Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
File:                     JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft (raw, json)
Hash identifier:          2km20PsU5PjPPFHNKP/sa/98OJaL92tRT1Ip6HaTmWE=
Subject key identifier:   3E:B4:8B:E6:2D:36:31:55:DD:EB:4D:92:FC:28:83:D9:A0:59:10:32
Authority key identifier: 26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B
Certificate issuer:       /CN=26427a260d6d96cc1115ccce8a914affb0e1d16b
Certificate serial:       01962E2AF21D85507871D1CD1ABA5A292FC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
Manifest number:          0212
Signing time:             Sun 13 Apr 2025 08:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:28 +0000
Files and hashes:         1: HRacqG8l3Hf7zAmCVCG0P5KOMS4.roa (hash: POwtAYxNl5+u6y8FOiGiNGLuMGWBIZsQmYKWLa6++Q0=)
                          2: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl (hash: 7A2Dl4idgpurbHh5+derHjLUmln0rm+T/eLsqOyClSY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f2:1d:85:50:78:71:d1:cd:1a:ba:5a:29:2f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26427a260d6d96cc1115ccce8a914affb0e1d16b
        Validity
            Not Before: Apr 13 08:01:28 2025 GMT
            Not After : Apr 14 08:01:28 2025 GMT
        Subject: CN=3eb48be62d363155ddeb4d92fc2883d9a0591032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:87:d1:65:b8:e9:54:97:6e:04:8e:65:69:d3:
                    b5:9b:47:f9:9a:d4:69:08:00:64:f5:0a:2a:68:13:
                    0d:08:36:b6:11:f9:2f:fc:a7:5b:75:3f:98:9a:45:
                    32:9b:1a:27:9e:a9:89:67:33:a6:74:cc:91:cc:2f:
                    8f:c7:79:64:9e:de:90:45:5f:a2:47:be:ec:2d:49:
                    f5:71:08:ef:20:b5:52:81:03:74:12:21:b4:92:56:
                    87:fd:1d:10:4c:0b:4d:7d:9e:e0:37:9c:7b:5e:19:
                    98:0a:6b:91:e9:7a:27:67:5b:52:22:91:8e:18:66:
                    7b:8c:f4:c0:be:ae:2f:89:da:80:5f:6d:06:3c:3e:
                    9f:62:99:ae:99:49:e2:69:37:2e:dc:7c:cc:1d:d4:
                    84:f9:f0:1d:d1:73:d3:97:43:d3:19:af:8c:aa:83:
                    89:65:92:4a:f2:65:91:f9:12:0d:5f:1d:f6:3f:cb:
                    3c:8c:91:ae:80:e9:f0:f9:0f:7b:a7:51:db:2b:84:
                    23:5a:f5:34:80:67:6f:0d:7a:96:77:e0:c3:18:e3:
                    18:62:fa:2b:b8:e1:57:4d:41:5b:36:4a:d6:e1:c8:
                    c6:00:13:ab:aa:fa:6c:15:db:20:3f:8c:10:e5:90:
                    09:78:cf:5f:d2:74:ba:37:0f:fe:cd:71:97:38:83:
                    32:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B4:8B:E6:2D:36:31:55:DD:EB:4D:92:FC:28:83:D9:A0:59:10:32
            X509v3 Authority Key Identifier:
                keyid:26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:2c:5d:04:9c:f6:2a:cf:45:5b:9e:a2:bf:8a:0e:f9:ef:bb:
         6a:8b:61:ae:ba:de:30:94:db:8f:bd:08:0f:b6:97:79:d1:64:
         d5:56:20:4a:86:df:10:3f:bc:b2:5f:6f:2d:67:b0:18:4f:7e:
         5a:3a:79:72:05:fa:9f:52:74:24:93:9e:66:d7:14:cc:b4:a7:
         ef:03:10:d6:b5:7f:24:20:e9:82:5f:98:ea:27:1b:c0:7f:3d:
         84:7d:e9:56:06:cd:26:0d:19:85:1b:04:07:ec:6e:5d:e7:74:
         34:cb:6e:45:1d:7e:30:4e:8d:d3:5c:09:bb:73:91:f0:e1:18:
         c0:fb:5e:20:54:34:4e:bb:41:e1:e1:ff:07:85:f7:3f:e6:cc:
         2e:0f:5c:61:8e:ab:68:75:a2:7f:ef:09:93:91:22:06:69:24:
         c7:0f:33:b0:40:8e:e4:db:37:0d:d1:95:69:02:b3:ee:de:7a:
         34:86:ca:3b:b2:4b:9b:90:33:b1:a4:a9:ee:b4:c9:04:be:98:
         b3:7b:93:bf:2c:b7:5e:0f:39:3b:22:c2:c9:2d:a5:5f:56:c5:
         f4:52:5e:86:4f:60:70:0c:9b:fb:fc:b9:36:e8:ac:ca:a6:a7:
         5e:e2:89:3f:e8:24:e4:f6:05:7b:d2:96:49:d8:c7:28:c7:fc:
         8f:7c:98:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----