Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
File:                     JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft (raw, json)
Hash identifier:          xDqo8+mb5lnWJ6o0+fF62QErUv7uEni1M0OQbhGAvYk=
Subject key identifier:   F4:D8:01:29:83:91:4C:5F:AA:BB:3F:00:D0:46:9B:A2:AF:81:82:CC
Authority key identifier: 24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
Certificate issuer:       /CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Certificate serial:       01962ECFAEFB7DA354C9DF42BB3CB0C988FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
Manifest number:          01C8
Signing time:             Sun 13 Apr 2025 11:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:24 +0000
Files and hashes:         1: JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl (hash: u8GK0rJF5ipUKvlGVfGSdKl2n5qMskbP5szwyxW+OLw=)
                          2: Np4SGefOBCZiVQwVOhlw43OZIsc.roa (hash: 4LHgzyDtN1tlOUmbwRr7JMfVVPaWldi7uvsqlFbuzcs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ae:fb:7d:a3:54:c9:df:42:bb:3c:b0:c9:88:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
        Validity
            Not Before: Apr 13 11:01:24 2025 GMT
            Not After : Apr 14 11:01:24 2025 GMT
        Subject: CN=f4d8012983914c5faabb3f00d0469ba2af8182cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fc:f3:cf:e6:b5:b9:34:c3:75:4c:22:a0:a2:
                    2e:cf:a1:9e:db:1f:67:9e:9f:bf:0b:d7:c9:ea:19:
                    a7:03:b0:b0:cf:d9:11:ca:24:9b:3c:c7:16:74:a8:
                    56:7e:4a:13:20:a9:e6:53:f8:e9:65:33:b5:bf:02:
                    e5:3f:21:a2:7a:37:32:09:2d:24:c1:ab:92:d7:5d:
                    fb:5a:39:7d:a8:cb:c1:59:fe:ab:06:84:8a:d3:da:
                    1e:db:e2:5f:8d:ec:e9:9d:45:14:1e:5e:5e:6f:64:
                    8a:97:57:b0:b0:28:ea:b4:d9:53:0e:35:66:da:e4:
                    dd:98:d7:94:05:55:d0:fe:23:c9:d4:83:59:ce:57:
                    d7:c1:0d:8a:b2:5f:9c:4f:3a:2f:52:be:6d:e2:7a:
                    9d:c5:7f:dd:85:37:7c:1d:b6:c5:26:a2:c4:a1:a5:
                    90:df:41:e1:d9:83:70:f5:d0:47:19:81:86:71:01:
                    34:e2:ac:5a:7e:12:5d:9e:5a:8d:e7:4c:6e:a8:66:
                    2a:be:7e:a2:ae:77:41:e9:fc:e5:0b:bd:f8:a2:c5:
                    ef:6d:c4:79:e2:10:e3:93:73:5c:06:db:9e:4b:82:
                    5d:f0:00:03:be:dc:b6:6c:26:49:c9:08:9a:00:d3:
                    21:04:20:00:37:3d:35:06:5d:24:b1:7a:a5:f8:72:
                    d7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D8:01:29:83:91:4C:5F:AA:BB:3F:00:D0:46:9B:A2:AF:81:82:CC
            X509v3 Authority Key Identifier:
                keyid:24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:25:8f:c3:d7:e5:52:e8:96:9b:82:68:54:0f:f7:b7:36:c6:
         5a:f7:08:b4:62:79:f6:88:9c:91:68:9f:10:cc:95:b3:07:da:
         0c:6d:5d:08:d7:4c:74:21:cb:42:b2:70:d5:3a:7d:16:f5:c7:
         c3:46:4a:95:59:15:99:7c:6f:4e:d6:d9:83:a1:ee:8b:36:f0:
         f1:fe:eb:22:36:78:ab:75:8b:5f:22:1b:35:b7:9e:0a:66:bb:
         01:14:90:18:70:80:d5:04:bd:d5:37:c5:17:99:1b:2c:54:2a:
         14:52:a7:a5:bd:e2:2b:17:81:a4:cb:ae:ae:59:13:eb:37:b6:
         d2:b3:7b:35:a6:16:2b:f9:2d:ec:0e:3c:b2:7f:4c:f7:a0:13:
         17:e0:38:40:ff:06:d6:c1:20:2f:bf:59:2f:cf:8e:b1:61:c7:
         62:69:dd:1c:82:bf:45:ec:a2:5d:48:36:8b:9b:cf:04:a1:c9:
         68:e7:54:e5:d5:ac:e9:2d:70:37:b3:76:d5:4b:13:64:12:84:
         ca:11:3c:09:0a:37:65:9c:8f:09:1f:9a:05:e9:43:ff:1e:0a:
         50:ad:f5:de:da:ec:d2:6f:5b:ef:1a:6d:e6:29:6a:f6:4a:d9:
         f3:b2:1d:2c:f2:3f:5a:ed:4c:fa:84:cb:af:a7:85:c2:aa:4a:
         a2:4b:da:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----