Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
File:                     JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft (raw, json)
Hash identifier:          c/ZlaaePklMFgmAP8amJB/ReV1kOoz69Mw3InOprEEc=
Subject key identifier:   D3:74:42:B9:93:E4:7C:19:08:01:ED:94:35:8F:73:D8:5D:31:8A:B8
Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
Certificate issuer:       /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Certificate serial:       01962E61CFD13C58DC56B2D66556AA289FF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
Manifest number:          03B0
Signing time:             Sun 13 Apr 2025 09:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:24 +0000
Files and hashes:         1: JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl (hash: 0LBxpK94zftXy17EJMoDGuS3YEButITtpU3Ll2KpBSs=)
                          2: hRPI0iSGl2IzeA7QH3Szt11HLAA.roa (hash: PPwH27Sg7uIDGa5QbdK7/mYmLXCSL9d4CnlOhCXOspw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cf:d1:3c:58:dc:56:b2:d6:65:56:aa:28:9f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
        Validity
            Not Before: Apr 13 09:01:24 2025 GMT
            Not After : Apr 14 09:01:24 2025 GMT
        Subject: CN=d37442b993e47c190801ed94358f73d85d318ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:94:76:29:8c:fc:69:6a:10:62:f3:c2:67:ef:
                    10:46:94:17:46:a9:ea:1b:8e:c0:b2:80:fd:3d:9b:
                    d5:6c:c8:a8:95:e1:bf:5a:cf:5f:43:e0:10:8c:85:
                    63:d7:c4:47:ac:81:e5:ae:85:ed:e9:29:1d:cb:ea:
                    1e:2e:db:fb:75:17:f4:e2:d3:19:3d:26:3e:cb:d6:
                    d6:7a:05:09:ee:6d:9c:fa:21:9a:a1:da:ef:95:a2:
                    d5:32:7c:1b:80:74:af:37:5e:66:ed:55:51:30:09:
                    23:13:81:17:a6:f0:c2:5f:06:0a:6a:8f:06:10:87:
                    48:03:cf:cc:91:c5:60:ac:7e:bb:3a:61:6f:09:5f:
                    35:0e:d0:91:97:69:33:80:21:46:ff:56:37:d7:5e:
                    98:df:a9:ec:76:50:ac:dc:d9:df:be:33:01:78:8a:
                    b8:28:4f:c8:12:c6:78:a1:9e:9d:7f:77:75:f3:b0:
                    4d:aa:87:0e:e8:ec:31:f4:f8:de:82:96:cb:ed:ec:
                    e4:a5:43:23:eb:9b:66:b3:6d:f7:01:fb:ae:ea:b6:
                    d8:64:0b:94:7d:4c:da:a8:92:55:00:a3:78:e7:c5:
                    49:8d:25:16:61:db:a5:06:6a:9e:60:fd:b4:bb:8c:
                    bb:e9:8e:c9:d1:8e:ce:8b:e9:8d:88:49:8d:da:a5:
                    2d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:74:42:B9:93:E4:7C:19:08:01:ED:94:35:8F:73:D8:5D:31:8A:B8
            X509v3 Authority Key Identifier:
                keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ed:82:35:1b:dd:5c:df:b3:1c:d4:cb:1c:f5:a0:96:1a:58:
         35:cb:3f:e1:0b:dc:f4:87:62:b2:04:6d:99:83:bb:3f:4a:f4:
         33:38:2f:26:8c:de:3a:1d:02:e0:f7:5c:0d:ae:5e:8d:41:1a:
         08:7d:fc:f8:20:7c:9d:59:2d:a9:40:75:c8:b4:97:c4:70:96:
         ee:d9:11:b2:38:d6:9d:5e:be:f2:be:06:73:89:81:64:95:e4:
         11:c9:a1:fb:82:3c:3a:6b:2d:38:92:6a:14:c7:c9:12:4a:d8:
         a5:ba:89:31:43:78:e5:60:7e:8a:c2:22:fa:9a:fc:29:4a:d5:
         8d:fc:27:5e:91:e0:a2:68:c6:0b:cc:6d:2c:41:76:42:e4:e6:
         d1:96:ab:2f:54:28:c8:4a:af:3a:16:42:78:10:e7:b3:81:2e:
         ed:b5:c0:bf:09:a7:10:a0:b2:7a:25:4b:5b:c7:41:ec:cc:6b:
         0c:0a:30:ac:4b:46:69:8f:ae:5b:57:ff:c3:95:3f:a3:6a:c8:
         5e:ad:9d:95:c9:74:a5:98:6d:bf:20:5c:9b:d8:51:69:4e:2e:
         0e:9d:8e:46:78:4c:f5:0c:30:a7:8c:81:9c:7b:25:11:ec:6d:
         ee:8c:36:4c:70:bc:96:11:dd:8f:b6:7e:2b:c2:48:59:5c:cb:
         18:d6:2c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----