Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
File:                     JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json)
Hash identifier:          poO0Sd0ZSWwRuWwopfWfI0FYi4nEi4GlV7uLYACK38I=
Subject key identifier:   7C:F0:7B:19:CD:79:F0:64:72:FE:B1:20:5A:92:99:40:4A:A0:2C:9C
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Certificate issuer:       /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial:       01962DF4118E06FAFA206F4A25BD4119FA3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
Manifest number:          06A4
Signing time:             Sun 13 Apr 2025 07:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:32 +0000
Files and hashes:         1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: Jcvktf5ydKhAvmVj2CVo1ecHU80Kx7kPrGWw7c2YwqI=)
                          2: tH5X1sIrBGaWrxtJcDhQJ2X9uHg.roa (hash: DV2Ywdf2IF4IJkXNNJ6gs2p5s2GMK9q52zFH8lpr0iI=)
                          3: wpydopt6VUah6RQMZrzjsU6WoPc.roa (hash: cp20Yibn6t1V4VomO6+maPrzeM92DrtR/BD0ISnTpAw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:11:8e:06:fa:fa:20:6f:4a:25:bd:41:19:fa:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
        Validity
            Not Before: Apr 13 07:01:32 2025 GMT
            Not After : Apr 14 07:01:32 2025 GMT
        Subject: CN=7cf07b19cd79f06472feb1205a9299404aa02c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e4:fb:21:e3:0a:84:90:ea:ae:d4:df:91:2c:
                    53:01:6a:34:41:b9:86:d1:9b:1b:d6:d1:7e:6b:80:
                    33:05:a5:95:81:18:d5:be:eb:a2:1d:3f:8d:a0:bc:
                    52:15:71:06:55:9f:2b:70:03:3e:20:dc:f7:23:f2:
                    24:79:16:af:8a:a8:74:4d:a3:fd:c4:86:3c:f8:32:
                    96:a4:c3:b4:b9:ba:d9:0b:2e:22:b5:b0:74:b3:0a:
                    bb:63:0c:d2:cd:13:b1:cb:8f:81:fc:03:ef:57:9d:
                    20:b3:d7:2e:e4:94:33:0c:17:83:cf:36:3d:d4:ad:
                    f6:d8:9f:96:d3:6d:ea:1d:2f:2f:73:3b:c0:c9:ea:
                    28:06:c6:d5:65:91:39:03:63:2e:34:67:db:44:0c:
                    39:46:2d:8b:ab:80:c8:28:a0:4d:7b:3b:c5:5d:41:
                    a4:91:7a:47:20:9b:af:89:80:05:b5:24:59:ac:e1:
                    b0:c6:8e:e6:b2:64:5b:17:52:ee:68:cf:27:19:56:
                    f4:7f:e3:ee:78:36:d8:84:f2:40:05:20:9d:9d:7a:
                    b8:bc:a2:e0:44:18:5a:46:a3:bf:29:ee:78:7f:26:
                    65:82:04:8d:ca:74:ce:3b:19:73:d8:92:94:90:12:
                    2e:a5:f8:80:d1:35:97:48:00:14:06:81:6a:30:45:
                    80:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F0:7B:19:CD:79:F0:64:72:FE:B1:20:5A:92:99:40:4A:A0:2C:9C
            X509v3 Authority Key Identifier:
                keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:b7:7b:cd:38:7e:4e:0f:dc:e9:b3:d4:a1:3f:02:35:80:6e:
         c4:2a:20:3d:48:75:da:90:e3:57:2c:8f:2b:55:db:e9:08:59:
         b4:53:fa:1a:88:cf:06:d9:e4:93:96:ef:0e:af:ed:3b:57:92:
         79:df:08:b6:a2:8d:43:9d:67:21:03:1d:61:7f:a4:9a:44:0a:
         5a:fd:0d:14:24:f4:d0:b1:aa:0a:b5:d4:c5:38:91:4b:6e:8d:
         88:31:1b:a8:a7:de:38:91:73:f1:ca:f5:ca:bc:08:6d:43:81:
         35:71:85:3c:5c:88:a6:4c:89:4a:94:58:4e:a3:c3:67:82:6d:
         62:4c:e8:28:47:7e:27:e8:9e:01:64:36:35:83:61:ea:27:54:
         a5:3d:fc:dc:51:d7:35:3f:9d:ec:8f:50:f6:49:e0:b8:88:ad:
         1e:9e:22:03:bb:d2:a5:13:98:90:fc:c0:ab:4c:6e:58:d9:de:
         4f:e7:76:90:29:46:0b:d6:91:3a:35:b4:1f:80:ba:d6:f8:52:
         f9:1d:66:cc:04:56:9b:0c:de:da:12:c2:5e:b6:7d:e3:e4:cc:
         fa:a5:09:49:19:b8:44:ef:50:b0:cb:d5:59:4d:06:db:37:08:
         f6:48:04:92:58:b8:53:53:54:f3:34:c6:f5:0d:98:a7:53:7d:
         fb:91:1f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----