Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
File:                     JegnfR_qtSOH6rJvjcypJgwlij0.mft (raw, json)
Hash identifier:          84BAlNhGGGsoJ8f9Jh9m5syM/9THDBJ+HUV28WhRf0k=
Subject key identifier:   2B:B5:73:E2:C0:C4:70:0D:23:F2:A1:C6:F6:35:C4:29:AE:25:4C:48
Authority key identifier: 25:E8:27:7D:1F:EA:B5:23:87:EA:B2:6F:8D:CC:A9:26:0C:25:8A:3D
Certificate issuer:       /CN=25e8277d1feab52387eab26f8dcca9260c258a3d
Certificate serial:       01962ECFC0D49072952093F93CF71F478D71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
Manifest number:          07F0
Signing time:             Sun 13 Apr 2025 11:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:29 +0000
Files and hashes:         1: JegnfR_qtSOH6rJvjcypJgwlij0.crl (hash: Dp1InEnAeZfWNect8PRHr8lc43CV7iqXIj8hcQm+5zI=)
                          2: QJ-q4jY57XBPftq8mgfLyBux4KM.roa (hash: pgWu6jyyJTF/Q2y1mtLzh6qQQVUyFCHc0G6KZW7xtps=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c0:d4:90:72:95:20:93:f9:3c:f7:1f:47:8d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25e8277d1feab52387eab26f8dcca9260c258a3d
        Validity
            Not Before: Apr 13 11:01:29 2025 GMT
            Not After : Apr 14 11:01:29 2025 GMT
        Subject: CN=2bb573e2c0c4700d23f2a1c6f635c429ae254c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:97:80:9d:2e:7e:65:31:f8:7a:9d:d0:30:19:
                    9b:d9:ab:57:dc:1f:f7:29:eb:95:b1:39:c1:e9:34:
                    9d:8c:a7:2b:6f:a7:5c:53:5f:3e:d3:11:b6:e9:a7:
                    84:33:69:44:e7:00:f7:5b:8b:b8:bd:9b:7b:01:ba:
                    36:7d:ef:5a:76:8a:f1:e2:e7:51:45:c5:1f:eb:c6:
                    48:fe:0c:99:37:d0:99:f7:d3:d0:c0:75:74:9f:d4:
                    08:c9:e2:55:ed:f5:0a:50:0a:2a:91:db:61:2c:7c:
                    10:89:61:ac:8d:46:dd:c5:d6:33:b8:61:c8:db:94:
                    2a:1d:13:ec:71:60:17:43:4e:d3:a4:e8:18:dd:ec:
                    79:de:42:30:db:07:0e:95:f3:29:cd:e8:8b:a5:da:
                    a9:10:83:78:ea:c5:00:4f:9f:7e:43:27:4a:e1:2e:
                    b7:92:39:ff:03:24:0f:e2:15:49:f6:34:4c:42:5c:
                    a6:ed:4f:69:a5:6a:d6:51:05:e1:1d:72:f1:8c:70:
                    d5:eb:9d:bb:0c:58:a0:43:24:46:12:98:6d:ee:6a:
                    5f:fe:28:c3:24:d4:57:31:76:5d:85:34:98:6c:4e:
                    73:ff:c8:a2:5a:f2:a2:a6:ce:c9:b6:0d:34:01:3f:
                    58:88:aa:26:89:0a:22:8f:d8:5e:c0:a5:36:dd:fd:
                    0b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B5:73:E2:C0:C4:70:0D:23:F2:A1:C6:F6:35:C4:29:AE:25:4C:48
            X509v3 Authority Key Identifier:
                keyid:25:E8:27:7D:1F:EA:B5:23:87:EA:B2:6F:8D:CC:A9:26:0C:25:8A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:00:dc:94:96:e2:f4:55:38:09:1a:19:af:63:06:bd:d4:24:
         fc:52:59:0c:09:ac:95:75:bb:55:4d:d2:79:d0:c0:2f:9b:d0:
         9a:99:03:85:1a:2c:27:20:54:01:f4:61:76:11:59:b3:c7:e5:
         13:03:29:df:a9:fc:50:2b:73:4c:18:5e:aa:79:d9:b2:bd:a1:
         74:ff:59:cc:9a:09:75:a1:6c:35:8d:84:4c:dd:65:96:06:b5:
         fa:51:10:b5:a6:b5:85:5d:04:e9:44:cd:c0:04:0f:46:fe:b0:
         ac:54:e3:80:4a:93:01:bf:38:dc:7a:6b:c8:87:b7:d6:75:90:
         08:ee:3e:07:d9:72:3c:27:60:8d:e3:ee:7f:49:a4:f3:a9:f4:
         56:a5:b8:0e:31:c0:90:26:26:68:57:b4:92:c8:7b:bb:90:6c:
         1b:9e:24:11:f5:a8:36:da:6b:74:2e:03:00:09:79:c3:4e:5f:
         26:d8:08:3a:81:61:d1:25:22:ef:90:18:80:c0:0f:a2:b6:ed:
         5c:8b:a4:bd:0e:19:b7:1a:fe:87:52:37:6f:13:8d:ea:da:6e:
         b4:45:a8:be:7d:8c:bf:a7:fb:7e:82:1f:ce:2b:4b:5f:af:5c:
         3d:71:df:9b:66:15:23:85:1e:8b:2e:97:d7:82:2f:b3:b3:c0:
         eb:2e:69:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----