Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft
File:                     _JRi_vSVJI_b2XNCH96-IWJc3x4.mft (raw, json)
Hash identifier:          N5Z5+qRMo5Rl92mQuwmtd/v/ZzkOjlFwtPEh58JtmTU=
Subject key identifier:   04:35:01:80:7F:83:48:99:96:24:3A:E7:3C:A7:63:FE:98:21:9B:88
Authority key identifier: FC:94:62:FE:F4:95:24:8F:DB:D9:73:42:1F:DE:BE:21:62:5C:DF:1E
Certificate issuer:       /CN=fc9462fef495248fdbd973421fdebe21625cdf1e
Certificate serial:       01962FAB2B8495D1DE0E47FF3E0F9E5E87D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft
Manifest number:          0604
Signing time:             Sun 13 Apr 2025 15:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:08 +0000
Files and hashes:         1: BDRq07Y2Ic1D-Bm-FTXEa9UI32w.roa (hash: GyOmTeK7tEqB19UhqOc1QRh1j0nV9QbQWD6z1N7zZ2I=)
                          2: _JRi_vSVJI_b2XNCH96-IWJc3x4.crl (hash: Gh0edIenmnBhSIR/TLezhyImo3+/bNnb9+YQCaky3H8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2b:84:95:d1:de:0e:47:ff:3e:0f:9e:5e:87:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9462fef495248fdbd973421fdebe21625cdf1e
        Validity
            Not Before: Apr 13 15:01:08 2025 GMT
            Not After : Apr 14 15:01:08 2025 GMT
        Subject: CN=043501807f83489996243ae73ca763fe98219b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:57:b0:ce:fa:5a:39:41:20:a7:b6:b4:f9:
                    f8:05:e7:83:80:2e:4e:51:0a:50:6f:dd:24:3f:69:
                    b9:1e:e2:3c:54:f7:5c:53:08:22:00:99:18:aa:61:
                    38:cc:dd:29:08:7b:7d:9b:c2:68:f2:cb:7c:ec:71:
                    8c:db:19:19:82:e5:fc:0f:45:eb:09:3c:74:10:36:
                    94:77:d3:cb:6b:02:e4:54:8c:7b:67:79:18:9f:cc:
                    ea:f9:19:ab:4e:0b:cd:a9:74:d2:6d:c0:cb:e9:c1:
                    89:02:2f:98:9a:06:71:6c:12:42:1a:a2:19:da:8a:
                    a8:da:ed:b9:fb:fc:1d:dc:2a:27:b2:1f:2b:78:f9:
                    e2:ec:93:d3:96:b4:e9:26:1a:44:ab:20:87:81:c0:
                    b3:28:11:1a:d4:bd:a4:7b:fd:9f:96:86:50:d5:40:
                    eb:cd:f7:01:69:0d:af:2c:5a:0f:12:60:0a:2a:67:
                    28:55:29:4c:e0:c4:b9:c3:b6:5a:1e:94:0a:91:9b:
                    18:02:9a:b4:c3:d8:d0:fb:f9:b6:5b:1d:be:74:66:
                    ac:35:bb:e2:01:58:77:9c:5c:61:45:22:d1:2e:ff:
                    6d:64:a7:52:36:5f:9b:1a:fa:63:7d:25:a1:59:6b:
                    46:aa:bd:e8:60:cd:64:a7:f5:26:36:19:78:f6:55:
                    54:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:35:01:80:7F:83:48:99:96:24:3A:E7:3C:A7:63:FE:98:21:9B:88
            X509v3 Authority Key Identifier:
                keyid:FC:94:62:FE:F4:95:24:8F:DB:D9:73:42:1F:DE:BE:21:62:5C:DF:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:50:7c:be:52:ef:7a:df:a8:31:16:10:e3:28:ac:fb:4f:b4:
         59:b4:0a:21:77:4e:05:64:30:d3:d9:2d:87:c5:bb:ad:e1:9d:
         a3:ae:48:2a:84:72:dc:f1:0e:6e:b5:2a:1f:fa:af:61:53:5a:
         d7:93:2b:1b:6b:32:ee:90:94:5c:d5:3d:f0:57:82:30:58:68:
         fa:09:56:1a:fa:09:a3:53:94:5b:e5:ff:2e:9a:2a:fe:7c:c9:
         6f:33:81:6f:c0:5a:b6:2a:80:07:99:af:50:b0:95:ef:e1:3d:
         4c:b2:7a:f6:03:d8:d1:5f:00:8d:00:79:40:db:23:98:cb:58:
         78:fa:bc:ed:8b:b3:4e:81:d1:c4:23:24:c1:7d:f2:b9:13:cc:
         09:fe:42:38:49:56:ed:e5:55:27:9d:2a:ae:94:95:f2:3c:8d:
         26:5e:db:0b:ce:7f:bd:71:86:a9:17:fd:2d:a0:ea:2d:e4:69:
         cf:f8:74:aa:f1:5f:a4:83:38:96:67:8a:4f:52:ce:10:69:66:
         a9:db:1c:78:0d:70:bf:78:4e:93:9f:53:ac:2c:f8:9b:82:d0:
         e9:cc:88:c8:43:e7:99:37:62:a1:5c:13:d1:b3:b1:fe:ea:89:
         c0:01:7a:d7:28:5f:e4:2a:80:cb:14:a9:9c:fc:5d:41:f8:a9:
         93:a7:59:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----