Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
File:                     JPS59IVkIInzaxdNlkLcSDf_TSQ.mft (raw, json)
Hash identifier:          syFCzEWtHM7qq1K1SweUQHFFZVVqLdpH/Yj9nX72nRQ=
Subject key identifier:   A7:09:74:B4:4A:2D:B3:43:16:89:65:8A:7A:DA:C7:78:D3:6E:5E:6E
Authority key identifier: 24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
Certificate issuer:       /CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Certificate serial:       01962F743E2B5E014F204BF65336741723AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
Manifest number:          0271
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: JPS59IVkIInzaxdNlkLcSDf_TSQ.crl (hash: is4CEg+bJTLRNtVqVA6k5mURy66Leo3de71dMtJy8x4=)
                          2: cNr_HYvpiGioRSQRxwB1USCGS48.roa (hash: +noL2GpravnsNJo9M6TMNUj+1J6YWZz/J8eJw0GPGmE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3e:2b:5e:01:4f:20:4b:f6:53:36:74:17:23:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f4b9f485642089f36b174d9642dc4837ff4d24
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=a70974b44a2db3431689658a7adac778d36e5e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1f:89:05:94:36:be:f0:97:c2:4a:e1:9a:f0:
                    91:6b:ce:8b:36:c0:c8:c1:13:9c:4d:14:d3:eb:67:
                    bc:2b:38:e2:f6:32:be:b3:d2:44:06:c9:eb:d1:d7:
                    46:0e:3b:b4:d8:ee:84:14:76:ac:b8:4f:d0:8d:70:
                    d4:d0:56:91:cd:41:c5:b7:88:b3:59:f5:0c:8e:69:
                    db:f3:12:53:4a:a3:f5:47:28:ea:71:6c:e8:f3:5c:
                    a1:c5:62:99:28:cd:b1:f7:1e:f4:4a:ed:3a:bb:6b:
                    11:21:72:e2:f3:5a:7f:36:9d:d2:bc:d1:d9:f7:2e:
                    1e:19:52:33:c9:a6:eb:a2:f1:ea:2b:53:79:2d:5e:
                    ae:dd:1f:44:f8:3f:d0:27:90:a6:08:a9:31:9a:ca:
                    c3:a1:c7:06:7d:86:f2:b0:a9:4a:72:9a:52:f9:e4:
                    f4:45:df:56:ea:2a:cb:3c:2e:c2:cf:22:9b:a1:04:
                    7b:9c:6b:2b:4a:67:48:c8:da:a3:8a:4c:07:33:fe:
                    b7:fa:85:b2:8c:4e:a0:c9:05:54:b5:5e:1c:eb:9a:
                    2d:a1:2e:26:fa:17:56:79:81:c6:bf:3d:16:c7:0d:
                    63:7b:6d:5e:8d:16:92:ec:28:a4:b1:e0:c5:a8:8a:
                    de:6c:10:70:25:ca:7a:22:47:49:3a:20:31:8c:86:
                    2f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:09:74:B4:4A:2D:B3:43:16:89:65:8A:7A:DA:C7:78:D3:6E:5E:6E
            X509v3 Authority Key Identifier:
                keyid:24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:05:4d:84:2c:5f:cd:35:c5:d2:0a:e8:0b:42:38:72:b5:db:
         89:31:24:18:1d:a6:e6:99:73:c2:d2:77:dd:3f:e0:33:09:3c:
         88:80:c5:69:5f:8b:78:14:64:f2:e8:ab:85:4a:7b:c1:f8:bb:
         a1:c4:54:4a:20:25:5d:c2:2d:a4:e2:24:4e:29:e4:6e:83:ed:
         dc:f1:36:2f:23:d6:aa:c4:37:06:45:ae:e5:b3:32:b2:ed:14:
         37:91:3a:25:e3:cd:6d:20:fc:ef:03:64:96:61:0e:1a:0e:18:
         b9:4a:59:1d:13:24:83:d8:e9:d2:08:95:91:13:85:29:6f:46:
         e0:46:37:d9:7f:35:33:89:0c:e8:b9:e6:50:fa:de:a2:b6:f4:
         85:f5:23:03:23:5e:05:ad:89:41:bd:69:61:60:64:d7:97:80:
         f5:c0:e1:69:18:39:44:80:95:c9:5b:17:6e:88:10:69:12:08:
         fb:f2:62:75:cf:cf:1a:ba:f0:1e:33:53:d8:8c:ef:fd:54:ed:
         6a:ca:2b:74:ff:8a:ce:7e:a6:04:86:dd:40:09:4a:c4:af:ff:
         88:ae:65:d8:6c:20:16:e0:ad:b2:4e:48:16:9c:96:79:b1:a0:
         5e:ce:7c:45:7a:40:84:0d:db:4c:dd:2c:8a:f6:5c:a6:28:8a:
         50:82:3c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----