Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
File:                     JFKrHS0pusnVLrR53mTAcA_Gck8.mft (raw, json)
Hash identifier:          78NxU3OeYBQR8rFoyknMIMQUa7aA+fUBA2s7iD5nBAk=
Subject key identifier:   E5:FC:AB:E3:B9:0B:EA:0B:74:83:75:62:2D:B8:B8:8D:9A:3C:F4:1B
Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
Certificate issuer:       /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Certificate serial:       01962E989F6F963B180EF9A135DCEE82DA10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
Manifest number:          1245
Signing time:             Sun 13 Apr 2025 10:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:16 +0000
Files and hashes:         1: JFKrHS0pusnVLrR53mTAcA_Gck8.crl (hash: 0JoX1/mn8lM0XFZYSYbZYzow4I9qTpfdXB5T5N+ygI8=)
                          2: dr_w0m7Qv5ACMERXy8HC4D9ni94.roa (hash: HJDBt0N6ByEOqOCbXR7DjS91OIQ79dZMS46KwGzNDI8=)
                          3: t_n8d9oI1aH-bEIOwJVaWHaCJBg.roa (hash: zQKAJ7WWLqDL9BuKcs6iIJKFW7l+LUz0khsopSEliO8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9f:6f:96:3b:18:0e:f9:a1:35:dc:ee:82:da:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
        Validity
            Not Before: Apr 13 10:01:16 2025 GMT
            Not After : Apr 14 10:01:16 2025 GMT
        Subject: CN=e5fcabe3b90bea0b748375622db8b88d9a3cf41b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0e:d5:f4:50:fd:75:1f:78:bf:db:e1:de:06:
                    f6:ec:c0:e8:46:55:2d:f7:11:a8:2b:4f:17:1a:4b:
                    5d:39:e6:77:ba:fd:45:80:cf:50:1b:6a:63:18:53:
                    bd:e5:7f:a1:6a:8a:0a:db:61:ec:de:ff:21:52:35:
                    6c:22:15:40:bd:7c:70:56:66:2b:8c:55:66:34:54:
                    4f:0e:b2:4e:78:47:a5:8f:aa:2a:4f:be:88:23:eb:
                    91:91:69:5d:87:c0:a9:36:f8:98:6e:2c:56:54:01:
                    0b:44:9d:d3:43:76:ce:79:5e:3b:78:14:38:e2:6c:
                    9a:c1:c4:e5:be:9a:76:0f:e6:fa:53:83:15:6a:53:
                    03:14:ca:8e:dc:3b:d3:64:a6:7c:cf:f4:fa:4b:bb:
                    c9:cd:bc:5f:0b:a1:08:fc:c2:fc:bc:21:ff:19:fa:
                    23:1c:71:5d:06:73:09:3b:22:6a:cc:13:23:08:a6:
                    c1:f2:a2:9d:fd:a0:0e:df:ed:c4:47:36:ce:e7:12:
                    eb:51:e3:ee:de:53:66:b1:f7:55:44:d4:28:a3:46:
                    40:d1:55:31:ae:00:b6:b6:14:53:3b:be:0c:d6:a5:
                    7e:99:89:bc:d1:a3:b5:47:a6:1b:73:41:6a:f2:bc:
                    50:36:db:e4:81:a9:8f:39:97:43:e8:76:02:25:49:
                    6a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FC:AB:E3:B9:0B:EA:0B:74:83:75:62:2D:B8:B8:8D:9A:3C:F4:1B
            X509v3 Authority Key Identifier:
                keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e0:9a:61:e7:37:0d:98:c6:99:fa:9e:b5:00:92:9d:13:92:
         f6:67:c4:56:d9:cd:13:b9:df:92:75:bf:98:45:83:a3:5d:97:
         7a:94:69:05:dc:72:d1:d0:13:0d:30:6c:99:93:e1:5c:3a:af:
         ba:ae:32:d0:a7:18:be:4a:0e:91:78:67:4e:62:ea:79:fd:1a:
         fb:23:68:68:cd:ad:b5:2d:53:e9:e3:ea:19:ef:e4:b5:a0:43:
         8c:58:b2:9e:d6:26:87:9e:b9:63:bd:02:2d:32:a2:e1:80:d0:
         a6:70:9e:e1:fa:5c:b8:63:59:3f:07:e7:56:a7:5e:f4:3f:b9:
         84:d5:ee:4c:f0:ed:20:c4:d9:71:8a:40:07:e0:5b:5b:05:d9:
         bc:dc:01:99:49:4a:fe:7b:b8:08:4b:ac:bf:6f:2a:b5:27:ea:
         2b:97:c8:59:69:97:cd:1c:ba:fc:e2:75:66:a6:79:b7:fb:a3:
         87:06:63:7a:66:e1:34:41:b3:e2:ec:71:25:60:1e:46:42:31:
         c3:1d:0d:ca:48:c9:be:2b:42:b2:55:71:16:35:c3:19:c3:d2:
         e4:2f:3f:c8:82:14:e5:d0:dc:ae:7b:02:15:86:4e:29:2c:d2:
         66:44:cd:82:9e:42:a0:54:0d:97:40:c1:39:fa:36:c3:26:89:
         93:3b:fc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----