Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
File:                     J84emmUiYWqzCw8SPgnTBagjBK8.mft (raw, json)
Hash identifier:          aGAWEYahqVh/UsX67vHK6XXcwPaEE2Qg/LRA/PRT4rE=
Subject key identifier:   2D:53:61:60:23:E9:4D:78:BD:69:AE:06:7B:97:E0:24:6B:FD:C9:2F
Authority key identifier: 27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
Certificate issuer:       /CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Certificate serial:       01962E2B081577134ABAB9C92FD446ED191C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 08:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:34 +0000
Files and hashes:         1: J84emmUiYWqzCw8SPgnTBagjBK8.crl (hash: o/LS/Tl+g4+nl53xiA+EmhVkeG76jtrBuGJz2Ug8sW8=)
                          2: WgYDhL0i6U8cqNQpr57kES37q38.roa (hash: RKIGt1CKlAHIm7PDdsvYymoW20pcRCPFEmrAdn3vZno=)
                          3: xfeGCbXD-YF0qFrPXVL_VBgsViY.roa (hash: +QvSz3wl8pHqddA2o6rF3CbvD6JrTHLlFmQPhouhbbc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:08:15:77:13:4a:ba:b9:c9:2f:d4:46:ed:19:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27ce1e9a6522616ab30b0f123e09d305a82304af
        Validity
            Not Before: Apr 13 08:01:34 2025 GMT
            Not After : Apr 14 08:01:34 2025 GMT
        Subject: CN=2d53616023e94d78bd69ae067b97e0246bfdc92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0b:1a:fe:57:2f:6a:50:f2:4a:72:6e:b7:b1:
                    10:3b:41:88:32:a4:12:8b:2c:47:bc:dc:ef:31:cf:
                    ec:3c:da:97:56:72:cf:c8:36:89:6c:da:da:c7:20:
                    40:a1:e3:b0:40:68:a8:0d:b5:17:5b:23:8a:91:04:
                    64:dd:2d:e3:85:b6:50:af:3c:4e:df:3f:e7:01:f2:
                    1a:ba:a0:02:87:09:62:f1:0a:75:90:d5:24:3f:d7:
                    fe:4d:97:68:1f:e8:86:f6:e6:16:12:8b:59:2e:b4:
                    9f:b0:0e:96:a8:4b:7a:a5:4a:cd:6f:0d:fd:51:52:
                    22:d8:ae:70:a2:33:5d:b7:3d:94:4e:a2:bb:2e:3a:
                    85:e3:05:f4:17:f8:fc:8b:a8:71:3e:8e:53:2d:12:
                    26:1c:98:aa:42:dc:01:6f:3b:ce:d7:0c:50:8c:98:
                    bf:e6:d4:23:7d:f0:16:41:77:bc:02:ef:8e:40:dc:
                    c3:ee:4e:e8:23:c0:43:1f:6b:dc:c6:a5:2d:85:c6:
                    fd:af:bd:93:be:2e:76:a4:7d:4e:41:8a:c7:4d:56:
                    39:61:dd:ca:14:a9:e0:28:7d:72:46:bb:cc:63:b8:
                    96:ce:24:d7:86:50:f6:52:f9:f7:b8:02:70:8b:55:
                    d4:ee:ae:c9:61:19:ce:7d:96:2b:d4:ae:e6:98:67:
                    e0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:53:61:60:23:E9:4D:78:BD:69:AE:06:7B:97:E0:24:6B:FD:C9:2F
            X509v3 Authority Key Identifier:
                keyid:27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f4:2e:c6:50:0f:16:18:6c:1b:ff:60:9a:bb:df:7d:6f:72:
         2c:bd:34:5e:a8:00:2b:35:fa:79:ce:2b:59:ee:ed:24:40:29:
         d3:93:0d:df:77:b5:17:74:df:7b:fd:48:96:21:0c:4d:fd:aa:
         46:ae:c2:ab:af:4e:02:b6:ce:89:47:37:f7:94:f6:3d:73:89:
         3c:76:a5:13:78:16:16:9d:f7:7b:63:9d:0d:c9:6d:78:5c:a6:
         54:8f:97:4d:be:28:bb:50:ba:b3:61:8d:b8:71:90:5b:ae:36:
         79:a3:4c:ec:2f:bd:24:64:54:62:e3:3c:f8:6c:40:ed:4b:55:
         a6:95:71:57:05:76:c7:8d:cb:91:e2:0f:00:61:42:3d:bb:ff:
         db:b0:f4:9b:13:d4:b5:e8:de:40:2a:f2:a7:3c:b0:72:d5:a2:
         7b:8f:c5:97:e2:c6:c1:46:a7:9d:8c:e2:13:f9:5b:d0:ee:ed:
         31:95:ea:09:cd:a4:cd:0b:7a:88:dd:17:a1:52:3b:0c:fc:d2:
         f9:5c:71:42:f2:41:57:23:9a:55:84:f0:78:e4:85:5b:71:7d:
         de:0c:cb:a2:78:b2:96:a5:61:e0:dd:8f:ce:37:f6:4d:15:84:
         b8:7f:cf:c3:f0:e9:49:36:f7:af:ee:c3:2e:39:77:47:3a:fb:
         17:fa:53:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----