Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
File:                     JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft (raw, json)
Hash identifier:          h9OWS7Hd9vpAkoljqOMTP7USdQoL5NXeY2lB40wid5Q=
Subject key identifier:   8E:15:4B:6A:76:5E:B9:56:E8:45:D9:35:A6:4B:B6:2D:31:4D:6E:2A
Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
Certificate issuer:       /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Certificate serial:       01962E2ACBE54600B2026BC7836F8D96C412
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
Manifest number:          0BE0
Signing time:             Sun 13 Apr 2025 08:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:18 +0000
Files and hashes:         1: JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl (hash: pSLnF+901twCLLxeQ40gsb8DQMwR3w0MY896VClRkZs=)
                          2: VJR7Lo1LB0pD40S4fO2jLPEbihA.roa (hash: RbHjGHvWg7AGicrPJns6EGHLTa9+BO6JRpxrZNUyWo8=)
                          3: gX6AqUyGzqBuxo0ZWofHdJPozGo.roa (hash: tMyCIpNNOmtDo0tCmm/IacKiCjkSIun6I2dTk3wHLFc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:cb:e5:46:00:b2:02:6b:c7:83:6f:8d:96:c4:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
        Validity
            Not Before: Apr 13 08:01:18 2025 GMT
            Not After : Apr 14 08:01:18 2025 GMT
        Subject: CN=8e154b6a765eb956e845d935a64bb62d314d6e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9e:3f:76:0d:f6:c8:c1:1a:11:79:9f:07:19:
                    db:ee:d4:02:c7:fc:c2:98:38:d8:81:0b:4f:e9:26:
                    6a:8c:58:4b:fe:50:57:f0:8c:e1:01:2b:ad:23:c6:
                    d8:86:d6:65:ce:86:f4:1e:d9:b7:ee:e5:13:1a:8d:
                    2a:e4:ba:3b:03:a6:1d:80:dc:2c:79:29:92:a8:37:
                    8f:2c:f2:02:1d:2d:47:f2:ef:cc:1c:51:6d:89:01:
                    75:f4:15:d3:84:20:11:b0:2f:7d:ea:fd:85:e8:6b:
                    0d:7e:00:14:41:a0:2e:12:3e:71:13:d5:2e:79:6b:
                    7f:ec:3c:5d:c9:ce:61:f4:ff:88:fb:3f:c2:5a:1b:
                    79:dc:3f:1c:c0:cb:bd:62:5e:0b:22:09:bb:1b:77:
                    12:5b:8a:a7:5b:4a:dd:d7:5d:53:1e:4c:a2:b4:11:
                    5c:f7:a8:b1:8d:08:88:53:20:b2:09:b4:77:58:b1:
                    93:b2:75:46:80:9e:12:63:34:a1:0d:e6:fa:d0:27:
                    33:57:6f:46:bc:f7:d6:cf:04:cb:1b:98:22:b3:a1:
                    41:6e:dc:d9:f6:fb:2d:99:8c:91:28:ee:fa:79:72:
                    89:0c:0d:8d:45:4e:cc:a8:b8:8b:6a:94:39:e3:62:
                    cc:ac:31:61:ea:c0:df:04:fc:48:86:00:87:bf:4e:
                    2c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:15:4B:6A:76:5E:B9:56:E8:45:D9:35:A6:4B:B6:2D:31:4D:6E:2A
            X509v3 Authority Key Identifier:
                keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ad:5b:82:33:d5:a6:00:83:11:9c:1c:79:a4:21:d9:66:1a:
         f6:f6:b5:15:74:82:c7:cd:95:06:56:8d:fc:54:c3:a6:93:fa:
         62:9e:5b:8e:5e:ff:45:45:e8:00:7b:0b:d6:50:3d:fd:c2:97:
         ed:a2:76:9a:19:8e:39:5d:bd:d3:22:ba:df:c9:f7:1d:41:2e:
         ad:7c:f3:88:e1:58:77:fe:1d:a1:42:28:e9:fb:0e:6b:a5:46:
         65:35:e5:0b:5e:77:c0:28:e6:52:05:5f:ca:ba:2a:19:bb:48:
         9a:5a:8c:e5:79:bf:70:9f:7b:f5:d3:b4:92:13:e1:16:87:b8:
         d5:f7:be:36:9e:df:88:8b:3c:7d:f1:00:62:42:e3:ac:c3:f5:
         46:a8:4e:87:63:10:81:4b:b5:24:91:93:2e:2f:fe:ec:af:6d:
         47:90:10:9a:70:ed:5b:ec:82:7c:c9:3d:57:db:b1:6c:7d:a4:
         28:f9:30:9f:d7:98:ba:2e:c5:a5:e2:ef:27:cc:fe:7c:ed:d5:
         bd:82:7e:87:f3:7e:77:2c:56:79:07:7a:f9:c0:84:6e:4f:8f:
         18:60:1d:b1:46:b2:d8:93:12:7d:48:33:2d:8f:ee:b9:e2:a1:
         e2:47:5b:e4:44:83:16:13:b0:86:98:79:13:17:54:cb:4f:3b:
         bd:31:e7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----