Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
File:                     k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft (raw, json)
Hash identifier:          0MQ6B6cpHWfonvpAxtg9sV2Ewts4CxH9iH4E68Q8BGI=
Subject key identifier:   DD:EE:7C:18:34:E7:1C:2D:1C:82:37:EE:65:87:9E:D7:E6:58:36:1A
Authority key identifier: 93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74
Certificate issuer:       /CN=93f25b72758da58f0f3ec0f0727353ebd2b44774
Certificate serial:       01962E9922DA4B2AC7A9CD5E6C2D0D692F8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
Manifest number:          1339
Signing time:             Sun 13 Apr 2025 10:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:49 +0000
Files and hashes:         1: BQgIr9QK549Gh-t8XQa2kJXJbXM.roa (hash: FyMx4NmgioW+v5IwQi287SWwxmKQZhpDHBnVgYBPbds=)
                          2: k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl (hash: 6FAi65yCgjqc15UpI+aPu7dYtiIoUHlnCwXKGefkFWA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:22:da:4b:2a:c7:a9:cd:5e:6c:2d:0d:69:2f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93f25b72758da58f0f3ec0f0727353ebd2b44774
        Validity
            Not Before: Apr 13 10:01:49 2025 GMT
            Not After : Apr 14 10:01:49 2025 GMT
        Subject: CN=ddee7c1834e71c2d1c8237ee65879ed7e658361a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f2:bf:45:ee:e5:96:d6:a2:9b:d4:ab:b7:40:
                    aa:e6:8b:76:70:56:89:fb:1f:ab:96:a4:a6:c3:65:
                    47:74:6c:1e:cd:db:63:8d:dc:8c:ea:91:b3:1e:ea:
                    31:a5:a3:d6:de:4d:8a:90:58:9f:f3:d6:72:01:bb:
                    80:a0:75:2f:e9:e6:4e:ec:78:08:ee:57:9e:d3:c9:
                    38:cb:42:6d:3d:c8:f9:1e:d4:87:05:af:f7:ff:a9:
                    80:81:08:5c:1d:6a:a9:d6:29:ef:3b:fb:05:36:81:
                    2e:f9:ef:47:0c:1d:f5:f1:e7:69:29:2b:a4:4b:52:
                    f8:32:32:12:20:4e:72:57:43:b1:e9:30:09:fc:8d:
                    37:d4:73:53:e4:e2:33:7b:3a:84:a7:7c:eb:73:0f:
                    0d:0d:6a:ce:f4:15:e8:09:4f:19:9b:9d:7f:2f:fb:
                    5b:b4:4d:66:fa:ba:9b:73:39:a2:52:83:38:d4:bd:
                    f5:a4:51:7c:c9:37:84:6d:28:83:39:55:11:f1:05:
                    dc:b4:f0:4b:21:34:9e:c8:aa:8c:c0:8e:ca:c5:49:
                    d8:da:4b:58:c4:2e:0b:c3:10:6d:a1:90:1f:4f:c8:
                    e5:e7:84:bc:44:3c:1e:30:68:28:4e:d1:1e:f1:8c:
                    c9:a9:d6:66:bf:9e:7e:02:88:5d:86:12:9d:6d:91:
                    a0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EE:7C:18:34:E7:1C:2D:1C:82:37:EE:65:87:9E:D7:E6:58:36:1A
            X509v3 Authority Key Identifier:
                keyid:93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ac:7f:bc:3b:31:87:6b:fe:96:11:26:e1:75:17:48:d8:e5:
         ab:62:29:8e:9d:dc:06:e6:8f:88:e9:47:25:3e:5e:2b:1d:f6:
         52:82:c5:97:64:9a:e6:fc:d5:0e:81:57:8d:12:93:c2:8a:61:
         17:9a:83:f8:68:f9:32:d5:4e:8f:c4:4d:9a:ae:f7:5e:8f:ae:
         2b:67:c6:10:fa:30:a8:cd:b8:d4:4e:cc:ed:85:70:c5:c4:ef:
         70:bf:e3:b5:84:0c:52:f2:dd:ee:0b:96:52:46:fb:e5:92:e4:
         0c:39:b0:5f:0a:fa:d7:14:ec:b8:da:bb:ae:46:1a:92:93:aa:
         c7:9d:34:df:1f:51:9c:fd:b5:b2:bd:cc:e0:ca:14:d7:83:98:
         66:b8:3e:6d:ef:f9:d8:b1:5b:de:2f:14:ed:9a:97:3e:3b:96:
         80:84:a2:0f:fc:30:f9:f9:e3:d9:f0:4a:00:f3:ec:42:53:8a:
         9b:1d:fd:84:1b:3d:71:bc:71:32:f4:62:49:c9:3b:6e:e2:10:
         67:29:f7:f8:5f:c8:74:fa:d3:d9:86:ee:e0:a7:01:54:85:b0:
         bb:a1:2d:fa:6b:e8:08:a6:2e:4d:cd:dd:f3:05:08:b6:01:39:
         7f:8f:14:46:dc:e5:48:75:41:56:47:73:eb:59:05:8e:68:40:
         d3:a0:e7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----