3:4a:12:6a:75:c6:92:aa:
                    e9:7a:09:f2:aa:82:df:dc:9d:c8:9d:cf:7d:a7:f8:
                    03:78:1c:0c:6b:bc:30:62:41:58:c2:51:4c:03:bf:
                    28:bb:b7:1c:57:4c:01:bd:d5:25:46:a4:1f:40:6f:
                    64:ea:a3:9f:c4:d7:c9:a1:9c:d3:a0:74:8b:8f:c4:
                    a2:62:af:5b:14:56:3b:77:0b:a0:cc:c2:25:b8:30:
                    7e:a1:d2:b5:72:b8:6d:19:f9:32:31:1e:22:47:af:
                    1c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3A:C2:F6:79:CE:3B:66:78:DF:58:90:D9:49:11:16:65:88:5B:F7
            X509v3 Authority Key Identifier:
                keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:1e:83:63:d8:e8:bf:be:ad:96:82:3f:75:71:83:d8:fc:18:
         64:16:86:62:e4:9e:95:a4:7a:4e:2f:c3:79:1d:2b:13:5d:33:
         43:a7:70:98:20:48:a6:46:5c:21:b7:5d:4c:93:f0:aa:41:50:
         28:53:46:62:54:3c:52:3b:ea:40:a3:7e:54:3c:c3:fe:9b:d6:
         66:84:2a:38:41:18:f8:8a:f0:dc:21:de:62:c9:88:3a:28:e6:
         ba:b0:82:c4:b1:fb:08:5e:c0:3c:d9:76:e5:b6:92:a0:cc:03:
         04:a3:94:03:64:87:4f:1a:14:27:80:8a:43:1c:7c:d9:83:9d:
         33:5e:50:6e:fe:f0:43:ca:0e:f8:d6:1d:f1:c9:af:fc:88:71:
         aa:9b:f7:f1:83:de:3b:f3:77:24:61:35:2c:51:50:c4:ae:da:
         27:50:09:97:f1:c1:3e:91:ec:70:04:52:a1:81:ae:84:3e:21:
         c5:17:0c:41:73:83:1b:b4:43:1f:5e:4d:42:98:32:e6:31:58:
         0c:4f:69:b3:f5:37:ad:5f:41:92:85:d0:53:51:76:b8:d0:1f:
         b4:f9:ae:45:34:cc:e5:df:10:e0:ca:5e:08:97:09:19:6c:2c:
         55:35:5e:bc:27:e6:45:5d:5c:80:86:81:d6:55:2e:84:59:63:
         4d:38:41:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----