Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
File:                     j5h_qG-uztjKekRir38AXqsneag.mft (raw, json)
Hash identifier:          JmYUfmyzO8BgLShq+oHxUPMV3c8Bn/Mrp5H8/mtotKc=
Subject key identifier:   14:CC:4D:BA:61:3F:8F:BC:75:A3:31:BD:AD:7A:CF:BD:E7:92:10:5F
Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
Certificate issuer:       /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Certificate serial:       01962ECFC29486EA6E71ED8802D6C707206D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
Manifest number:          0BCB
Signing time:             Sun 13 Apr 2025 11:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:29 +0000
Files and hashes:         1: TZNlzSisEozO9bUPt3Ymc1srv8E.roa (hash: wa8v9NsgWL1gYj2sgVAPeIrXdGt5FFoRvprZhnIr4yo=)
                          2: j5h_qG-uztjKekRir38AXqsneag.crl (hash: hHxSpR2wNMeeuMHVr2O9qlSLnuREuwn3SI128eD0rF4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c2:94:86:ea:6e:71:ed:88:02:d6:c7:07:20:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
        Validity
            Not Before: Apr 13 11:01:29 2025 GMT
            Not After : Apr 14 11:01:29 2025 GMT
        Subject: CN=14cc4dba613f8fbc75a331bdad7acfbde792105f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8a:0d:7c:c8:50:89:7f:41:74:4c:b6:c4:6d:
                    18:ea:4f:71:48:9b:95:bf:66:50:47:dc:04:74:67:
                    d3:1f:cc:de:8e:0f:f4:33:68:85:8e:1c:85:a3:ad:
                    5a:4e:28:a6:e5:30:c1:59:7a:c5:92:2a:c1:75:be:
                    c9:5f:e1:5e:4e:1c:be:9d:d7:ad:54:ac:99:75:9c:
                    dd:0f:fb:10:6a:e6:7d:b9:4f:f5:69:ac:6c:13:d6:
                    3d:bb:d6:08:9b:02:9a:95:8f:09:eb:9b:8e:6b:3d:
                    f1:30:84:d1:02:cc:68:ee:9e:e9:2d:55:50:bf:10:
                    cc:b2:b1:32:5b:4c:02:70:38:f6:9e:ce:95:2f:38:
                    a2:9d:95:19:3b:59:3f:d6:eb:5a:41:7e:b7:a3:4f:
                    41:04:cb:e4:cc:68:03:af:89:53:68:02:94:02:77:
                    ac:34:74:eb:f2:43:ac:0f:55:5f:80:36:c8:e0:85:
                    16:94:15:4d:ef:99:70:13:63:11:cb:53:5f:e8:06:
                    b1:8d:a8:62:37:29:0f:ed:81:07:2f:f4:fb:af:71:
                    bb:b2:26:02:09:79:4b:d9:9a:e1:af:8b:2b:20:90:
                    da:18:84:4a:c5:51:43:d4:e9:d3:fe:4d:b6:18:8d:
                    f9:1d:e0:11:ef:6b:26:8f:ee:46:f0:44:3f:5b:fe:
                    80:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CC:4D:BA:61:3F:8F:BC:75:A3:31:BD:AD:7A:CF:BD:E7:92:10:5F
            X509v3 Authority Key Identifier:
                keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:a5:39:ad:49:e1:b4:02:e6:a9:8f:d1:b6:34:08:8e:f9:07:
         15:3d:64:4e:e7:fe:61:f4:65:60:10:36:64:44:63:53:c3:31:
         c5:ea:cc:bc:42:20:50:c1:85:16:47:24:bc:8a:35:fa:df:3e:
         6b:42:6d:ef:66:e6:9d:6d:18:86:4f:b8:54:f5:f0:c4:bd:24:
         98:cb:ca:73:33:29:5d:99:98:93:79:0a:cb:3c:78:68:91:d9:
         11:e2:fe:8e:4d:e8:21:04:71:08:7e:1e:79:7c:79:a8:7a:6b:
         dd:bd:11:91:80:34:c4:c7:ec:b6:f6:2e:de:b7:c3:cd:ed:03:
         05:85:40:31:90:69:9c:5e:c7:a7:21:32:4a:48:cb:ed:3b:b1:
         06:35:22:61:76:df:d5:98:d5:0d:6e:ed:33:00:b7:48:f3:0a:
         8b:a5:f4:a7:f4:60:5a:b8:3b:f7:96:b0:83:1a:4d:c5:f5:0e:
         fd:a3:ea:e6:ec:15:d7:6f:b5:be:6e:b2:db:ee:99:34:b1:f6:
         53:21:a1:37:20:cd:5a:7f:a1:37:58:28:59:28:7b:7a:0b:8c:
         ca:68:17:0b:4a:9c:0b:b1:07:fb:78:42:51:8d:1b:9e:ad:88:
         49:79:77:8f:58:09:57:b7:66:28:06:8c:0c:7f:8e:b2:60:02:
         9e:c8:1a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----