Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
File:                     JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft (raw, json)
Hash identifier:          ZaCxv/HAaTWubyIdwNob4npBXWMP1zjWNC/ILZ7ukZM=
Subject key identifier:   CA:B1:0D:7F:B3:FF:2F:55:1E:19:9A:78:01:EB:2B:09:84:4B:CD:A9
Authority key identifier: 25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
Certificate issuer:       /CN=252a182d91f456d850210dbf72da7e475fbf3c08
Certificate serial:       01962E2B21158C71C258E6566FDF25355A47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:40 +0000
Files and hashes:         1: AuVvPbpIxYfbjHQfau6WKQEGa-g.roa (hash: U6m8+4Sl84CkDxQZPw+ZQm1IJSjlEAy/sYjRvvU6Ths=)
                          2: JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl (hash: 39/9J8E0+sKnvyakIo1aK0Q0M/ASOrzTD8XEmPx1OSc=)
                          3: dtGqDCamv_hVVWZjpqsIRYZCyw8.roa (hash: eV1f95aHCVJX6WIYYc+AMUUHYQd1RjaDWI8sAgDgSqE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:21:15:8c:71:c2:58:e6:56:6f:df:25:35:5a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252a182d91f456d850210dbf72da7e475fbf3c08
        Validity
            Not Before: Apr 13 08:01:40 2025 GMT
            Not After : Apr 14 08:01:40 2025 GMT
        Subject: CN=cab10d7fb3ff2f551e199a7801eb2b09844bcda9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:be:f2:7d:ed:73:6c:88:eb:48:0b:f9:97:2b:
                    91:85:f6:2a:af:a3:13:d3:e3:72:cc:f5:29:cf:2e:
                    91:d3:4b:87:d2:c6:17:a2:26:44:65:c9:5f:73:f8:
                    3f:a9:97:39:be:e0:9a:9d:40:2b:b7:d3:68:a2:0d:
                    8f:b5:aa:36:ac:1a:93:ae:f2:00:3a:26:5b:a7:6d:
                    fa:32:64:fd:e5:12:4f:cf:6a:96:16:c2:30:20:64:
                    af:f2:3b:b5:2e:45:ec:c9:48:fc:dd:fd:22:d9:37:
                    38:f2:20:26:e2:a6:69:57:82:9b:fa:cc:6a:88:c4:
                    32:7c:b3:be:45:0d:ca:5b:8e:96:48:fe:d2:16:a0:
                    75:56:99:45:93:44:22:59:dd:c1:87:72:d7:5f:3a:
                    a0:f6:ec:8c:d6:d3:6c:a2:86:fc:82:a1:21:48:7a:
                    54:98:d7:1a:46:ab:57:29:74:48:b9:e8:e4:68:5b:
                    a6:02:d7:e8:0e:e8:21:7d:6f:ce:ca:20:05:71:bd:
                    4f:3d:22:c0:ad:39:4e:13:7a:d4:d6:13:3b:c0:42:
                    c1:34:d5:d6:ee:2e:1c:3f:83:6e:2b:f2:84:67:a0:
                    49:fd:2f:70:f1:db:d4:cb:4e:67:7f:e1:b7:9e:88:
                    a9:43:5e:68:d0:28:fa:15:4f:2c:7d:36:c5:d2:aa:
                    9c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B1:0D:7F:B3:FF:2F:55:1E:19:9A:78:01:EB:2B:09:84:4B:CD:A9
            X509v3 Authority Key Identifier:
                keyid:25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e6:12:5c:6f:3f:66:c2:65:09:f7:34:b0:f1:c3:ce:67:a6:
         c7:64:79:d6:ba:4a:3e:aa:05:89:90:0b:13:30:7a:e3:31:ae:
         30:4f:e9:f2:d1:41:9a:92:33:b4:3c:b0:ad:73:81:6c:f8:c4:
         3d:ba:cb:28:1f:c1:88:e5:d3:bb:94:de:37:51:e6:4c:af:a3:
         be:f4:44:2f:88:7a:d6:26:48:4c:8e:5d:39:97:14:88:b2:51:
         88:e9:ce:37:3c:2c:4c:9f:02:15:22:da:88:b3:8d:0e:b5:5c:
         28:24:b6:86:06:00:8b:70:69:b0:34:b4:2e:b2:cb:f0:85:48:
         e3:90:21:ae:3a:f3:f0:8f:1a:af:5b:e7:c0:a6:11:9c:61:55:
         f9:ac:71:28:5a:f9:93:10:25:eb:0a:b2:33:4b:18:d9:64:f8:
         f1:7f:a0:29:df:00:08:c4:53:53:f7:c1:dc:28:51:14:ca:58:
         63:4a:79:3b:7a:44:ba:45:d5:9b:07:0d:70:19:80:39:de:d0:
         1d:2d:61:8d:f0:c5:52:e7:c2:69:61:fe:c4:d7:4f:21:6c:fa:
         95:64:69:54:48:b7:23:80:f8:c3:24:70:86:49:f0:04:de:89:
         42:88:62:fd:17:26:0e:98:37:db:c3:fa:a4:12:4e:5a:09:9f:
         bc:2d:6f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----