Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
File:                     JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft (raw, json)
Hash identifier:          czi/y5uZYWSG/WZMJdY7lVg+OTAbfGj/hX/VZJFn9Tk=
Subject key identifier:   41:F6:71:17:87:1C:49:72:82:BB:91:CC:E4:C6:8C:CA:D7:58:E1:EE
Authority key identifier: 25:57:2E:8F:93:B1:8A:40:1C:FE:CD:F6:25:86:78:38:58:CC:5F:14
Certificate issuer:       /CN=25572e8f93b18a401cfecdf62586783858cc5f14
Certificate serial:       01962FAB1A287B83ED85E582ADF691C19932
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:04 +0000
Files and hashes:         1: DTLOnLZIHhlPP7pvWpWEUTLWHQg.roa (hash: QLz4ZYz1buP6/UJvo5YrZ+4VolEyE3vVmr+8wwogqDA=)
                          2: JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl (hash: 3zAsh7vKt703NKwjhg+FujqmGsaT4bTf+YOHyEKCfk4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1a:28:7b:83:ed:85:e5:82:ad:f6:91:c1:99:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25572e8f93b18a401cfecdf62586783858cc5f14
        Validity
            Not Before: Apr 13 15:01:04 2025 GMT
            Not After : Apr 14 15:01:04 2025 GMT
        Subject: CN=41f67117871c497282bb91cce4c68ccad758e1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:18:51:a3:4e:b4:d8:af:6b:a5:7f:c0:a7:36:
                    e5:a6:5a:04:d6:4c:b5:9a:64:bb:b4:51:a7:e3:6f:
                    63:b7:a2:f2:9a:6d:37:1c:98:18:0d:61:51:fb:c8:
                    18:1f:4e:70:5a:3c:92:f0:34:4a:05:f3:b3:d1:29:
                    8d:94:a2:3c:54:b0:45:7e:87:fc:19:37:da:b0:69:
                    71:6b:37:fd:4f:c4:0c:65:0d:6b:5f:28:e1:66:9f:
                    54:6f:c8:e0:a7:b5:2b:43:de:d5:7d:19:2e:76:14:
                    f7:f6:64:25:c2:d8:ea:ce:3a:5b:a1:fa:67:87:eb:
                    d8:1c:4e:62:e7:e7:bf:46:a1:d0:6f:88:9b:77:da:
                    ea:0c:2e:96:65:65:aa:8c:a9:b3:19:a8:75:41:e9:
                    b7:83:76:87:d7:08:98:0a:b8:ea:aa:e3:af:05:2e:
                    6c:9b:c9:d8:88:3e:22:4b:77:c3:ef:a7:f0:10:3b:
                    19:22:60:3b:6e:7f:96:e8:a9:1e:4c:f6:05:3f:de:
                    cf:d5:09:ff:d8:23:7d:13:43:32:7b:c0:4c:cd:1a:
                    02:b0:17:01:73:8d:1b:4d:38:60:e0:11:75:76:04:
                    da:5b:10:fe:d3:d1:aa:a1:c6:44:f2:08:17:79:b5:
                    bf:11:5d:66:cb:ca:e5:82:cf:69:af:cc:86:96:0a:
                    46:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F6:71:17:87:1C:49:72:82:BB:91:CC:E4:C6:8C:CA:D7:58:E1:EE
            X509v3 Authority Key Identifier:
                keyid:25:57:2E:8F:93:B1:8A:40:1C:FE:CD:F6:25:86:78:38:58:CC:5F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:78:5c:d5:7e:c3:e7:53:8b:01:27:40:09:21:25:ee:e8:3d:
         26:54:59:0b:ee:98:66:78:5c:49:3d:ae:9d:f2:03:76:7f:2c:
         07:f1:28:60:9e:ea:da:41:2b:e9:dc:e2:f5:6d:ea:c4:a8:03:
         d8:69:6b:63:76:9f:88:59:ba:d7:c2:b9:cd:13:22:95:eb:cd:
         bb:05:c3:80:f3:60:34:0b:67:c6:74:c5:9f:4d:a9:8c:78:5e:
         f1:3d:6a:63:13:1e:fc:4d:19:dd:7d:c3:ac:00:44:95:52:63:
         da:58:30:2c:87:d7:17:ae:23:61:47:be:b9:0a:9a:b0:3c:0f:
         01:64:92:1d:04:75:47:da:9c:cb:b1:b7:48:b2:17:3e:c5:8d:
         88:ef:bd:bc:3d:ff:d9:de:70:00:19:f1:46:bd:0f:a8:6a:ff:
         e1:01:9d:dd:34:b9:06:a4:8e:80:45:0b:54:e9:a4:5d:a7:e6:
         31:d4:72:a6:7a:15:b1:5b:2f:03:0b:9d:88:b0:3e:b9:71:b8:
         dc:a0:f9:8d:47:e0:c0:70:e9:60:9b:3e:50:b3:54:d5:13:60:
         1b:74:b7:e3:1e:11:75:c6:5a:10:06:ad:c4:71:3a:b3:2f:3e:
         26:8f:cb:c7:03:20:8f:d4:5a:bb:da:25:3b:63:ce:7c:23:5c:
         19:77:2e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----