Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
File:                     JZYIYbefTqtQdAg3i6kIfMHkTic.mft (raw, json)
Hash identifier:          4ObQqtyznzoFNvXk3AruclYTboIMbnTdLGHOjunHuto=
Subject key identifier:   96:0B:2B:8E:00:52:47:FB:4E:29:D9:AD:13:2A:0F:19:15:F3:23:F8
Authority key identifier: 25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27
Certificate issuer:       /CN=25960861b79f4eab507408378ba9087cc1e44e27
Certificate serial:       01962F071FE010BEE8C015AD074871958B68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 12:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:58 +0000
Files and hashes:         1: JZYIYbefTqtQdAg3i6kIfMHkTic.crl (hash: 3I9mBbCWUre0ipZXcpVSJuAeUopKnVr7eneg6n1kd/4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1f:e0:10:be:e8:c0:15:ad:07:48:71:95:8b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25960861b79f4eab507408378ba9087cc1e44e27
        Validity
            Not Before: Apr 13 12:01:58 2025 GMT
            Not After : Apr 14 12:01:58 2025 GMT
        Subject: CN=960b2b8e005247fb4e29d9ad132a0f1915f323f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:79:25:9d:79:9f:53:8e:5b:c6:78:30:c5:53:
                    03:ba:c6:d1:d8:27:ac:e5:b6:f2:d0:ac:32:a3:df:
                    e0:46:92:2c:8b:f0:db:6c:15:4a:95:d9:6b:50:e5:
                    af:71:4b:07:31:29:83:50:fc:4b:ea:6c:78:e5:6d:
                    e2:7a:0b:6b:33:13:39:d4:17:d6:ed:c9:b5:cb:e7:
                    21:da:0f:0f:8c:a1:9c:82:b2:3a:11:b8:f7:b4:97:
                    25:aa:d9:cf:75:e7:57:fa:be:e9:e2:79:84:70:0e:
                    be:96:50:f3:9d:4c:2d:fa:d3:23:74:d5:b3:04:10:
                    b0:60:06:66:98:96:bc:a4:fd:1d:9f:fe:7f:74:b2:
                    0c:dd:a0:aa:73:62:9e:77:1b:16:bc:70:7b:28:18:
                    8e:e3:84:34:7d:25:5c:e8:45:4c:46:e2:70:40:e1:
                    a3:b2:5c:92:d0:e6:e6:56:1d:d7:a6:69:63:fa:f2:
                    f7:16:e1:45:99:7f:4b:a2:5c:42:b7:95:a2:53:f7:
                    ce:90:58:90:23:18:a8:f5:9f:8b:19:62:67:d5:af:
                    f2:cc:76:89:73:ce:3e:2d:60:10:71:3b:40:b5:5b:
                    eb:2b:5f:0c:55:2f:36:bd:11:4e:1d:9a:68:b4:db:
                    d6:54:26:c9:99:60:03:0e:3c:11:b3:56:dc:11:6b:
                    9e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0B:2B:8E:00:52:47:FB:4E:29:D9:AD:13:2A:0F:19:15:F3:23:F8
            X509v3 Authority Key Identifier:
                keyid:25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:cf:6a:eb:87:64:25:67:2a:7b:c3:64:90:45:8c:20:2f:12:
         19:9d:ff:f8:b8:20:3b:7f:66:b5:da:a0:af:95:c4:73:3d:b6:
         a0:1d:52:f7:56:05:b2:62:04:50:86:73:28:49:94:ec:5a:a5:
         a0:2e:74:60:4b:1b:e7:ea:9d:cc:84:e8:a2:dd:15:11:31:dc:
         a4:bb:03:b1:5d:d2:35:db:98:f1:6d:2f:91:d1:23:c4:71:ff:
         c8:66:da:b9:b7:9a:ee:9d:1d:ca:36:30:94:2e:ae:10:3a:5c:
         c8:1d:57:8f:70:89:61:e7:3d:17:92:aa:67:88:ae:63:17:04:
         8d:ad:74:eb:52:6e:23:4d:66:3e:07:e8:ce:c1:61:1e:63:74:
         5f:6d:04:e7:70:cb:76:10:01:35:43:e4:9e:1b:23:93:6a:8c:
         ce:a8:5a:78:45:c8:97:45:3c:01:fe:f0:5a:0a:e2:8f:1d:98:
         93:6a:7c:ff:7b:44:64:fe:ff:5c:a5:c1:0b:4d:2f:04:90:db:
         d2:00:dc:b5:74:24:7e:65:d5:4a:b6:2c:e3:5a:8a:ba:2e:ba:
         e3:47:0d:f9:d5:04:8f:25:5c:b3:1e:cd:97:b9:7c:7e:93:1d:
         7a:29:d5:b9:7a:32:c8:82:6a:84:72:38:29:c9:35:9d:8b:39:
         ad:4d:62:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----