Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
File:                     JbvtC_9__qtn8wK0EaAHAYVKbDA.mft (raw, json)
Hash identifier:          djpULxq0VuiVFa3ZNJP0MajHtBD1dc1Sy6ws7DzYwNY=
Subject key identifier:   D6:7F:8A:A1:72:AD:D6:4E:E9:16:23:50:45:DA:5E:83:92:B6:12:BA
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Certificate issuer:       /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial:       01962F747F3D15A556DDE30BEE8BA5F3C6AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
Manifest number:          0B3C
Signing time:             Sun 13 Apr 2025 14:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:26 +0000
Files and hashes:         1: JbvtC_9__qtn8wK0EaAHAYVKbDA.crl (hash: lWHNiKsvGE1t3S6Gp6F4xUKGfthVrvq9N3D1qmufR2M=)
                          2: biUWqJNkwCLwTQCIKmoRRrKwBdQ.roa (hash: GnO+QVei8Vle4+1N/MUYYQK1LOgHwUlkdAPzcdRPuE4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7f:3d:15:a5:56:dd:e3:0b:ee:8b:a5:f3:c6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
        Validity
            Not Before: Apr 13 14:01:26 2025 GMT
            Not After : Apr 14 14:01:26 2025 GMT
        Subject: CN=d67f8aa172add64ee916235045da5e8392b612ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6b:c9:68:3e:7f:dc:26:7d:8a:54:75:4a:2f:
                    8b:c5:92:23:30:53:32:89:4b:2f:7f:d7:ad:f2:1d:
                    4e:9c:06:05:f9:fe:da:78:02:e9:89:54:f0:ba:8f:
                    a7:f9:12:dd:b6:cd:47:fb:28:1a:86:39:fa:52:eb:
                    58:a6:ec:4d:97:28:f9:53:82:0d:b9:68:48:a5:9c:
                    4f:78:55:35:6e:24:cf:81:82:ea:e6:2c:9a:05:65:
                    0b:2d:e3:4e:4b:85:d2:f8:82:1e:22:f5:19:b3:97:
                    80:cf:8f:d0:4a:22:a2:30:02:1e:eb:10:f0:10:65:
                    95:18:a0:6b:37:5b:ee:fb:88:3e:70:f3:ce:be:5e:
                    6e:f6:42:dc:5a:15:58:ad:76:70:8e:75:e6:bf:7c:
                    3d:3f:36:f8:53:91:5b:10:b6:7e:7d:dc:9d:fd:7a:
                    27:bf:a4:ee:6d:5a:6e:b3:67:39:33:8e:d9:11:29:
                    19:3c:37:ad:85:6e:b3:1d:b6:af:04:06:05:7c:76:
                    43:ab:4a:97:21:a4:8f:ba:25:8e:51:6b:b5:df:db:
                    d0:2e:32:90:55:85:db:b4:d9:e0:e7:72:a8:79:df:
                    f9:68:bb:80:0b:88:ed:36:7c:bc:03:74:ca:bf:ce:
                    2f:35:f4:3a:4f:f7:b9:55:4d:74:d6:c9:7a:40:86:
                    2c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7F:8A:A1:72:AD:D6:4E:E9:16:23:50:45:DA:5E:83:92:B6:12:BA
            X509v3 Authority Key Identifier:
                keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:2d:9a:b0:d7:bd:03:89:04:e8:46:bc:27:79:75:e8:61:5e:
         47:f5:ef:83:e0:99:73:b5:40:5e:77:20:f1:47:c0:7d:e7:3b:
         9c:d8:3d:1f:21:3d:c4:dd:34:8d:9a:08:d3:3a:09:76:6b:45:
         16:a2:f0:2d:a7:cf:a0:8b:89:1c:eb:44:35:be:48:7e:b8:2a:
         78:f0:8c:62:95:9c:46:d2:f4:ad:b6:30:dc:57:33:c4:9f:c4:
         47:6d:14:64:ca:49:87:bc:54:5d:9e:93:13:d9:a6:46:47:11:
         c1:84:2a:57:50:93:59:25:29:93:95:83:3c:c9:36:80:f9:4d:
         7e:84:a5:37:ce:03:21:26:0d:01:ab:02:3a:24:0b:51:34:fc:
         0f:3f:ec:ac:18:be:ab:6b:f9:87:2d:58:29:fd:02:6d:93:ad:
         aa:7d:30:a7:52:95:88:66:a6:3d:cc:84:31:b6:28:95:5f:13:
         c7:2d:f7:7a:90:d0:43:3c:da:56:9e:06:67:01:e3:6a:d4:ba:
         e0:50:7e:70:a7:6e:95:c1:10:e9:5e:54:55:98:a1:05:ae:c1:
         29:58:17:d1:48:e0:5f:f7:88:71:43:6d:cf:4a:d9:60:6d:ed:
         3e:24:2b:21:87:02:e9:fb:8a:7a:e6:e5:20:17:9a:a9:22:47:
         48:94:4b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----