Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
File:                     JxnUEBB2de7YtizK1DUzb4GeCm0.mft (raw, json)
Hash identifier:          E/Z0wcGuLflFdHRikEFSvEmr9oQrXvye+BHdPwExw+s=
Subject key identifier:   35:E5:45:E2:6E:51:56:B4:AB:BD:50:B9:CB:5E:C0:72:37:26:4D:08
Authority key identifier: 27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D
Certificate issuer:       /CN=2719d410107675eed8b62ccad435336f819e0a6d
Certificate serial:       01962F0738B2AE599FC55839EEC78DBA0A7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
Manifest number:          072A
Signing time:             Sun 13 Apr 2025 12:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:04 +0000
Files and hashes:         1: JxnUEBB2de7YtizK1DUzb4GeCm0.crl (hash: YxNkIW9vMddK8kBmrzemDeNWuxMqBwSYtavMyEoSh8U=)
                          2: ZFYqKvxguHm4smQvy9awnquW2qU.roa (hash: 8vWdx+ga/HPoDaDg67DCWpBBfssC0K3uCo1oOh4juXg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:38:b2:ae:59:9f:c5:58:39:ee:c7:8d:ba:0a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2719d410107675eed8b62ccad435336f819e0a6d
        Validity
            Not Before: Apr 13 12:02:04 2025 GMT
            Not After : Apr 14 12:02:04 2025 GMT
        Subject: CN=35e545e26e5156b4abbd50b9cb5ec07237264d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1b:c7:58:d4:fe:00:e9:fe:1a:18:fc:8a:9c:
                    7d:14:a1:74:2b:11:cd:cd:b0:45:03:98:68:fe:c9:
                    a7:e3:73:28:df:95:a4:fc:0d:18:64:6b:71:73:ca:
                    27:6e:ff:ae:a0:02:a5:e2:1d:96:f5:31:3b:24:e2:
                    b7:27:4f:08:e1:84:ec:b0:af:32:d6:b3:de:ce:03:
                    50:52:7c:65:11:65:0d:a5:13:23:45:35:13:d7:d9:
                    bf:a0:cd:ff:f9:01:c8:bd:53:5f:b6:7c:6b:91:87:
                    79:53:39:d9:d5:75:ca:0f:3f:ba:95:fc:d5:c3:ce:
                    ed:39:c0:b6:96:b3:02:95:57:df:8c:b2:c6:ed:3a:
                    67:aa:4d:e3:7a:6f:86:87:fa:28:b1:90:f8:8d:89:
                    58:d6:50:b3:9d:88:ea:e1:67:ef:b5:1c:14:fc:9c:
                    b1:e0:c5:e8:db:b7:63:00:9b:5e:74:35:54:2a:d4:
                    85:5d:c7:dc:38:73:4f:8a:91:04:4e:87:0c:d5:ed:
                    a4:2a:fa:fe:68:6c:b7:3e:03:25:78:47:b7:00:b2:
                    2b:7d:ac:5c:ab:f5:2d:6d:88:ae:f8:da:93:58:d8:
                    99:52:2b:e6:83:40:4a:24:f4:c4:38:eb:2e:aa:1d:
                    99:cd:22:56:2d:4b:51:42:b4:54:be:fc:03:00:fd:
                    b4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E5:45:E2:6E:51:56:B4:AB:BD:50:B9:CB:5E:C0:72:37:26:4D:08
            X509v3 Authority Key Identifier:
                keyid:27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:3d:01:fe:42:da:ed:19:80:45:b4:47:4b:b1:9f:4d:fb:96:
         e2:05:b9:c0:99:b3:39:3c:b0:59:13:e7:1f:4f:d9:e7:9f:0e:
         ee:c3:da:5f:18:90:1a:d9:11:91:fa:1b:24:b1:a0:66:27:54:
         a4:a1:ba:ca:2e:b1:c5:98:0e:02:61:f2:f1:47:2d:a3:77:36:
         13:f0:06:6d:be:36:8f:2f:3f:6a:a6:60:97:7d:ae:9b:6f:48:
         2c:19:aa:9a:ed:11:d3:fe:07:b5:16:ca:39:46:c1:bd:7c:8b:
         64:08:54:f4:d1:ea:54:ac:51:c6:77:48:70:dc:5d:7a:b1:c0:
         be:5d:81:23:90:05:b5:f3:5b:d5:8e:13:42:a5:56:91:77:a4:
         c3:c6:65:23:89:ba:4d:4b:fa:8b:f5:a1:01:3d:b5:66:fb:13:
         1d:03:02:82:b9:09:f7:2f:50:90:f2:fc:2b:35:95:d5:28:ed:
         71:e2:90:42:54:c8:3b:a4:2f:9b:99:98:7f:18:c9:a6:af:fb:
         d7:3a:da:c3:ac:39:8f:01:7f:f2:bb:6c:3d:48:4a:c1:9b:0e:
         14:e2:ab:f0:89:ef:d3:7d:96:a3:cf:1a:f9:28:23:19:c7:fe:
         29:62:d9:b1:6b:d2:1b:e1:2f:d2:ee:ad:ae:e8:91:0c:5c:1a:
         dd:39:27:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----