Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
File:                     JKX0o6fsZAySNFB5lMDGXyji_Fk.mft (raw, json)
Hash identifier:          YIR9C9jWNXbUxv9BUUMW9jCRWX9U1ciY5XsZX6ph8vk=
Subject key identifier:   04:15:21:63:44:F2:03:77:CC:B4:12:57:9B:44:BD:96:99:C4:B0:48
Authority key identifier: 24:A5:F4:A3:A7:EC:64:0C:92:34:50:79:94:C0:C6:5F:28:E2:FC:59
Certificate issuer:       /CN=24a5f4a3a7ec640c9234507994c0c65f28e2fc59
Certificate serial:       01962E989732CDA736A0AEF32A265D9A7E00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
Manifest number:          1268
Signing time:             Sun 13 Apr 2025 10:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:14 +0000
Files and hashes:         1: JKX0o6fsZAySNFB5lMDGXyji_Fk.crl (hash: jVSTInJZz99ApTJ1Q1pRq2q+kUM9bjsqkexNCgxzk/0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:97:32:cd:a7:36:a0:ae:f3:2a:26:5d:9a:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24a5f4a3a7ec640c9234507994c0c65f28e2fc59
        Validity
            Not Before: Apr 13 10:01:14 2025 GMT
            Not After : Apr 14 10:01:14 2025 GMT
        Subject: CN=0415216344f20377ccb412579b44bd9699c4b048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:83:ac:2a:43:19:af:78:71:03:72:11:e4:f5:
                    52:70:ed:38:ac:90:66:45:68:22:cd:5b:26:ef:4e:
                    e9:bd:f4:01:ab:4b:a6:af:7a:a3:27:4f:3e:d8:70:
                    03:b6:85:0d:ac:37:e4:8a:78:7e:1e:11:67:c3:f6:
                    0b:50:a7:c9:dc:f2:06:9b:b8:75:b8:54:1b:76:fd:
                    b5:e6:19:27:85:f6:ce:88:18:e4:a8:31:54:43:78:
                    9e:eb:32:61:4f:b3:be:7c:ab:b7:ad:0f:83:25:96:
                    09:ac:18:7f:bb:88:29:1e:28:bf:71:fb:06:6f:e3:
                    6b:5f:6b:91:27:0c:07:f0:f3:88:af:b7:d5:73:ca:
                    af:ea:17:d1:c8:a9:b8:2d:b3:72:45:c2:fc:bb:32:
                    b6:e4:2c:e2:04:52:5e:61:3b:a9:20:e1:c2:4e:48:
                    69:73:78:df:3d:cf:1a:34:29:0c:90:0a:e5:23:92:
                    22:c1:ba:5a:1b:ce:24:3e:22:91:65:64:f8:ca:a7:
                    56:25:5a:98:62:64:76:e6:88:e6:19:41:c8:96:03:
                    8d:45:3b:0e:19:46:73:80:a7:69:19:0e:88:d3:ff:
                    09:a8:23:78:e6:b2:77:96:b3:ac:99:55:33:a1:5b:
                    05:5f:13:39:32:2d:f5:46:b4:69:e3:bc:b2:f7:09:
                    89:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:15:21:63:44:F2:03:77:CC:B4:12:57:9B:44:BD:96:99:C4:B0:48
            X509v3 Authority Key Identifier:
                keyid:24:A5:F4:A3:A7:EC:64:0C:92:34:50:79:94:C0:C6:5F:28:E2:FC:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:04:f6:32:cd:c3:35:a1:fb:17:f5:13:4f:19:27:ae:fb:ed:
         7b:19:03:67:85:c4:37:6e:b8:46:a5:72:74:a8:32:f0:07:aa:
         ee:6c:07:75:69:32:a8:4b:c9:f0:52:53:a4:8a:de:d3:20:63:
         81:00:7a:3e:8d:12:73:2e:a0:33:c6:e2:b6:eb:57:ea:f7:e8:
         88:f8:de:b2:a9:cf:c7:ba:50:08:73:ca:e4:98:88:dc:b8:ed:
         c8:d2:93:7e:71:38:93:1d:73:13:c4:02:45:c2:28:32:e6:1e:
         fb:eb:50:81:2b:3e:fa:e9:a0:b3:9f:c5:0d:f0:c5:d5:ce:30:
         a5:f3:67:4f:34:96:70:91:1c:60:0e:82:55:62:97:0a:c3:60:
         6f:02:6f:0e:da:f9:d1:87:77:96:1b:eb:d9:75:65:f8:a7:2d:
         ec:85:10:5e:4c:33:70:d5:5c:80:d7:53:26:94:24:50:6e:eb:
         ee:ec:c7:98:5d:22:d0:2f:03:19:fb:af:62:95:74:ce:f8:c8:
         06:91:39:b1:d5:75:e7:d5:dc:87:50:60:cb:99:55:f6:11:66:
         8c:9d:2a:b1:30:21:47:54:99:82:f9:dd:51:8a:31:1e:02:95:
         52:5d:16:33:ed:cc:95:40:08:22:20:9d:15:c2:9f:56:22:c7:
         f2:0a:fe:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----