Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
File:                     JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json)
Hash identifier:          EunGTDCKBjLsmPeILHhmEUR1a26F1/Au3y8aaxa4EKA=
Subject key identifier:   1F:CC:4D:14:CB:94:3D:C9:E5:AD:76:0B:10:60:93:97:E7:F3:B2:AA
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Certificate issuer:       /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial:       01962F74539228729F1273F438B2A786C9A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: 8ugHhLiToKwnzK4NKapWEcPlKh0.roa (hash: 4E0a2T2uUeIhUUG04lFzaUEsCu56I9vGRdi00E/gn7k=)
                          2: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: 9DDhCvP75YKPmYxroVV8Gd4YwpJFU9DG4/N0ILRc8Ag=)
                          3: zGlqz5otF9hY2Y3sk2pn1erhTAU.roa (hash: ofXFe05Yp+tSBC9fBzRKiln4g1Kad9/L6uAtEFx8Z54=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:53:92:28:72:9f:12:73:f4:38:b2:a7:86:c9:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=1fcc4d14cb943dc9e5ad760b10609397e7f3b2aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8b:9d:18:be:9b:8a:f5:a1:f7:c6:45:25:9a:
                    eb:bf:d8:9d:84:6f:a0:08:57:a3:08:1b:db:6b:e8:
                    df:c0:31:7d:0b:ff:b6:88:80:fd:8e:fc:d9:ac:fb:
                    e3:f2:ea:90:96:4d:09:2c:5f:2a:5a:92:f5:82:b0:
                    c3:52:5c:18:40:d4:b5:ba:d8:e8:36:a4:48:b5:37:
                    d3:49:7f:12:69:d7:ec:71:ea:17:34:93:cc:33:96:
                    d7:3f:e7:f3:07:88:48:c8:f8:f6:7a:e2:6c:b5:a3:
                    0e:73:ca:be:bd:15:09:23:f7:e5:47:be:70:51:f4:
                    d5:c5:e9:36:e5:d9:6c:22:92:01:70:35:e6:39:df:
                    2f:34:93:db:ae:88:17:66:2b:d9:90:82:dd:77:6b:
                    52:b8:08:e4:5a:e1:68:92:57:c0:3e:9d:4f:3f:8f:
                    dc:96:1a:21:03:b7:93:ad:9e:9f:5a:b1:c4:21:d5:
                    93:1f:f0:bc:14:14:5b:aa:56:bb:2d:2a:a6:1a:8c:
                    15:eb:0d:e9:17:e5:78:eb:ee:7b:db:08:06:ba:65:
                    25:59:63:64:5e:71:5d:d3:c8:a1:12:f2:10:af:c0:
                    90:be:3b:3d:50:e1:cf:09:01:f8:0d:8c:a4:f9:1c:
                    cc:ef:3a:9e:1e:0c:91:b7:e2:1b:2e:6b:25:81:27:
                    ff:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CC:4D:14:CB:94:3D:C9:E5:AD:76:0B:10:60:93:97:E7:F3:B2:AA
            X509v3 Authority Key Identifier:
                keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:82:5b:f2:1d:b4:bf:54:a4:ed:c2:a5:e6:60:f3:67:08:71:
         c2:78:9b:6a:4c:bd:98:eb:a5:cc:43:0e:c1:c6:ea:82:fd:bb:
         17:c4:b6:11:11:94:b0:31:74:3c:4d:7d:61:a3:8d:67:5f:e7:
         f8:18:2c:21:97:6b:d2:d6:ff:55:d0:90:5f:c2:78:c3:9a:00:
         1d:e7:af:cc:fd:03:41:0b:49:e8:cd:76:1f:37:42:d7:d8:cf:
         f4:d9:dc:70:0e:2f:80:ad:10:6c:f6:57:5b:44:59:15:76:5d:
         df:c3:76:22:d7:14:6d:7b:4b:b6:57:54:4a:17:eb:36:fe:76:
         bc:db:b0:a9:73:ed:12:57:05:f7:12:fd:4d:3e:63:b5:07:81:
         c1:1e:34:bd:18:90:2d:db:00:7b:72:d5:73:79:b0:15:b3:9d:
         ac:31:19:a7:d9:d7:3e:7e:e3:d0:e4:9b:b8:d1:53:d2:13:eb:
         e0:c1:ec:c6:33:fd:38:72:56:b8:9c:cf:55:08:53:cc:de:43:
         a8:0c:26:57:79:4b:f2:ba:59:fa:cc:db:e2:af:f9:9c:2d:80:
         05:ca:73:f6:8b:ed:e1:b1:ed:6c:c3:09:ba:33:d1:63:74:db:
         49:1b:40:cf:57:08:a6:6a:bf:d2:52:89:06:b5:85:ac:d6:bd:
         cf:fd:6b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----