Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
File:                     0JH-jFQMROI0-bxmj4o7Fkes2wY.mft (raw, json)
Hash identifier:          W0WK5fT6MGcJoRfQX78OErQDy+efrOldBZQavsj8fPU=
Subject key identifier:   01:02:DF:BF:64:94:94:C5:FE:BC:68:0C:7B:6E:56:B7:94:8D:25:9E
Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
Certificate issuer:       /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Certificate serial:       01962F064EF69549D50930F4C9EB2B8828A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
Manifest number:          126D
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: 0JH-jFQMROI0-bxmj4o7Fkes2wY.crl (hash: tweSCMLpV5WcSVnUoHr/xqGLXKT/Xawc803LY3w6/Ds=)
                          2: KEydF7bMk6RADdNKhYi6WFKpHSw.roa (hash: bl+U1VafH5Wzj+g/exETARmZ+DznhEsF7Fa2nlPP/i8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4e:f6:95:49:d5:09:30:f4:c9:eb:2b:88:28:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=0102dfbf649494c5febc680c7b6e56b7948d259e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fc:d2:39:e9:07:88:b6:7f:1f:b0:94:b2:e6:
                    aa:27:91:c2:dd:15:5b:a1:af:03:1d:3b:0a:3a:10:
                    cb:f7:0a:c5:81:e1:80:d6:1c:16:ac:3e:ff:76:48:
                    f1:8a:31:2e:7b:dd:b5:db:51:95:e0:16:8f:d0:5e:
                    c0:ff:64:4f:8d:e3:6f:cb:9a:55:67:83:f4:75:88:
                    f8:aa:ee:50:f0:49:3c:6a:7e:74:84:ac:83:5a:17:
                    71:2a:87:19:78:c5:85:da:4c:77:93:b6:4f:c1:c5:
                    f8:a7:0f:07:5e:cc:d8:4b:a8:8d:bc:55:07:d2:ee:
                    75:1a:80:a4:dd:5e:1b:d7:98:44:77:b1:ec:3e:b9:
                    5f:7b:b6:f7:6c:10:f9:f1:73:5f:29:78:da:62:cc:
                    07:93:96:57:c6:36:39:8f:73:37:a4:bf:16:87:b4:
                    7d:80:59:b5:f5:0b:e4:88:51:43:d4:ee:38:15:a6:
                    de:20:4b:19:41:b8:71:1b:b8:13:57:cc:f1:79:af:
                    13:b0:ba:48:d9:8d:76:e5:6c:01:24:05:f8:ee:2e:
                    95:1e:d6:ae:70:9e:9e:18:e7:4b:90:a6:20:d0:75:
                    d2:9d:df:76:38:b4:b5:7e:97:d3:60:f5:52:9e:27:
                    b1:ac:98:78:33:eb:7f:ef:e8:99:95:40:ba:ec:d2:
                    40:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:02:DF:BF:64:94:94:C5:FE:BC:68:0C:7B:6E:56:B7:94:8D:25:9E
            X509v3 Authority Key Identifier:
                keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:19:0c:c4:26:3b:70:77:45:aa:e8:da:2f:81:ce:e5:56:e9:
         26:cb:6e:f9:75:8a:ca:2f:e1:30:79:56:f8:90:b5:ab:d5:7c:
         6f:fa:f9:26:f8:15:ae:48:13:4c:9a:a4:09:7a:d9:4b:c4:b2:
         45:9e:37:31:ae:73:48:d1:2a:a9:7b:3c:71:32:52:7a:9a:d8:
         1b:88:f0:c0:b4:33:7f:cc:68:22:6d:ed:0c:a0:81:53:ee:8d:
         e5:1a:d4:d5:bc:11:ab:b3:f9:5e:ab:dc:b3:0c:c2:21:83:da:
         ed:93:7a:d6:6d:78:01:d2:86:30:cc:bc:cc:b8:0a:4a:ec:97:
         13:92:f8:73:e6:71:1f:7d:a6:d5:fe:1f:0f:f0:02:29:8b:18:
         d2:26:40:8e:11:2d:e9:b0:8e:b5:42:2d:80:4f:53:e7:44:18:
         cb:4e:83:b6:20:e8:1e:b9:9f:20:2d:2c:ae:12:6d:68:1d:f5:
         59:ba:b5:12:5c:52:f0:87:38:29:f9:b1:58:72:4c:fd:76:e3:
         b0:a7:c0:5c:e1:ff:be:9c:23:26:78:11:18:22:ca:c9:93:ad:
         50:3f:15:8e:70:27:b4:c3:c0:93:99:7a:36:b5:99:3e:35:c3:
         79:b8:43:d0:8c:2f:4b:26:ab:31:f7:1e:f3:0e:a2:9a:92:ff:
         b9:28:42:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----