Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft
File:                     JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft (raw, json)
Hash identifier:          Ea8kqEx13AvptUb+E1WOzpog4v8itVYlxNiFdw5Uq2s=
Subject key identifier:   24:00:E3:DB:4F:CF:84:27:CD:A8:F7:79:2E:DE:57:5F:E9:7E:14:0A
Authority key identifier: 25:F3:FB:2B:1C:B5:0A:3F:CC:64:26:08:63:3F:51:23:75:22:6D:1F
Certificate issuer:       /CN=25f3fb2b1cb50a3fcc642608633f512375226d1f
Certificate serial:       01962FAB1223D222F14877287627D4D236EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft
Manifest number:          04FB
Signing time:             Sun 13 Apr 2025 15:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:02 +0000
Files and hashes:         1: JfP7Kxy1Cj_MZCYIYz9RI3UibR8.crl (hash: x42xCS9mCWi1ahDX8BLrGxjWUca4KFc/meyhpWIEcuA=)
                          2: sP-bFJ2GmNkHBQJTvI6gfR-P34M.roa (hash: YAE1riF3M5+gJzUwR1Sf1tDjF0W3/xjSiT+4/+dNn0s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:12:23:d2:22:f1:48:77:28:76:27:d4:d2:36:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25f3fb2b1cb50a3fcc642608633f512375226d1f
        Validity
            Not Before: Apr 13 15:01:02 2025 GMT
            Not After : Apr 14 15:01:02 2025 GMT
        Subject: CN=2400e3db4fcf8427cda8f7792ede575fe97e140a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:7d:4a:73:18:3b:68:17:aa:a2:18:b0:e2:
                    32:05:4c:89:63:bb:46:9c:20:25:51:66:f7:de:07:
                    56:d6:ee:93:96:25:00:84:45:ae:c8:e8:be:4f:9f:
                    60:44:27:4e:f7:61:b8:17:1f:06:c9:53:f4:54:f1:
                    60:22:d5:f3:de:5f:12:de:fa:f9:ef:1d:69:33:fa:
                    b8:3a:1a:69:f4:86:67:19:6c:5e:d0:6b:c9:da:46:
                    98:2b:0c:21:06:9e:00:fe:7c:02:1e:d6:43:61:c6:
                    50:ee:9e:35:4f:01:f9:9c:11:fa:e0:94:79:2a:c7:
                    2e:3c:62:9e:08:f9:bf:4a:ad:3a:26:1a:6a:d1:dc:
                    0d:ac:6f:34:b3:ad:4b:61:c7:08:7d:08:20:32:91:
                    66:2e:61:19:75:2e:c5:85:e1:f9:fe:7c:23:cc:20:
                    ab:e5:57:9f:7e:90:e3:95:46:32:56:ce:80:23:b5:
                    78:74:8c:ca:6a:b2:d2:58:86:37:2d:42:87:64:2b:
                    c9:ea:d7:42:67:3c:96:43:dc:68:b7:d8:6c:d1:ad:
                    bd:bb:96:56:6e:2f:f6:6f:e8:c2:7b:92:dd:97:91:
                    30:23:b0:cf:2e:75:ee:f9:89:4c:6e:40:75:c2:23:
                    1e:33:52:e5:bb:72:58:28:32:61:d5:52:f1:b9:e7:
                    c6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:00:E3:DB:4F:CF:84:27:CD:A8:F7:79:2E:DE:57:5F:E9:7E:14:0A
            X509v3 Authority Key Identifier:
                keyid:25:F3:FB:2B:1C:B5:0A:3F:CC:64:26:08:63:3F:51:23:75:22:6D:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:78:67:f6:1b:77:62:42:47:cc:43:29:57:44:38:be:f2:d2:
         af:57:12:3a:1c:4d:50:39:d8:b3:c0:23:64:1d:f8:c1:aa:0b:
         47:cf:14:dc:7d:23:51:ac:c8:9e:af:f3:65:28:6b:eb:aa:74:
         d2:6c:56:4c:2a:31:c0:99:fb:49:19:ce:69:99:77:61:67:41:
         1a:31:0e:b2:72:e3:70:49:d4:23:22:a4:d3:58:63:fa:d3:32:
         5d:f7:f3:9d:fb:cc:c0:08:b6:47:df:3b:d3:24:32:80:81:ba:
         d9:e4:42:89:77:55:03:f6:11:ac:c1:3e:17:49:7e:ea:cb:8f:
         87:2b:22:d3:d8:5d:cf:58:12:81:df:15:1f:9d:7c:93:4c:a9:
         6e:a9:e2:4f:ef:51:b0:23:dc:07:d1:63:ea:60:b3:dc:e0:41:
         07:9d:00:99:69:07:f7:71:90:36:b3:cf:b7:b9:8d:c8:57:cb:
         73:ca:fb:88:ee:1b:38:af:29:28:a2:f2:e2:11:00:3d:68:e7:
         81:e5:c4:0a:72:88:b1:47:63:41:97:f4:d5:f6:b2:6a:1b:11:
         3b:04:a2:f6:d3:1b:50:fe:f0:01:fc:2c:2f:c1:71:a9:d1:ec:
         25:ca:5f:4c:69:f1:99:23:41:a1:7f:6e:f9:6a:a7:49:b9:72:
         9d:cb:fd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----