Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
File:                     _jQJESdDd6icofnBXxgNqYbXRLc.mft (raw, json)
Hash identifier:          FJzGn0w+fPSJvknG6HSoN/KK9yu3fLsINdiafQxM5T4=
Subject key identifier:   3A:65:F8:45:A7:55:00:AC:E5:D0:E3:F9:8E:3A:CF:9A:E0:59:8F:39
Authority key identifier: FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
Certificate issuer:       /CN=fe340911274377a89ca1f9c15f180da986d744b7
Certificate serial:       01962F74526F742125571D97EC72BF4076DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
Manifest number:          017D
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: 7qFS32WykIo9De6woWK_a4zI6AE.roa (hash: 2dnjawr1HUy6D3OjqGMisdNqLiSRoZxYXLiFU07VYtM=)
                          2: _jQJESdDd6icofnBXxgNqYbXRLc.crl (hash: pMmoML8wT2wW+MO63x5+elEVJphis99EsBlZ64QUsq8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:52:6f:74:21:25:57:1d:97:ec:72:bf:40:76:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe340911274377a89ca1f9c15f180da986d744b7
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=3a65f845a75500ace5d0e3f98e3acf9ae0598f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:08:b7:67:09:d6:4d:fc:d2:b1:be:4d:29:b9:
                    8a:13:d2:b0:a0:05:ce:e5:b2:00:c7:7c:f0:27:f5:
                    fe:25:ac:0d:33:e3:34:8a:cc:71:40:42:97:7d:a8:
                    9a:2f:f2:d3:ee:28:b2:d6:9d:7d:65:2e:95:00:01:
                    fc:1d:d1:a1:69:e4:81:8e:f2:34:19:01:d3:f5:71:
                    ca:1b:ae:55:c7:40:fc:9a:5e:72:28:d5:89:0d:bb:
                    ed:19:62:26:9e:5d:48:64:75:85:01:59:e8:1b:de:
                    87:94:55:fb:4f:45:8e:51:c5:d6:48:fa:da:a2:c3:
                    4b:dd:ba:36:dd:65:d2:28:e0:8d:55:37:92:85:2e:
                    39:15:08:2b:74:b3:0b:85:65:a7:dc:bb:34:d1:ce:
                    13:fc:93:25:89:3d:f0:ea:c4:8f:d5:8a:13:8c:ff:
                    73:a9:e4:36:8d:1d:7e:ba:43:e2:c4:f5:eb:66:34:
                    8e:47:43:0d:be:5e:cb:39:cb:85:fa:a3:21:a7:f8:
                    cc:4f:3b:7a:db:02:0d:e9:6b:ca:f6:f8:3e:16:d2:
                    f7:a3:e6:86:ee:ad:93:a4:74:04:49:f2:7f:19:89:
                    8a:7d:c9:1f:e3:a3:16:25:0d:9a:24:7e:c5:58:2b:
                    7b:e7:f5:ee:92:3d:8f:cc:a2:bd:19:39:03:0b:b6:
                    b5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:65:F8:45:A7:55:00:AC:E5:D0:E3:F9:8E:3A:CF:9A:E0:59:8F:39
            X509v3 Authority Key Identifier:
                keyid:FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e2:8a:b3:04:22:a1:bd:25:61:91:99:d4:26:ff:bb:08:71:
         18:04:b2:a6:10:a5:ee:85:65:43:e5:a0:26:c9:af:b1:46:ae:
         30:76:52:19:e7:c0:7e:bf:bc:df:66:86:07:92:b1:90:cf:25:
         40:07:b4:eb:93:22:8a:42:84:78:4b:33:04:c5:2e:f9:ef:68:
         ac:3f:c1:07:66:ce:d5:2f:d8:3d:9c:eb:36:af:36:bc:d9:7d:
         ef:58:12:6d:b4:8a:9f:a7:a4:6a:c9:29:99:56:42:0e:d8:d9:
         29:be:aa:8e:b3:dc:64:6e:a0:e4:53:9c:3e:7a:90:10:7a:7f:
         ad:de:94:2a:0e:ab:26:28:b3:d9:68:a6:6d:e1:60:75:70:34:
         62:89:02:72:f5:9b:ba:d7:98:51:e4:c3:00:e2:22:d3:e1:ff:
         47:42:4b:e5:24:06:99:4b:01:04:c9:da:17:47:01:16:ad:9c:
         fe:d5:13:ac:e6:08:37:63:c0:28:fd:50:db:4f:92:01:69:40:
         9e:c6:ad:c6:2d:e7:1c:de:e3:77:3e:66:2a:63:58:64:93:f9:
         49:67:38:bf:50:77:36:2e:54:15:26:50:8e:09:16:3a:09:ab:
         1c:d9:bf:1f:d0:cb:b7:bb:da:61:bd:6a:4a:7a:0a:af:35:17:
         18:3c:0f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----