Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
File:                     JiditzviJrFxmZQSYlrMcnAkQ0M.mft (raw, json)
Hash identifier:          f4MYl2r301O9OeQs+moOwblV4JxKf/vMxpKixzVkQ7k=
Subject key identifier:   8D:37:1B:2C:62:47:B0:89:27:FC:BB:04:C5:9B:06:81:74:C4:71:A9
Authority key identifier: 26:27:62:B7:3B:E2:26:B1:71:99:94:12:62:5A:CC:72:70:24:43:43
Certificate issuer:       /CN=262762b73be226b171999412625acc7270244343
Certificate serial:       01962E2ADC5EA957E1385FD5E91867DA9F5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
Manifest number:          0138
Signing time:             Sun 13 Apr 2025 08:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:22 +0000
Files and hashes:         1: JiditzviJrFxmZQSYlrMcnAkQ0M.crl (hash: 3swwCVbP2UYvWLHsZwqGR0YT3an3dPVZMWteBC9KaeE=)
                          2: SW0NmgN1MfeImMBLkTet_og-k3A.roa (hash: NuBlZaeVdzU+Qx3vpR2cHPvzMF2hd3qV04JT0+dx0Ww=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:dc:5e:a9:57:e1:38:5f:d5:e9:18:67:da:9f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=262762b73be226b171999412625acc7270244343
        Validity
            Not Before: Apr 13 08:01:22 2025 GMT
            Not After : Apr 14 08:01:22 2025 GMT
        Subject: CN=8d371b2c6247b08927fcbb04c59b068174c471a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:97:ef:10:27:2a:37:f7:d7:46:33:9b:7f:af:
                    a2:35:7b:5f:6c:58:41:9f:74:6a:59:b8:02:3a:f3:
                    84:0c:27:91:a4:17:1c:3c:cd:1a:61:62:31:28:cc:
                    48:69:2e:4d:94:e5:15:19:6d:c6:b4:f0:54:59:a4:
                    a2:90:6d:bb:08:19:f3:9a:fa:06:d6:7f:42:f2:ca:
                    46:a5:c6:a7:c1:b2:85:6b:70:f4:f5:45:d9:54:c7:
                    c1:f7:30:9c:39:b9:ec:01:6a:88:75:b5:e4:63:be:
                    85:97:22:07:05:b6:1d:e8:cd:d1:b4:d7:34:55:df:
                    a6:1b:d9:9f:4f:90:78:e2:61:79:6c:e2:94:b0:0d:
                    0c:f0:72:bd:64:17:d3:17:51:e3:05:c6:d4:98:59:
                    a8:59:09:d7:44:7a:94:c5:27:18:9d:7d:03:b2:61:
                    28:70:27:c2:ab:6a:9c:f2:ad:d1:81:6a:00:0e:df:
                    d9:b0:7b:56:08:47:c4:b7:4c:f7:fc:1e:b3:55:d3:
                    c3:ff:a9:59:4a:34:8a:8d:e2:d1:76:81:86:83:38:
                    b2:d2:98:b7:4b:72:84:b7:77:fe:34:05:f6:bb:43:
                    53:ae:21:ad:09:0b:01:61:4f:fd:0b:17:7f:85:42:
                    53:03:d3:45:b8:df:37:e3:0f:42:ff:a5:2b:d4:68:
                    ab:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:37:1B:2C:62:47:B0:89:27:FC:BB:04:C5:9B:06:81:74:C4:71:A9
            X509v3 Authority Key Identifier:
                keyid:26:27:62:B7:3B:E2:26:B1:71:99:94:12:62:5A:CC:72:70:24:43:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:98:4a:87:15:67:c0:94:e4:1d:1d:df:44:f2:93:9c:29:bf:
         a6:31:5d:83:9d:a5:ce:32:3e:70:73:fb:e1:84:de:52:0e:05:
         fe:10:0a:f7:df:4b:c8:0c:fd:84:87:fe:f5:81:e3:d9:99:09:
         b7:42:d7:8c:8f:0a:79:a3:81:79:27:ad:f5:58:5c:a9:b3:7d:
         f8:fb:88:f8:39:5f:39:04:18:6b:9d:36:f4:0b:13:23:3b:77:
         05:0c:a3:a9:8b:0a:84:f1:da:f6:d3:d9:6d:51:ac:e7:cb:e9:
         18:22:82:76:f3:20:04:bc:e6:77:f8:13:0b:06:09:9a:2b:ec:
         03:35:93:d6:6c:72:80:80:2e:9e:fe:b9:a2:00:73:f9:49:2e:
         7c:40:1c:fd:09:94:a3:b1:86:fd:8b:39:cf:7a:62:91:1a:6a:
         51:d5:cc:91:d1:7a:13:b1:e2:7c:5b:48:27:ef:0b:d9:3f:6c:
         81:bb:4b:1d:2a:52:35:da:1f:2b:b6:01:63:11:df:cc:54:6a:
         03:b2:a6:68:e3:08:36:5a:31:01:21:14:3b:41:ab:4d:33:ae:
         97:52:69:9b:18:a9:2c:8a:3f:cb:d6:85:e1:90:7d:19:d6:76:
         ff:dc:20:71:b7:9e:0e:2a:da:29:cf:e1:12:f0:ee:12:88:5e:
         d6:a1:87:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----