Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
File:                     j20qybaMMnEffof95SNFhPW89PI.mft (raw, json)
Hash identifier:          rS4ZU5kVRs+HYRp6quByF5VFizsaScnFbBmcx6RR33A=
Subject key identifier:   1A:AC:BB:3C:50:92:17:DA:65:D3:F0:07:09:F6:9F:95:1C:52:BD:02
Authority key identifier: 8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
Certificate issuer:       /CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Certificate serial:       01962E61CE72D61A1C54237B21BA744173F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: dTkxMcCeXxHSlbzmXrq1h_yjEwQ.roa (hash: 6lLAKycVqxafwfSe9RpEl78tE7gClRO25WKnwVEGabY=)
                          2: j20qybaMMnEffof95SNFhPW89PI.crl (hash: 6kirNITYTJl09nttNgTh/d7hZ5oBpNp0dJWIQDggFAc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ce:72:d6:1a:1c:54:23:7b:21:ba:74:41:73:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=1aacbb3c509217da65d3f00709f69f951c52bd02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a9:12:12:8f:b6:8e:0f:6b:df:24:8e:e2:f0:
                    4e:6b:26:09:0e:1a:19:6a:e2:3d:51:c6:bf:33:be:
                    c1:c8:89:7a:7c:b0:55:c8:92:8f:fc:c0:0c:c4:e1:
                    2b:84:4b:f8:2a:03:37:94:bd:ef:82:d5:5e:f2:a4:
                    67:b8:72:79:2c:d8:6e:bf:a6:ff:49:67:42:df:51:
                    88:88:b8:01:2c:7c:f0:fc:f6:96:b9:11:a3:b7:9f:
                    fd:75:5a:94:20:70:54:4c:32:44:60:b8:72:fc:1a:
                    8e:60:87:8e:10:53:3d:cb:7e:5d:0e:96:ba:92:c4:
                    44:de:ba:c7:50:3e:0d:33:65:7e:6f:d0:df:cc:e0:
                    23:b1:98:39:a4:80:71:89:5b:02:d4:be:5d:48:b3:
                    4c:03:b4:3f:08:92:76:bb:11:e1:e5:f8:cb:d7:8f:
                    fb:1a:8a:d0:8e:ff:87:50:2d:da:bc:40:68:05:c3:
                    f8:df:67:31:b0:47:35:ae:03:1c:87:31:cf:3d:36:
                    de:f0:97:7b:a1:22:1c:9c:98:83:0b:73:eb:41:ae:
                    9b:1a:99:49:ae:61:9d:18:d1:fb:b9:30:44:90:ff:
                    21:6b:32:02:55:12:14:71:04:85:e7:56:bf:db:33:
                    a0:d1:db:56:58:da:88:fd:52:07:8e:df:be:4f:c1:
                    c8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AC:BB:3C:50:92:17:DA:65:D3:F0:07:09:F6:9F:95:1C:52:BD:02
            X509v3 Authority Key Identifier:
                keyid:8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:3e:28:84:43:d8:eb:96:82:7d:20:4e:b3:85:96:7a:9f:01:
         d4:f3:c8:96:5c:4f:9d:eb:52:3b:2b:2d:9a:0e:82:1b:09:4b:
         c1:eb:2d:87:e6:e9:9c:c2:aa:27:29:59:63:36:6a:a0:ed:63:
         d6:e8:bb:6e:e1:2c:43:30:76:bf:4a:11:49:29:3d:e6:47:b8:
         c8:6a:62:20:03:e7:7d:26:74:29:92:87:8a:83:a2:f9:4c:eb:
         65:31:db:59:d0:25:ab:3a:d2:7d:76:5b:fb:79:97:b7:5e:3b:
         c4:a0:80:63:b6:d2:a2:29:a5:c1:d5:9c:8d:a4:6a:06:e7:80:
         2a:fe:ce:06:a0:0f:7d:cb:5c:e6:79:1d:65:46:c2:f0:f2:9d:
         2c:85:a2:c5:23:4d:1e:6f:5b:63:15:22:89:c8:fc:f1:07:28:
         05:84:12:3d:72:ae:f4:db:30:84:e7:89:03:81:99:a8:62:04:
         31:94:a8:de:55:69:07:86:b8:bf:57:0e:fd:9e:00:e2:06:bf:
         7e:08:30:0a:85:38:cd:97:5d:c0:84:b8:cf:aa:df:9d:dd:28:
         ae:79:e5:54:2b:98:54:25:0c:d0:53:10:e7:32:7f:4b:2a:e9:
         80:7f:47:9e:d4:62:a8:61:93:e5:95:40:bc:f8:b0:15:ce:4c:
         c5:9e:73:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----