Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
File:                     JEXvDPLil0idGXNw-IXVn4npWqs.mft (raw, json)
Hash identifier:          W9U/Rw65GUmxS/ZJPWZ+R7EFBCAXoAoL/Iz/VA06mdM=
Subject key identifier:   16:A3:15:04:20:A9:3E:56:B2:CE:2E:BC:EE:F3:F1:F7:12:58:69:E5
Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
Certificate issuer:       /CN=2445ef0cf2e297489d197370f885d59f89e95aab
Certificate serial:       01962FAB454BC3DC39200D3484C7FD96C5D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
Manifest number:          11C1
Signing time:             Sun 13 Apr 2025 15:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:15 +0000
Files and hashes:         1: 7BGirnEkwzmDaMHYb7_OyeObZ-o.roa (hash: Mqe4eHaFftNeUPq4ztkhypVdBvRsFekv3LwUY3g3YP4=)
                          2: JEXvDPLil0idGXNw-IXVn4npWqs.crl (hash: YQTc5nE+KEbz0+xFpTutEDHouvA/Fyj87KTF70fNT6Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:45:4b:c3:dc:39:20:0d:34:84:c7:fd:96:c5:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab
        Validity
            Not Before: Apr 13 15:01:15 2025 GMT
            Not After : Apr 14 15:01:15 2025 GMT
        Subject: CN=16a3150420a93e56b2ce2ebceef3f1f7125869e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f0:1d:f6:92:2f:a7:35:83:0c:16:1b:92:e4:
                    dc:68:3f:17:d5:d4:be:dc:f9:bd:c0:5b:8e:bf:d7:
                    cc:c7:fd:23:06:df:a8:57:2d:b6:ab:63:e7:67:22:
                    11:55:80:21:1f:38:a5:e4:4c:a2:2e:f8:13:34:0c:
                    3b:72:b6:a8:29:fa:36:b8:ab:0d:09:f0:80:90:b5:
                    9f:20:c1:39:5a:a5:13:3f:25:0f:03:8c:8f:15:cf:
                    cd:6b:4d:6c:db:b3:bb:0e:30:3e:3d:de:cd:f5:33:
                    ed:7e:45:2c:d4:3a:18:8b:18:e6:d0:f4:42:6f:e9:
                    44:af:e4:af:61:31:a4:33:97:03:64:e1:5a:1f:e8:
                    e5:f2:b6:ab:39:81:27:ab:44:ba:f0:88:c3:55:69:
                    00:cf:bc:85:b1:63:98:4f:3d:57:af:66:c6:0d:49:
                    b4:85:84:ed:94:b9:5b:a4:55:df:40:a3:3b:8c:1c:
                    4c:b4:39:50:d0:a3:25:75:59:e4:2a:74:79:2d:6e:
                    b2:3d:7c:32:85:c4:67:ac:6e:33:22:63:4e:b1:e6:
                    0e:ae:5e:94:7f:1e:06:93:f4:e3:be:7c:c4:f6:2d:
                    f9:cf:e6:37:ee:5e:4b:50:fb:a5:d6:b4:dc:46:9f:
                    81:20:1b:20:bf:96:17:4e:2e:d0:a8:81:e3:1e:4d:
                    b5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A3:15:04:20:A9:3E:56:B2:CE:2E:BC:EE:F3:F1:F7:12:58:69:E5
            X509v3 Authority Key Identifier:
                keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ad:c6:48:d9:99:79:ee:c2:e1:55:e4:97:5a:e3:fb:f4:41:
         b0:89:54:b4:ce:6b:6d:72:c7:30:ea:07:ee:ab:56:24:2e:6f:
         44:54:bf:07:e2:13:f6:05:78:61:08:a1:e6:22:eb:de:1b:4b:
         00:ef:29:3e:8a:87:e3:6a:72:87:53:cb:b1:a5:98:3d:2f:74:
         a1:1c:25:12:20:aa:4b:8b:0f:ec:48:5b:d0:e1:66:43:04:6e:
         8e:81:d2:e3:79:b9:f0:25:e7:a3:90:5e:12:69:29:a5:98:4f:
         06:a1:5b:59:40:5f:7d:fe:59:e6:12:b7:3b:7e:c2:1b:91:21:
         37:1e:5b:70:7a:13:41:df:3e:cd:e1:90:67:a5:a1:ef:d4:9f:
         4e:9e:59:4d:72:17:e2:c0:11:cc:60:ac:c7:fe:d9:5c:d2:66:
         c1:96:67:f2:2c:60:42:49:92:da:d8:49:f7:47:a3:0d:02:36:
         6a:3c:62:2c:e7:c3:a1:ee:94:fc:75:bd:c5:4d:cb:8e:7a:26:
         dd:82:02:72:7b:32:ef:34:60:0e:2d:63:60:aa:b5:24:80:e2:
         b1:6e:35:a6:1d:73:53:30:46:45:4a:69:5f:70:62:5b:b5:7e:
         66:c6:c2:2a:47:9c:2c:26:c0:d2:0e:e8:98:1c:9f:b5:98:40:
         62:ea:e7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----