Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
File:                     j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft (raw, json)
Hash identifier:          p2DfgPnPoVjtDzqU5RSo/ZC9tqtfAOTfiUSirHy8QII=
Subject key identifier:   F0:6F:7C:3C:28:8F:02:93:37:B7:19:1E:FC:10:9F:0D:6F:34:FA:B9
Authority key identifier: 8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8
Certificate issuer:       /CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
Certificate serial:       01962FAB66AD27B81D9672BDA7344FF8E461
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: 10WRObO3tmaDpYMoBfmVIGzlnrU.roa (hash: n66l+JhsIf8xYrrxl7QWiJVsW0qqjRpUm2OsP46Hyms=)
                          2: j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl (hash: XmZlo3AsWq1XfRWSmxMu1SYeJvxSVda+yFlL+J/DfbA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:66:ad:27:b8:1d:96:72:bd:a7:34:4f:f8:e4:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=f06f7c3c288f029337b7191efc109f0d6f34fab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:19:34:6d:cc:05:3f:8f:81:ed:20:0a:de:7f:
                    f6:fd:fd:19:32:4f:19:41:63:dd:32:87:44:c6:55:
                    cb:d0:d0:41:eb:2d:b6:1b:06:09:74:eb:39:c3:4d:
                    a8:82:c5:5d:59:7d:82:b7:86:58:d8:cb:1f:3d:76:
                    8f:93:d7:f2:4b:8d:45:fd:3f:51:64:06:b6:fb:0d:
                    0f:1c:9f:c7:ad:62:72:ca:ea:75:b8:0f:09:22:bf:
                    dd:3b:3c:ce:a3:45:55:33:7c:98:ab:12:d5:9d:93:
                    c3:89:33:0b:fd:f1:1b:18:e3:1d:d5:c6:ca:83:fd:
                    85:ff:6c:16:57:14:26:90:f1:98:13:d8:be:31:96:
                    e5:8d:b1:4e:59:70:d8:a2:06:16:de:c6:0f:8a:8b:
                    ff:e6:1f:99:12:d3:d3:b3:ce:3c:59:9f:4b:a1:2f:
                    79:98:71:77:e4:57:9f:f9:37:d4:de:fa:3f:1e:dd:
                    f0:c1:87:37:b1:9d:5a:f9:25:ac:35:4e:57:f6:fb:
                    de:5e:01:ae:1d:f1:0e:19:61:36:5d:71:37:d1:3e:
                    7a:09:64:b7:bb:62:c9:02:77:dc:5a:9e:93:36:e5:
                    9b:ce:ca:6e:54:4f:c8:dd:de:f7:f0:79:89:e0:9d:
                    cd:67:93:00:5b:ca:37:87:35:14:47:b6:e2:9d:05:
                    81:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6F:7C:3C:28:8F:02:93:37:B7:19:1E:FC:10:9F:0D:6F:34:FA:B9
            X509v3 Authority Key Identifier:
                keyid:8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:56:d1:ce:99:43:2c:68:46:f8:84:e9:ee:9f:e4:9b:fa:ab:
         8a:51:0c:86:45:c6:d1:14:81:92:60:16:e3:7a:75:91:1d:e9:
         35:55:6e:65:04:a2:f0:ca:9a:82:e6:f1:40:3c:43:b8:32:16:
         3e:d9:9a:82:b7:f4:9d:7e:1f:97:b6:1e:4c:bc:13:a7:d3:dc:
         eb:c7:9d:6c:42:e7:ac:c8:1a:90:61:2e:2e:7a:17:3e:cb:4a:
         98:38:5b:a9:52:50:47:67:2c:e9:6c:28:38:fb:8c:75:f9:81:
         92:60:69:d7:62:54:57:13:11:6d:10:fe:96:d8:36:bf:dd:63:
         0b:b8:2e:03:15:3d:f9:6b:af:2d:81:2f:a1:b1:4d:71:77:88:
         b8:e7:24:40:8c:77:0f:44:e9:a2:63:6d:1b:03:ba:6a:87:3b:
         e5:75:00:b6:30:cb:97:78:c2:ed:90:52:11:97:bc:0a:2b:a0:
         7d:d1:67:30:c8:ff:ec:34:e2:85:02:2d:d8:11:d4:5f:b9:3b:
         b8:ea:2b:31:1e:91:95:33:d8:03:ee:0f:f2:3a:dc:1a:9e:f9:
         50:da:52:01:a4:c3:49:b5:7f:f4:95:b1:6b:1f:25:e6:3f:43:
         7f:7b:d3:c6:d3:14:d4:e8:48:59:ce:f7:11:23:a7:bf:03:c9:
         0d:30:a1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----