Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
File:                     JR54cf048t-RgkLdocb8NWiEI8o.mft (raw, json)
Hash identifier:          FDZadI0jcWmWczv4+2AflZzi79l05asaVe1Ow1p9mBs=
Subject key identifier:   94:38:18:39:8A:3D:98:9F:D9:49:9E:A6:DD:64:7E:0B:9C:2A:FC:0C
Authority key identifier: 25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
Certificate issuer:       /CN=251e7871fd38f2df918242dda1c6fc35688423ca
Certificate serial:       01962F07029E0C6F1ADAF36170C862218A1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
Manifest number:          05C3
Signing time:             Sun 13 Apr 2025 12:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:50 +0000
Files and hashes:         1: JR54cf048t-RgkLdocb8NWiEI8o.crl (hash: pOAqGneTiMwo4stKvmX1Hq3PorTL3IpXx/ZXf/6oVUY=)
                          2: P05t3kiYPDkZIteTxzHkdWLEeeU.roa (hash: BIrJT8z8EjrhQoOfb8QVBhdG6eDY7ydaRNIxS8nhYAU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:02:9e:0c:6f:1a:da:f3:61:70:c8:62:21:8a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=251e7871fd38f2df918242dda1c6fc35688423ca
        Validity
            Not Before: Apr 13 12:01:50 2025 GMT
            Not After : Apr 14 12:01:50 2025 GMT
        Subject: CN=943818398a3d989fd9499ea6dd647e0b9c2afc0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f5:98:86:90:9e:10:a7:a0:37:47:b8:5c:65:
                    9c:68:84:de:a3:25:64:10:8c:2c:73:8f:fb:48:a9:
                    28:99:d1:b5:82:03:68:7a:ea:9b:f0:97:9d:4a:4b:
                    e1:db:b3:49:cf:56:9c:e5:7e:d7:81:5b:dd:3e:e4:
                    01:58:12:91:02:42:8d:2f:a4:ec:14:84:47:77:2f:
                    83:b5:0e:f1:b6:d2:82:ea:79:3e:fe:dc:5c:d3:c6:
                    18:95:02:c3:be:3d:a9:55:d1:82:6e:95:fa:e7:ca:
                    ad:6f:58:ea:fd:6a:2c:7e:26:88:8a:55:79:38:79:
                    53:13:c0:3c:f2:e9:c3:04:88:53:a8:0f:d6:d2:33:
                    ce:f4:02:d9:f2:78:0b:97:d1:1d:13:d7:8a:f8:a8:
                    e6:4c:f9:62:75:3b:40:5c:a5:91:97:14:df:bf:4f:
                    c6:f4:c7:26:32:11:4c:2c:05:6f:89:61:37:33:e1:
                    59:a8:53:0a:a7:15:1e:d1:07:f7:b2:a2:8e:77:ed:
                    c2:d2:b9:02:d7:4c:11:ba:db:12:68:8b:b2:c6:5b:
                    f9:72:5d:c4:2b:93:69:d1:b1:98:c5:37:06:65:3e:
                    ad:16:5c:ed:ba:23:dc:82:64:fe:1d:00:57:f1:d0:
                    b7:c7:61:7a:ae:f4:1c:76:4c:85:67:e9:11:93:f6:
                    4c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:38:18:39:8A:3D:98:9F:D9:49:9E:A6:DD:64:7E:0B:9C:2A:FC:0C
            X509v3 Authority Key Identifier:
                keyid:25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:e2:dc:00:18:53:56:cc:bc:4e:21:a6:84:02:70:29:af:59:
         ed:04:e0:43:00:45:5b:d4:13:f1:a2:cb:f6:71:80:55:8e:0c:
         df:8c:5b:56:3e:5d:31:e7:a1:3f:9f:b7:f9:f6:cc:68:04:2a:
         ba:48:55:ce:11:2f:c3:44:58:7b:53:9f:b3:9f:d5:50:66:b8:
         1d:f1:c1:46:81:cf:28:f8:9b:05:b0:f0:a1:e4:15:57:6b:3a:
         c0:ca:d2:80:2c:f2:51:7d:c9:76:54:1e:40:df:96:21:06:e5:
         83:dc:84:9b:0b:62:4d:ac:bb:d1:82:af:b1:97:42:a4:9a:6f:
         95:a1:74:f4:fc:24:cc:d7:38:08:94:c4:34:ad:6c:f1:2c:62:
         7d:18:00:a7:66:92:cd:54:c8:7d:16:57:6a:06:b9:0f:d1:8e:
         22:37:26:db:34:e0:91:12:b5:66:74:86:36:56:31:5b:dd:a0:
         d8:a0:d8:c3:bc:01:17:96:a7:b7:72:f7:b3:d1:9b:88:9b:e6:
         0a:18:62:62:63:b9:4d:30:45:5b:93:df:df:38:46:18:50:96:
         9a:8a:c3:50:6c:fb:c0:d1:c3:54:0f:f3:2f:c8:6e:73:b5:35:
         f9:a9:af:c2:e2:77:3b:8a:af:6a:ef:21:3e:bf:5d:8e:3a:29:
         76:80:48:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----