Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
File:                     JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json)
Hash identifier:          cwQ2jYLbPfvjYVFEgVuKzA7SOo3FMyfL3b31+JtBKOQ=
Subject key identifier:   2B:BF:14:67:D6:EB:71:92:08:EE:61:64:27:9A:0C:5E:AF:F1:5D:06
Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Certificate issuer:       /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Certificate serial:       01962DF3CB8A32CB56C277C87F73972BAA03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: 5n1EQkcmRaucyrGX88Dgx7YQ19k.roa (hash: t4Vnu9tnDcftty/GlXBTfwRRN3QnsJxvx0/8WS/aC10=)
                          2: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: t3jSTEbI+TuylweGED3Ps54rj+KKIuoWQa0GoCjI51Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cb:8a:32:cb:56:c2:77:c8:7f:73:97:2b:aa:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=2bbf1467d6eb719208ee6164279a0c5eaff15d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f2:bb:e3:fb:00:5d:3a:b2:c6:8a:4c:00:f7:
                    50:1e:2c:a3:43:1e:89:a0:51:32:06:f5:67:c1:47:
                    b3:b3:3d:b5:f3:55:55:60:0c:8d:49:77:7e:21:f8:
                    73:f8:04:1f:c1:d0:fe:96:27:78:87:09:ea:fc:0b:
                    7e:24:50:d4:77:82:dd:2b:ed:86:72:83:26:0d:ff:
                    51:71:77:9f:61:28:e3:cb:4c:c4:c5:ab:26:04:99:
                    a6:35:63:ba:ff:81:0c:c5:54:60:c1:91:25:c0:60:
                    42:84:3e:0a:72:ca:69:e9:24:a5:3a:18:51:1d:66:
                    f8:4f:cf:ee:32:8e:c1:0a:6a:d7:5a:81:39:54:b5:
                    46:ed:f1:27:5e:ee:12:a0:f4:0f:4c:ac:81:92:5c:
                    33:4c:8b:f2:79:86:20:fe:a5:07:d9:c3:57:a5:0f:
                    45:3b:68:1d:21:fc:ba:88:da:ee:a5:aa:1f:8c:1b:
                    65:a9:a7:c6:45:39:cd:27:49:5b:c8:6b:91:80:6b:
                    99:96:1d:fc:19:4e:68:77:fe:a1:c6:8a:56:f5:7b:
                    0c:1b:1d:3d:7f:93:c7:aa:8c:dd:64:99:d5:a6:12:
                    96:cf:c7:af:3c:9e:82:b4:80:fc:e0:1c:da:25:fc:
                    cf:de:14:4f:17:dc:3a:60:aa:2c:45:1e:ea:aa:37:
                    69:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BF:14:67:D6:EB:71:92:08:EE:61:64:27:9A:0C:5E:AF:F1:5D:06
            X509v3 Authority Key Identifier:
                keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:b0:74:93:a8:6e:54:59:e2:b7:c5:e8:77:65:ad:82:58:40:
         7f:d3:28:16:80:05:7e:7b:51:72:e5:a6:46:ce:95:d8:c5:87:
         6b:8c:9d:94:a2:30:26:85:2a:a4:84:b6:17:7b:3b:ce:b5:e8:
         54:b8:d0:49:b3:28:6e:0b:c6:ae:0f:17:c2:a4:37:4b:92:68:
         c6:17:8d:64:a3:2e:40:13:c7:a6:00:e3:36:bb:07:d0:34:25:
         d7:c4:58:6d:af:70:08:b6:3f:72:1e:82:31:b5:1b:bf:35:e9:
         8d:3b:b5:93:28:2b:90:08:37:d2:12:74:91:50:cf:c4:a9:c4:
         21:3b:45:0e:4e:6b:8e:ba:4c:bb:0f:2c:98:a2:2a:4e:56:d5:
         66:56:fe:23:35:96:7e:1f:e0:8f:30:b2:5a:d3:ca:5d:63:3a:
         66:4c:d8:e2:88:1d:3a:91:65:e9:b5:cf:35:d6:f7:a1:e2:eb:
         77:47:a9:7b:e4:6b:5e:1e:90:7b:10:d4:c9:0b:b1:d5:64:b8:
         36:38:cd:d7:c8:c9:6d:d1:18:36:2f:69:bf:08:c9:77:3b:66:
         03:b4:b8:53:5f:42:1e:8f:d1:bf:ac:77:5d:ae:b1:94:ad:f0:
         88:ae:e2:71:25:1e:48:5c:1d:09:ba:d9:82:eb:f9:c0:be:81:
         f5:db:8b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----