Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
File:                     JHvwudcpiha5hv1pVPCkRfLiEDw.mft (raw, json)
Hash identifier:          M+pki3TYL6W5qlSq1dY8IcqQSI9CDWJHmZqUlZ6eesg=
Subject key identifier:   03:B8:02:73:5B:E8:1E:6F:7F:D8:12:D9:A6:E9:F8:B0:7E:19:B7:52
Authority key identifier: 24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
Certificate issuer:       /CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Certificate serial:       01962DF3ACBCA17FEE9EFB822FD5D1CBB351
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:06 +0000
Files and hashes:         1: JHvwudcpiha5hv1pVPCkRfLiEDw.crl (hash: sctLahKuJ2O/D8hwYf5EX63RcA2dx/6kdWVTbJEhnQ8=)
                          2: M1rH5imTv_z7sg0DBQQ2ZUDiOdE.roa (hash: Di3stSxtNFdk8NJg2rUPI7WyOatBqa+pZ2chuvZrKec=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ac:bc:a1:7f:ee:9e:fb:82:2f:d5:d1:cb:b3:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
        Validity
            Not Before: Apr 13 07:01:06 2025 GMT
            Not After : Apr 14 07:01:06 2025 GMT
        Subject: CN=03b802735be81e6f7fd812d9a6e9f8b07e19b752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:23:b9:b6:b7:f2:a6:a4:08:2a:8e:9b:71:e2:
                    e1:4a:91:0f:9c:b5:08:7e:02:63:79:65:d9:44:2e:
                    32:4a:3a:c5:18:00:de:a9:38:ad:f6:19:65:75:29:
                    ab:34:11:3e:f0:9b:10:15:b5:53:bc:3a:aa:6f:8e:
                    b2:8b:93:f6:c8:1b:93:ca:e1:7e:7e:e3:05:ee:ce:
                    14:18:2d:a7:f8:8a:41:e4:4f:3f:07:27:c3:85:ad:
                    e1:50:b5:9e:25:68:9c:d8:cb:60:7a:ce:41:ea:fd:
                    20:70:98:da:8f:a6:0e:68:b0:33:21:51:01:e4:c6:
                    43:42:4f:2e:e5:f3:3e:d2:fd:c7:84:cb:05:d4:64:
                    1f:7e:40:31:ba:76:08:9b:be:7b:4b:a0:fa:ef:c4:
                    ee:e0:de:3b:5a:40:e4:fe:37:9f:56:d9:7a:43:da:
                    2b:c4:c3:e0:42:66:8d:8d:24:1f:fc:c5:98:bc:7a:
                    3b:e3:a0:83:28:ab:9a:34:01:1c:8e:6c:8e:fe:d5:
                    83:c2:c0:56:11:c3:9b:ef:d3:ae:14:ff:59:93:27:
                    58:99:19:44:46:f1:85:28:61:3c:3d:f8:55:1e:5a:
                    59:9d:16:e8:34:a2:04:5d:cc:fe:2b:8b:7d:d0:b9:
                    d2:81:6f:dd:cc:0e:c2:0e:40:47:c5:6c:c6:c8:a8:
                    67:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B8:02:73:5B:E8:1E:6F:7F:D8:12:D9:A6:E9:F8:B0:7E:19:B7:52
            X509v3 Authority Key Identifier:
                keyid:24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:13:ff:25:98:d3:df:27:bd:7d:bb:f5:a9:5d:09:50:57:4e:
         09:75:27:c5:92:c8:3c:25:c6:8c:44:66:e6:03:ac:32:38:81:
         42:b7:d4:73:03:e2:e6:57:e6:68:44:28:70:c2:3a:03:11:0d:
         32:4a:02:86:02:9d:db:18:49:7b:0f:3b:be:e6:c9:ce:9d:ee:
         e0:db:a5:f1:71:27:64:f2:42:09:de:92:ad:f8:44:95:9d:0c:
         b3:9c:9b:aa:33:31:11:d2:77:a1:0c:17:59:a9:84:01:f4:52:
         e9:3a:69:02:08:38:8a:1a:ed:c3:e2:b5:40:3f:7a:39:4a:52:
         7e:e7:df:cb:14:21:0b:2c:8d:e8:99:b8:bf:47:dc:84:02:bf:
         05:52:28:8d:96:a7:c0:8a:44:0c:f1:f0:4e:9d:c2:b2:92:87:
         db:26:9a:53:44:4a:06:be:db:28:9f:b3:dc:dc:51:b9:f8:44:
         ce:6c:75:0b:5c:0d:01:c2:f3:ad:2b:39:9f:53:67:99:be:de:
         07:c1:3f:63:cb:0b:84:24:58:9f:3f:ce:11:e6:da:f5:db:9f:
         3f:c2:b7:65:3d:28:bd:39:df:0b:7c:1b:56:43:6e:6c:4f:63:
         17:31:77:0d:0e:c1:f4:cb:3e:2c:93:56:ac:87:1c:aa:aa:54:
         74:fb:64:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----