Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
File:                     JqsqOMqsDOPKAf24f9-WNy6FmLY.mft (raw, json)
Hash identifier:          ln/eIj8krSKp8IwF3ODfVbK4PBwgA+wJCPfsgH1TOs0=
Subject key identifier:   CE:EB:87:38:3F:89:6D:6F:F9:1F:9B:19:82:D7:E1:7E:20:B5:FC:42
Authority key identifier: 26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
Certificate issuer:       /CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Certificate serial:       01962E2ADCEAB9E0592BD86D0455F2B5EE0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
Manifest number:          1441
Signing time:             Sun 13 Apr 2025 08:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:23 +0000
Files and hashes:         1: JqsqOMqsDOPKAf24f9-WNy6FmLY.crl (hash: Ax4+rcPzQYXIHkOjWIHlobE7fbjShRw40o4uwFhhj7k=)
                          2: XNhLOVC-U9PPbLs6JsyzlnimIeQ.roa (hash: TD1akY3Fv3FxGktdYVS/WFPDKVHSuXmTFj0vHfZKIvo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:dc:ea:b9:e0:59:2b:d8:6d:04:55:f2:b5:ee:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
        Validity
            Not Before: Apr 13 08:01:23 2025 GMT
            Not After : Apr 14 08:01:23 2025 GMT
        Subject: CN=ceeb87383f896d6ff91f9b1982d7e17e20b5fc42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:49:41:17:74:8a:50:99:49:69:59:37:ee:ea:
                    6b:e2:b3:c6:0a:18:98:b0:2d:70:17:a7:24:a4:35:
                    e2:92:53:f6:34:f8:52:96:1f:52:39:0e:69:38:fe:
                    9a:37:da:2f:eb:95:45:d5:ce:c3:e6:a2:c9:6c:5f:
                    99:d8:4a:fc:e3:34:d3:74:f0:2a:27:28:d4:7a:12:
                    21:2e:a0:75:5c:0a:b1:fb:7c:d7:59:34:b1:4b:d9:
                    e3:78:c3:c9:a4:e5:50:42:13:38:b6:a5:77:94:1d:
                    01:6e:67:32:d6:3d:2e:98:08:d0:05:84:b9:48:10:
                    55:8c:91:4a:39:6e:2e:39:ff:d7:19:47:cd:1b:cc:
                    01:de:91:a1:13:16:c4:e3:8b:93:6c:a9:b1:49:c4:
                    aa:5e:88:3b:d3:b0:11:e4:30:c8:a9:0a:e4:e1:4d:
                    84:41:33:f3:bf:1b:bf:e7:e6:a2:c2:8c:1b:e0:2c:
                    3c:ea:29:9e:e6:c3:4f:53:9b:18:ed:49:c2:91:45:
                    48:11:14:18:c9:78:9b:f8:43:62:13:96:85:5b:18:
                    78:d6:7c:67:47:3c:70:d4:2e:0e:b8:70:2e:18:9b:
                    56:9d:2c:ed:2d:e4:c3:48:8a:ee:77:2b:de:c5:c9:
                    44:fb:c5:28:be:aa:7a:38:c1:36:97:0b:ff:78:13:
                    12:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:EB:87:38:3F:89:6D:6F:F9:1F:9B:19:82:D7:E1:7E:20:B5:FC:42
            X509v3 Authority Key Identifier:
                keyid:26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:1f:71:8c:3a:80:3d:3c:cd:65:2d:1c:e8:46:e9:60:84:4d:
         be:83:0f:64:7c:0b:23:10:62:89:f6:ad:f6:74:bb:3f:3c:76:
         b2:7b:26:a1:55:00:44:18:be:7f:d7:52:15:18:9d:79:25:3f:
         fa:5c:22:8d:85:7f:b3:70:ba:93:68:b3:96:ee:6e:b8:bb:a4:
         72:76:d7:ef:95:5a:8a:f9:50:ed:e6:98:45:8c:a9:8f:d0:a9:
         6a:1f:9c:39:2b:12:8e:09:33:59:bf:60:4e:7c:03:19:f7:65:
         68:b8:65:14:26:99:13:b3:e3:21:b9:8a:86:35:37:5e:b7:80:
         ed:cc:f2:2c:0b:4e:ab:ab:11:1b:96:21:2e:d5:7c:84:56:ae:
         08:f2:55:6e:91:02:09:5a:88:cd:45:c2:37:4d:c6:cb:02:36:
         32:bb:bf:4f:a6:4f:e4:62:7b:e2:4c:6a:75:17:a9:04:93:bf:
         aa:7b:b0:f4:10:e3:f1:0d:7e:5d:8d:61:c9:55:e1:a7:bb:91:
         82:5d:50:da:be:43:09:d0:35:61:99:d9:5a:d1:9b:f5:06:cd:
         d0:1e:79:39:bf:9d:c0:8c:cc:62:1e:89:60:62:c3:b2:42:be:
         28:dc:57:2a:ce:b2:b9:8c:d5:73:0e:22:f7:d2:dd:2c:10:29:
         1e:2a:0e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----