Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
File:                     JsydUAfABYmTKbzuNmMwijfUDq4.mft (raw, json)
Hash identifier:          LrIoDtAqu0DMG3y7HSAR6D/oZp0tCL76c1S7ZZJjN64=
Subject key identifier:   48:31:84:65:28:09:7F:16:E0:4C:8C:76:F8:D8:41:BD:D4:E4:86:95
Authority key identifier: 26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
Certificate issuer:       /CN=26cc9d5007c005899329bcee3663308a37d40eae
Certificate serial:       01962FAB6C09EE30D4D39B427F66941C405C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
Manifest number:          04A6
Signing time:             Sun 13 Apr 2025 15:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:25 +0000
Files and hashes:         1: GBWUujhw8eL9ZQ-pESyjXqFWT28.roa (hash: t+QjroMr63PmLVQ1g3FZpryd+p1Rm7jgWOEl8kpZfl4=)
                          2: JsydUAfABYmTKbzuNmMwijfUDq4.crl (hash: SCuhOTeuSkv3hdks30FCa2StQ8MmfmdhRj9U1QxZTwU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6c:09:ee:30:d4:d3:9b:42:7f:66:94:1c:40:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26cc9d5007c005899329bcee3663308a37d40eae
        Validity
            Not Before: Apr 13 15:01:25 2025 GMT
            Not After : Apr 14 15:01:25 2025 GMT
        Subject: CN=4831846528097f16e04c8c76f8d841bdd4e48695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:98:29:0c:10:c3:0f:9a:93:2b:72:80:e3:28:
                    19:92:38:e3:1b:3f:07:e7:2e:88:63:63:ad:b5:cc:
                    55:df:16:8e:2d:95:44:e3:82:70:4a:73:30:1b:32:
                    8d:10:6e:fa:6c:4b:50:d8:48:52:c6:16:30:43:3c:
                    7b:42:40:da:d1:20:47:d0:19:04:15:b9:7d:a5:67:
                    a8:90:9a:60:71:8b:23:09:5e:ac:03:ef:2c:38:a4:
                    ea:d6:db:48:8b:4f:4c:0f:3d:de:af:77:73:cd:4b:
                    34:e6:1d:0f:09:e8:1a:5b:da:23:cb:9d:f4:93:2f:
                    d7:b4:ba:28:77:89:67:92:f3:86:4c:9f:f9:17:d5:
                    27:52:a6:da:4e:5d:ae:b0:ff:d8:c7:06:5a:94:84:
                    6c:d5:d6:2f:a1:c3:86:5a:a3:dc:87:bb:ee:47:1e:
                    76:35:9d:09:50:4f:80:03:d9:78:f8:e2:ed:b0:38:
                    e5:fe:0d:95:5d:fd:12:e5:6c:d4:e2:a4:d8:5a:80:
                    68:79:8b:b4:6e:e4:6a:60:3f:5c:4c:6d:68:99:d6:
                    a2:f2:5f:a8:4a:12:fb:61:e6:59:83:e8:dc:e1:c8:
                    b5:39:fd:73:a8:7f:06:93:a9:0c:8f:34:0a:72:c2:
                    de:0c:2a:39:f1:45:c2:ae:a7:c3:d7:5b:09:28:32:
                    03:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:31:84:65:28:09:7F:16:E0:4C:8C:76:F8:D8:41:BD:D4:E4:86:95
            X509v3 Authority Key Identifier:
                keyid:26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b4:51:9b:93:4b:71:3a:2e:8a:1d:32:33:8d:50:86:76:54:
         be:b3:d3:9a:bc:3e:63:36:a6:eb:fb:9f:d5:67:6c:66:32:b0:
         10:df:1a:8e:89:d2:00:22:c3:1f:ad:67:27:87:54:1a:d1:3a:
         ee:dc:3b:a7:f9:63:9f:2d:cf:9a:8d:8e:e8:69:57:11:f2:98:
         25:26:f1:a9:e7:3c:09:ec:8e:77:ba:c8:4f:be:12:b3:83:08:
         b6:de:ae:b5:0c:dc:f2:31:97:6d:7d:91:2c:37:b4:e8:19:e4:
         49:a5:ae:25:f6:70:ef:4b:e5:fc:d1:2b:f5:70:8d:5c:bd:56:
         c4:02:53:67:1e:69:79:f7:46:c2:05:fa:02:4b:48:1b:97:13:
         13:48:ad:43:af:fa:8d:8a:60:25:33:a3:46:ec:9e:cf:91:6d:
         31:37:89:85:8b:8c:c2:69:62:9f:08:dc:18:cf:06:b3:b5:2d:
         e6:63:9e:83:f3:fa:76:9d:0d:f7:1c:f0:3b:bf:8e:60:2a:f0:
         a6:a9:d2:ba:2d:14:95:20:7a:ce:26:ce:17:71:61:4d:11:cd:
         ed:e6:ff:20:e4:ad:9d:6c:eb:07:7d:49:eb:23:5b:d7:a8:ad:
         fe:4a:b8:1d:1f:b6:aa:95:5e:19:31:cf:48:03:c1:fa:23:c1:
         82:88:bb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----