Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
File:                     j2xCTP6ScDEA1QooMiU3RN11ZFI.mft (raw, json)
Hash identifier:          sUAYQcSN+KIh7P8Gwpj3xIubGM8bPUOa3Egl5d3ppCs=
Subject key identifier:   28:CA:9D:D6:84:65:5C:2C:13:A0:E8:C4:1B:3A:EA:C9:3F:AC:6F:83
Authority key identifier: 8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
Certificate issuer:       /CN=8f6c424cfe92703100d50a2832253744dd756452
Certificate serial:       01962E61E7E15182596C7A7F5835C3EB2C1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
Manifest number:          0DAB
Signing time:             Sun 13 Apr 2025 09:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:30 +0000
Files and hashes:         1: GQxkJdIQ2mMnuH7dZw47ZjRqiOY.roa (hash: j81MHjapkMDfvn23UflaNVCyJQMSfhc/nd+jMYFAbFo=)
                          2: j2xCTP6ScDEA1QooMiU3RN11ZFI.crl (hash: i+zFjlTtBAJO6bTD4vb3S4PveXHAmvrjElJzqnlJFKQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e7:e1:51:82:59:6c:7a:7f:58:35:c3:eb:2c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6c424cfe92703100d50a2832253744dd756452
        Validity
            Not Before: Apr 13 09:01:30 2025 GMT
            Not After : Apr 14 09:01:30 2025 GMT
        Subject: CN=28ca9dd684655c2c13a0e8c41b3aeac93fac6f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a8:4b:2b:e2:cd:22:07:35:1d:ac:dd:28:79:
                    4f:aa:06:92:44:c3:21:d4:4a:be:01:47:5b:55:f2:
                    e1:91:22:a9:f4:c9:c2:36:c1:a8:85:df:f7:ba:4a:
                    90:cb:b8:d4:ff:02:e1:57:f5:ec:36:bd:30:ab:8f:
                    23:4b:23:de:02:00:4b:db:76:28:53:3d:6f:85:c5:
                    52:4a:8b:50:32:5d:16:af:4e:3f:74:b5:22:71:ea:
                    96:ae:e9:4e:0a:35:f5:8c:f6:6e:9f:5b:5c:ab:96:
                    ab:d1:4e:9a:96:90:9d:f2:ae:ad:e2:fa:9f:c1:90:
                    a8:c3:61:28:49:14:cb:f2:c3:8a:ab:7e:bb:89:ad:
                    24:0f:d6:f2:77:79:e9:ab:12:ae:53:25:38:6b:ba:
                    f8:6f:7c:bb:05:6f:df:f0:27:24:12:88:31:fd:9f:
                    a0:21:fb:b4:bd:ca:44:90:15:23:39:8a:e5:8c:43:
                    5d:1e:d8:ac:0c:c9:4f:a6:d5:65:72:ce:a9:97:9e:
                    be:91:cd:ac:8f:7b:1a:90:09:45:f6:23:d0:c5:02:
                    f4:b6:9c:20:11:78:b3:99:d3:4d:9c:98:da:80:59:
                    c6:51:88:16:52:c6:e7:7d:2c:23:37:81:4a:b6:16:
                    73:81:83:f9:86:a3:9d:8a:b5:31:68:3c:2e:c7:9d:
                    0c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CA:9D:D6:84:65:5C:2C:13:A0:E8:C4:1B:3A:EA:C9:3F:AC:6F:83
            X509v3 Authority Key Identifier:
                keyid:8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:8b:9e:57:0e:59:00:a1:8f:4a:8d:0f:3c:8a:d7:51:17:0a:
         ab:72:57:39:b5:a7:13:9d:af:d1:f4:b6:12:a1:bc:d0:76:78:
         17:4a:00:76:ee:16:1f:13:c7:2b:5c:89:27:9f:dc:24:c8:29:
         e9:ff:2f:dc:46:a0:38:20:b7:bd:32:81:e4:43:d0:1c:74:64:
         5a:99:3d:00:c2:bd:0d:2d:cf:87:e1:e1:01:2a:cd:f3:09:77:
         ef:95:df:01:66:c2:c2:d1:ed:0a:e5:51:34:d4:ed:be:9a:79:
         08:32:4f:cb:53:d8:e9:a3:d5:e2:19:90:69:2c:86:99:7a:c6:
         8f:d6:da:6a:34:b8:9f:4e:23:45:42:32:b9:3f:c1:e0:b7:72:
         6c:27:a9:7b:2f:1c:0d:43:9b:15:c6:10:3e:b3:24:4c:c6:3e:
         af:f0:e4:18:56:d0:e2:66:37:d8:38:6d:7c:11:40:5b:56:14:
         7a:2e:f4:a9:a7:24:cc:e1:1d:46:93:39:e2:69:23:b7:0f:d4:
         17:07:81:c5:c0:22:a1:fc:a4:3b:a9:87:cb:6f:28:f4:3c:c6:
         5e:44:bc:8f:f6:0c:5d:e1:3c:0d:5f:13:31:65:30:bf:25:ce:
         a3:b0:d5:45:86:b0:25:38:04:20:ba:f7:c1:9a:8a:b3:fc:68:
         45:bd:88:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----