Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
File:                     JYYj7MjcuRPRAiipRgqG5mDLj7I.mft (raw, json)
Hash identifier:          5AkewCPqzPvQOLjWHBuOzFQLXZzc1jU5yKidfpYV3Q8=
Subject key identifier:   4E:33:06:F7:1C:F0:27:D3:8A:49:A0:19:74:41:05:5F:E9:CF:98:7F
Authority key identifier: 25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2
Certificate issuer:       /CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
Certificate serial:       01962FAB43B29A3B798B189694282FDA0F8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 15:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:15 +0000
Files and hashes:         1: 4jOyDkN0sYgHQOu4H2i3BPnuwuc.roa (hash: pBs68ICaSbGSqyGLZ9bB1efuQfGC5WelauRjyqdWgTI=)
                          2: JYYj7MjcuRPRAiipRgqG5mDLj7I.crl (hash: drqyPowqefzlHPWARpcC4i9kJXThrD63fcBm5hHz7gw=)
                          3: WS5dJtxLFKB6EZr0k7FG-L1WfpI.roa (hash: EcGFRU20uqBbFC1foj+y9OBYi5L7+bc1+NFOuFXpPjg=)
                          4: k_-rD0qGkNwGwcLu6HW3p8mmNtU.roa (hash: 2oKRAJvxuw9ZlCxWfoLf08ddChOQxfTyMJhpORXiSP8=)
                          5: p_Vil1ZOh0DBWp7CeNdLsp-x-qg.roa (hash: JOx6Yj0rD4+YKhnvf7l3pAqkkOGJYpZq2R4MdJmD8hQ=)
                          6: px36HXCD5Tde7rc7667drQlCUgM.roa (hash: DdLtjUoBr2/szAIeZWx5x3x5Gnlyu/gE0I7UYrAM/6I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:43:b2:9a:3b:79:8b:18:96:94:28:2f:da:0f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
        Validity
            Not Before: Apr 13 15:01:15 2025 GMT
            Not After : Apr 14 15:01:15 2025 GMT
        Subject: CN=4e3306f71cf027d38a49a0197441055fe9cf987f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a0:0e:b7:4a:b9:4c:dd:91:d0:50:2f:0b:46:
                    34:03:8f:fb:9a:99:05:fe:d2:53:82:ef:ce:ea:24:
                    0a:9b:58:57:3f:7d:6d:63:e5:ac:70:77:ad:37:86:
                    be:08:0f:89:8f:41:e9:18:2b:be:36:e1:01:f2:20:
                    7f:b2:00:08:32:1b:b8:1e:e3:1b:78:4a:e7:d4:0a:
                    e1:84:f2:4b:84:2b:d0:95:e6:03:76:86:ab:97:1f:
                    52:7a:bb:d6:14:1c:7c:c4:56:21:09:57:49:b0:cc:
                    0f:9f:f5:4b:ea:1e:6c:fc:99:8d:d5:5f:85:94:4e:
                    3b:6e:3c:4a:1a:66:14:74:f4:1d:94:21:75:91:d2:
                    0b:d5:1c:43:94:ea:63:0e:2f:87:6f:28:f9:7e:6e:
                    79:c0:89:57:49:b3:01:0f:20:77:66:e0:29:40:9a:
                    20:52:8d:5b:6b:5c:03:3e:5d:47:cc:e4:2d:97:e3:
                    b8:ca:af:e5:f7:34:f5:27:50:4c:bf:92:fe:d1:36:
                    a1:a8:d4:55:67:b4:e1:01:92:ef:2f:ca:4c:6c:67:
                    be:30:f6:67:c1:78:70:cc:bc:80:9b:22:3a:69:0a:
                    48:4c:e1:e2:d6:35:98:36:53:5b:c7:17:5b:5b:b8:
                    50:59:c7:14:71:e6:89:cf:b9:2b:00:3e:37:b5:8e:
                    d3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:33:06:F7:1C:F0:27:D3:8A:49:A0:19:74:41:05:5F:E9:CF:98:7F
            X509v3 Authority Key Identifier:
                keyid:25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:cf:f9:dd:ec:df:fd:02:e6:e9:18:03:1b:8d:5f:12:fb:da:
         9b:ec:0e:0e:c6:48:44:cd:b3:c4:64:27:eb:bd:cb:be:df:82:
         ba:9e:7b:4c:97:89:04:53:8a:e4:d5:19:20:72:36:e7:26:af:
         07:c5:95:99:b1:37:58:87:62:f1:92:43:4f:4b:8e:42:3a:90:
         47:d5:aa:24:a6:da:07:b0:26:1d:c7:c6:b2:5c:80:ee:2f:6c:
         47:32:09:49:69:05:eb:b4:79:2c:34:7c:ea:e2:80:24:c9:47:
         85:2d:6a:4f:f3:2b:e2:da:63:f0:38:c4:88:37:2a:8e:f1:0a:
         bf:7d:27:85:42:b0:03:ae:0f:79:6c:50:08:7b:92:f9:17:6d:
         64:c0:2a:dc:98:e8:e8:79:db:1a:c4:b9:4b:f3:5d:5a:3a:20:
         84:c5:4c:4c:5d:4d:e9:10:c1:6f:07:68:51:d4:4e:88:05:9a:
         59:15:d5:bb:c8:4a:d1:30:6d:e2:83:ff:59:59:27:56:f1:8b:
         0c:53:a0:63:37:2e:af:b9:0d:af:f1:b5:4f:9a:e2:f7:1e:98:
         b3:b8:53:c5:6b:88:b1:28:cf:a6:14:5c:99:a7:8e:c2:16:5d:
         af:99:c4:72:98:35:2e:3e:cc:73:68:29:49:6b:47:3d:5f:4b:
         08:b2:de:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----