Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft
File:                     JK_wO1q_sXhyXKbpD149mMumjr8.mft (raw, json)
Hash identifier:          4HD6KjpK20f5WLcK66mezgfYU3lPSa+TdjfjxJCp8VA=
Subject key identifier:   03:AA:67:C4:9D:5F:C8:08:96:50:08:4D:3D:53:AC:A0:3F:22:BA:FB
Authority key identifier: 24:AF:F0:3B:5A:BF:B1:78:72:5C:A6:E9:0F:5E:3D:98:CB:A6:8E:BF
Certificate issuer:       /CN=24aff03b5abfb178725ca6e90f5e3d98cba68ebf
Certificate serial:       01962FAB979DAA6DFAEBE8DBE5C8B8322CE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JK_wO1q_sXhyXKbpD149mMumjr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft
Manifest number:          05ED
Signing time:             Sun 13 Apr 2025 15:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:36 +0000
Files and hashes:         1: JK_wO1q_sXhyXKbpD149mMumjr8.crl (hash: ha/7j0Ueo8Szc7TEYkxFsPu2lRRTB24eCZg8TU4Cg2U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:97:9d:aa:6d:fa:eb:e8:db:e5:c8:b8:32:2c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24aff03b5abfb178725ca6e90f5e3d98cba68ebf
        Validity
            Not Before: Apr 13 15:01:36 2025 GMT
            Not After : Apr 14 15:01:36 2025 GMT
        Subject: CN=03aa67c49d5fc8089650084d3d53aca03f22bafb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:af:81:70:2a:0f:c0:6b:de:1e:6e:15:25:db:
                    ed:5b:6a:70:f1:44:21:76:cc:7f:10:70:69:7a:3a:
                    d7:d6:d9:d7:f5:ee:b5:bb:d1:17:8f:37:fa:91:bd:
                    77:6a:2c:72:c3:a2:26:26:83:11:7e:b5:88:b6:e8:
                    92:a7:45:f8:55:8f:0e:0b:61:8e:ad:fb:ac:eb:86:
                    77:a9:7a:20:3a:54:f9:d5:7c:d5:39:ab:37:54:2e:
                    3d:45:66:1d:8e:61:88:2f:45:05:5b:36:a8:86:04:
                    ce:e0:90:e3:b4:a8:59:4d:9b:cd:80:91:82:a6:42:
                    96:1a:39:ac:d5:7d:11:84:46:a2:0e:89:82:c3:3c:
                    07:73:4a:95:dc:b8:6d:41:8f:1c:a4:eb:8f:ea:c4:
                    01:76:db:bc:14:5b:e9:f1:4b:7d:12:c6:64:f7:84:
                    ce:03:11:95:6f:4b:08:60:53:62:9e:38:61:5d:9b:
                    c0:61:01:8b:a2:52:2f:fa:60:4a:5c:f0:d9:96:d6:
                    66:06:08:84:ea:d2:f0:f3:8f:b5:fb:c6:d3:5c:97:
                    41:84:67:bf:3e:48:81:eb:be:05:78:75:c0:1a:ab:
                    88:65:f3:16:d4:85:f1:d2:b1:76:14:1a:21:39:50:
                    27:4a:dd:c8:36:33:5c:42:45:69:8a:ff:06:d4:c3:
                    d9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AA:67:C4:9D:5F:C8:08:96:50:08:4D:3D:53:AC:A0:3F:22:BA:FB
            X509v3 Authority Key Identifier:
                keyid:24:AF:F0:3B:5A:BF:B1:78:72:5C:A6:E9:0F:5E:3D:98:CB:A6:8E:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_wO1q_sXhyXKbpD149mMumjr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ca:79:85:7b:93:f6:ec:a3:02:9a:17:a4:45:ee:15:d2:f9:
         9d:cd:45:04:ab:15:69:08:3b:62:f4:c2:fb:76:d0:32:6b:3d:
         20:a6:51:87:e4:62:bc:69:98:6a:f5:5a:a4:13:e1:5c:99:e8:
         cc:0c:a3:63:6e:e2:2e:12:ff:99:e0:b1:c7:6f:14:4d:e5:5c:
         44:5d:3a:f7:4a:0c:f0:3d:ed:63:17:52:cb:3a:5a:42:cf:2c:
         13:95:cb:a6:b9:31:69:18:54:93:82:ef:0b:f0:6e:f3:6c:c3:
         cd:63:95:7e:5f:26:a9:c5:d9:63:a4:0d:f4:7e:f9:32:35:c1:
         e3:cc:9c:cb:ca:04:f0:92:ac:96:16:20:1c:1d:13:50:a9:1b:
         cf:fb:04:35:10:d6:58:00:80:2f:40:da:59:1c:00:c6:fa:52:
         a8:4e:0c:78:e0:af:53:e1:9d:f8:b5:d9:25:4c:a1:84:d7:aa:
         12:1c:5e:57:5b:bc:8e:d2:2b:c0:8f:a9:1e:7d:f2:d3:5c:a8:
         82:9f:47:76:3c:96:7b:d3:de:98:b0:48:6d:f4:6c:ef:01:a6:
         93:ec:29:be:b0:63:83:d6:b1:e1:b3:ee:7a:8e:49:e3:b0:5b:
         a0:8d:46:17:ea:be:b9:53:41:a2:b6:c2:f5:b1:20:b0:aa:09:
         76:de:0b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----