Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft
File:                     JmOMLLe4YM02lnnE0F1Q9wXgRik.mft (raw, json)
Hash identifier:          OA4FOxIS03wHmUSINewA1vu36m8+XnFKzu3CcQm6kHw=
Subject key identifier:   97:8B:CB:EB:5B:C5:27:97:59:D7:05:86:DE:28:BC:F7:75:58:37:AA
Authority key identifier: 26:63:8C:2C:B7:B8:60:CD:36:96:79:C4:D0:5D:50:F7:05:E0:46:29
Certificate issuer:       /CN=26638c2cb7b860cd369679c4d05d50f705e04629
Certificate serial:       01962F06ADDD2C910AC48299B7389B986D15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft
Manifest number:          0D59
Signing time:             Sun 13 Apr 2025 12:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:28 +0000
Files and hashes:         1: HRbR_khGq9xBOHLyUMt_H0_ZMOg.roa (hash: sAAGeZp9KGc0mAVbloa7q59m7jUPjTaroGNIZ50YXxw=)
                          2: JmOMLLe4YM02lnnE0F1Q9wXgRik.crl (hash: hWax4Lq6KWKzFOBJBvvnJHdQFfPj9jVI0tSaoki30gM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ad:dd:2c:91:0a:c4:82:99:b7:38:9b:98:6d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26638c2cb7b860cd369679c4d05d50f705e04629
        Validity
            Not Before: Apr 13 12:01:28 2025 GMT
            Not After : Apr 14 12:01:28 2025 GMT
        Subject: CN=978bcbeb5bc5279759d70586de28bcf7755837aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d9:34:2a:70:1f:36:1c:00:7f:e9:fc:7e:48:
                    39:25:74:55:5f:a3:8c:f0:9c:be:56:a8:9d:14:37:
                    6c:a6:29:08:e6:2c:7b:86:73:0a:7e:d2:e2:76:d8:
                    bc:91:e7:70:a8:c3:c4:75:62:2f:88:6c:3b:16:d6:
                    f9:51:69:5a:5c:1d:f2:ca:03:6f:ae:4e:81:2e:87:
                    fa:b2:7c:c7:3f:4a:7c:73:f8:0c:28:6b:08:78:aa:
                    e7:9e:35:46:c1:ca:db:7d:82:d2:44:ec:92:44:43:
                    07:cc:d3:b1:17:3b:5f:88:95:cd:2c:15:23:b8:90:
                    92:7c:15:d3:95:a5:72:f7:bd:d7:03:36:8a:be:a4:
                    cd:97:6f:04:e9:30:c3:46:0e:24:9b:d6:ae:5b:22:
                    a8:3a:f3:ae:3f:ee:a4:df:6c:5b:ad:8e:03:02:df:
                    d9:39:59:11:20:9d:1f:d1:e0:72:06:9e:7e:88:dc:
                    5b:2d:fd:12:cd:29:bc:56:00:7b:da:d0:e0:6b:c0:
                    a4:80:74:d5:7a:58:c4:55:10:b5:57:34:6f:19:0a:
                    a6:69:87:4a:11:76:b8:e5:39:44:92:38:ce:2d:74:
                    75:73:3c:ec:9e:39:96:62:5f:f7:83:79:f6:e1:80:
                    39:0b:f7:9e:21:2f:94:4e:8c:e8:15:5c:23:85:0c:
                    b2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8B:CB:EB:5B:C5:27:97:59:D7:05:86:DE:28:BC:F7:75:58:37:AA
            X509v3 Authority Key Identifier:
                keyid:26:63:8C:2C:B7:B8:60:CD:36:96:79:C4:D0:5D:50:F7:05:E0:46:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:da:e2:25:6d:66:ba:30:5c:d5:ed:bd:81:55:d7:85:91:f5:
         0b:08:15:e5:c1:c5:e5:1f:fd:b6:c0:ec:6b:f3:01:68:6a:ad:
         1d:ad:03:fc:c9:8d:98:97:65:9a:85:7c:31:3a:1c:5a:16:4f:
         e6:30:a4:fa:39:a9:c8:76:ab:3a:04:02:26:54:0f:0a:68:59:
         6e:23:d8:5a:38:7e:bb:a0:51:64:89:c9:ab:12:0a:75:f0:6c:
         c7:0a:73:ec:1d:43:80:91:ba:a8:e3:6a:84:7c:52:8e:45:54:
         6f:87:0f:cd:31:2f:29:5a:98:68:08:04:3c:df:36:9b:e8:ce:
         ce:da:89:5e:d5:60:8b:e0:16:57:70:74:d0:4f:38:9c:fc:ba:
         8e:12:58:26:2c:ef:ff:24:0e:2b:42:d0:67:c1:ef:50:f2:dd:
         dd:0e:b1:37:ff:1a:50:34:0b:56:7b:dd:d8:2c:79:50:73:fd:
         53:8e:a4:bc:8b:e6:54:a4:3f:21:42:e9:bd:f1:2b:d9:d9:fa:
         c6:5a:7a:49:e5:37:c6:47:14:ca:e4:c1:93:84:8c:8b:43:ff:
         13:f0:d6:a2:4d:fb:39:5c:f6:d6:e5:f4:6b:38:70:6b:d0:4c:
         33:87:9d:53:1c:90:42:fb:be:63:4b:8c:36:a4:fa:e3:81:49:
         e4:1f:cb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----