Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
File:                     JBW_nGHIXbfJmsTN95JX55l6t3w.mft (raw, json)
Hash identifier:          n+1mF0zsrWuw9ij1EdTGWun6Ady8VgOlDh3LzfkbL80=
Subject key identifier:   8E:CE:52:AA:3A:5A:6D:96:28:67:C8:0A:55:9B:9A:40:CA:F7:17:83
Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
Certificate issuer:       /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Certificate serial:       01962E61D30EFA06F13749FEC0D530D0ECA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
Manifest number:          0251
Signing time:             Sun 13 Apr 2025 09:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:24 +0000
Files and hashes:         1: 5_wrTSOzkEFkkNCOm-aPJQ6g-ks.roa (hash: MnzABlRB9zAfXgr3KOIwgG+mPu7rINrzCKmSJs1qoHs=)
                          2: 8irZy2V_SHs0ikDlT3HoUGHPpBc.roa (hash: ktGCRrCCmdPPWWR6aei4/ftpTdWVZoIYkk/wJpTtUbs=)
                          3: JBW_nGHIXbfJmsTN95JX55l6t3w.crl (hash: wqjQ7OpcHN6SRnHGb17yAkB3liYIakmkrLG4wdJulyE=)
                          4: NOYpdId-JNJf9_sRuwA-DUzQlYs.roa (hash: eZi7sfmH9LgjRlcvnNcPttx33RWbBfBnGD1dU/ZoYek=)
                          5: _VjKlmvzYVy8ktZu-wqjmjiAJmo.roa (hash: sT06t+r7xF4EKER4Eq9ja2KenwXiwwXnRLng7zaXna4=)
                          6: oLLFimpiIjJAatRY99k9UQMOCQQ.roa (hash: wTcQB20VYZ/GbSK9GTTzmMAtJntg2q+//028FiIAhtc=)
                          7: qYcLtkX9nwxWRSvNVEAUnXk0Gh8.roa (hash: uW0LUh4aX/A4RWhfxffVlViL65qqd1EWr8OCT6eFcKA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d3:0e:fa:06:f1:37:49:fe:c0:d5:30:d0:ec:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
        Validity
            Not Before: Apr 13 09:01:24 2025 GMT
            Not After : Apr 14 09:01:24 2025 GMT
        Subject: CN=8ece52aa3a5a6d962867c80a559b9a40caf71783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:73:e4:36:85:85:d5:12:00:eb:2b:6d:58:37:
                    b5:1d:92:91:24:cd:15:e7:b1:d6:be:25:5c:a8:2f:
                    78:60:05:70:4c:0b:af:ee:bf:1f:f3:4e:ea:58:0d:
                    00:de:d7:10:24:d2:67:ff:2f:8e:25:15:fd:d4:1b:
                    61:a5:eb:33:56:65:8e:58:1e:78:5b:92:3f:09:36:
                    9d:a1:89:63:ce:40:1d:48:eb:a9:c6:ff:df:18:34:
                    93:ef:ec:ba:f0:e7:2b:f3:0b:a4:15:d4:de:fb:99:
                    b6:47:21:2f:0a:f0:d2:cb:b0:29:76:4c:78:a9:aa:
                    6e:eb:ce:d7:06:0c:48:9a:d2:54:2c:98:5c:60:f3:
                    31:c4:31:65:d4:4f:88:4d:4c:dc:89:63:ed:bf:70:
                    01:99:48:b9:73:68:bf:cd:9c:db:aa:0b:6e:21:73:
                    40:66:29:23:4d:4f:40:83:d5:3d:3e:78:db:eb:67:
                    24:b1:ce:9a:38:46:84:f7:13:19:f4:cc:46:af:36:
                    1a:cf:1a:ad:55:1a:d7:e7:b3:2f:61:05:c2:f1:9a:
                    db:68:50:bd:0d:55:5d:78:64:70:a0:2e:df:13:aa:
                    1e:59:56:54:e7:d0:54:24:d8:c6:bf:2e:f7:86:1d:
                    47:a5:c2:2c:2e:dd:78:27:b0:8f:4d:ba:00:21:72:
                    2f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CE:52:AA:3A:5A:6D:96:28:67:C8:0A:55:9B:9A:40:CA:F7:17:83
            X509v3 Authority Key Identifier:
                keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:94:a7:b3:29:94:e0:e7:1f:fd:22:c4:08:c5:62:6f:e4:23:
         7c:5e:d2:ce:6f:d4:fd:94:7d:25:b5:a4:5c:1f:48:6f:72:45:
         f9:37:8f:c9:dd:d7:d4:89:d9:3e:0a:0e:0e:c5:fc:4b:f9:fc:
         01:15:56:8f:29:1e:c8:14:b9:3c:9f:0f:34:6a:97:b8:d5:e9:
         76:39:90:69:8a:e9:b9:25:d0:83:f3:56:4e:e0:d5:b7:59:da:
         ba:9f:45:b4:e6:7e:b4:cf:cd:c9:79:be:45:d1:6e:27:9f:9d:
         af:78:52:20:ac:80:86:ea:98:de:16:8a:b5:e0:cc:84:4f:ad:
         aa:c9:0b:f5:5e:84:54:16:fc:a7:1f:b5:5e:7c:45:69:ab:71:
         91:b5:36:a5:4b:1a:ab:3b:9f:65:c7:15:4b:6d:11:0d:98:78:
         94:1d:b9:d7:0a:8f:c5:4c:c2:f2:d8:99:9d:3b:a1:69:aa:d7:
         03:83:84:1d:6a:f0:de:7c:83:71:27:fd:4a:40:fe:ce:f7:9c:
         83:d3:f7:11:ee:0e:1d:85:17:c1:1c:07:b9:59:20:1f:29:b5:
         99:d9:3d:0d:78:1a:24:8f:0e:90:1c:9c:90:6f:ed:6c:3e:9d:
         9a:ba:02:2b:d7:16:f4:e3:c8:4f:42:48:0d:55:8a:bf:f6:04:
         4a:eb:39:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----