Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
File:                     mjfe_wVaUdk-HtL3xzIX12B6jPI.mft (raw, json)
Hash identifier:          cxMZSQg8qUpK2WMZ94hf+lyku7ix2vlFlpIgwVWcsRc=
Subject key identifier:   34:82:10:0D:41:DF:19:22:79:0E:D1:DF:F8:C0:BC:AA:EA:17:AA:07
Authority key identifier: 9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2
Certificate issuer:       /CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2
Certificate serial:       01962E2AFAC5DAC5E5F3016262D7BC08471E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
Manifest number:          02B5
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: YxveI4ih6pTB1sKFupGdm18Smzc.roa (hash: dR429rKnleksdPGeSDctkW6MMPKSaofQtmcnafzS7xs=)
                          2: mjfe_wVaUdk-HtL3xzIX12B6jPI.crl (hash: MfPAmak0qFDsWd6wYEPns1iAefko7FxZuXTm41bGR4w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fa:c5:da:c5:e5:f3:01:62:62:d7:bc:08:47:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=3482100d41df1922790ed1dff8c0bcaaea17aa07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5a:c5:1f:91:44:0b:f3:4c:28:a3:ce:1d:bc:
                    e2:fa:69:08:bf:a3:a8:44:3d:f4:3d:df:2e:bd:06:
                    8d:73:a6:5b:11:f0:06:c3:aa:29:af:a8:e4:1a:da:
                    ef:6d:32:57:7d:57:d7:d8:94:9e:47:76:e7:58:20:
                    b5:07:1c:5f:cf:3f:c9:33:02:63:c0:7a:b0:58:bd:
                    07:b6:6a:cb:55:01:a8:8b:b0:67:6f:73:21:41:23:
                    98:95:93:2b:5f:ca:33:02:26:63:b5:4e:69:43:46:
                    32:57:08:68:c0:a9:37:eb:f7:dc:e9:75:df:72:e0:
                    50:0d:3f:9c:5d:f5:c6:7d:21:ad:50:71:bb:8a:00:
                    34:eb:0d:61:59:54:af:9c:2d:df:fb:4e:fc:6c:9c:
                    67:e6:52:69:23:72:a4:d0:13:7c:8f:d4:7f:d3:4d:
                    14:5c:fc:86:a7:8f:8d:e3:a3:33:1d:8d:bb:1c:b4:
                    21:b4:54:7d:4b:80:c4:18:4e:53:41:31:81:0f:fe:
                    c6:6f:c5:ca:52:7b:64:ac:1b:00:2f:46:00:9c:e2:
                    91:d2:89:60:c7:a0:3a:e2:49:d5:93:0f:9b:9e:93:
                    30:68:f0:14:e0:1a:0f:51:41:b7:4b:8a:22:f2:26:
                    eb:02:73:93:07:9a:5d:7e:4f:ff:7e:9b:4c:99:ea:
                    ea:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:82:10:0D:41:DF:19:22:79:0E:D1:DF:F8:C0:BC:AA:EA:17:AA:07
            X509v3 Authority Key Identifier:
                keyid:9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f3:06:b6:82:f7:6b:ae:ea:08:f6:09:aa:10:ec:7d:d0:61:
         df:e2:b4:14:56:36:10:2d:c7:39:39:7f:4a:bb:9c:11:c7:82:
         6b:54:d2:c3:98:dd:62:40:91:d3:a7:bf:48:eb:f9:86:57:50:
         52:9c:1f:26:ef:c9:d9:f4:eb:81:34:11:d3:78:a8:da:d5:89:
         24:f9:98:bc:d0:8b:66:74:dd:23:14:2d:75:49:ce:42:0a:bb:
         87:8d:2a:fa:70:c7:29:91:99:e6:93:51:2b:a9:c8:74:f6:2f:
         6c:bf:51:a5:91:88:95:32:5a:79:6d:e2:43:60:68:f1:7c:d1:
         3d:18:2f:3c:6d:3b:60:b0:90:69:a0:00:68:f3:f2:38:4d:5e:
         9f:84:f4:03:11:45:7e:11:bb:31:78:0a:3a:04:96:64:4b:07:
         51:47:b6:d0:fd:1e:f0:bb:20:42:47:29:ec:2d:db:51:2e:ee:
         29:5c:70:b6:77:85:fa:02:47:29:a1:03:53:b0:42:47:05:e2:
         db:1d:94:b5:eb:58:5f:45:36:85:32:86:6d:0d:a4:4d:a6:40:
         51:2b:52:44:a4:e5:19:d7:41:3b:89:64:2d:74:e6:0b:34:17:
         55:b5:18:c1:8b:ee:65:4b:ec:ba:4e:a4:d0:e0:c5:89:ec:5e:
         da:d6:e7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----