Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
File:                     J4YXdA7NlbcE2pel-eU8AxFEQms.mft (raw, json)
Hash identifier:          apHGL48O03Zfrn46kBnl5W5Ai56EuvCy5K5LnDqIz54=
Subject key identifier:   09:1F:3C:2F:2B:50:4B:D4:C3:1D:AD:02:B5:98:7F:06:59:36:69:DF
Authority key identifier: 27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B
Certificate issuer:       /CN=278617740ecd95b704da97a5f9e53c031144426b
Certificate serial:       01962F746BC4AEA1F7010703FD82B536F2C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
Manifest number:          1093
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: J4YXdA7NlbcE2pel-eU8AxFEQms.crl (hash: YIhmRPAJDgfRpRRGNehQoFx6H+yAki7U8wAv8H1DVvk=)
                          2: hmlDPtU43ODpSbSwKm7b72QgfNg.roa (hash: yhUDh7b541QuzocbLv67rZZ0JwDcRkg1md4GPfBmUpY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6b:c4:ae:a1:f7:01:07:03:fd:82:b5:36:f2:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278617740ecd95b704da97a5f9e53c031144426b
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=091f3c2f2b504bd4c31dad02b5987f06593669df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:17:d8:ce:39:a7:39:70:2d:ad:b8:ee:e3:bf:
                    64:4f:35:e1:f3:06:33:d2:00:84:c6:b3:05:4b:a3:
                    74:3d:4e:b8:26:15:87:d0:08:d3:d7:0d:ac:a3:a3:
                    bf:29:ed:32:60:e5:4d:66:75:1e:e6:50:f5:51:b3:
                    85:cd:e6:29:7a:05:82:78:3c:ce:3f:79:19:5b:29:
                    3b:44:85:65:db:ad:33:2a:32:25:39:9a:54:1d:84:
                    d3:0a:59:0e:32:cc:03:ff:a5:ee:22:16:f4:32:cb:
                    04:5b:14:17:c1:64:c0:90:72:9b:43:4f:d6:80:8d:
                    f9:0f:67:4d:63:35:ad:9e:9f:29:0f:93:81:17:9f:
                    d7:f1:f6:99:71:74:ae:da:55:77:78:42:9b:51:ca:
                    a3:9a:52:95:86:83:ce:22:2c:41:af:77:38:a6:02:
                    fd:b3:f0:c6:d1:b2:0e:e4:8f:12:75:15:b9:91:ca:
                    e6:43:89:8b:5c:a2:10:01:0c:f8:e3:48:0d:41:4e:
                    c8:42:ec:b4:78:0b:e5:8d:98:4c:f2:23:8d:f5:9c:
                    10:68:5a:9f:41:e2:cc:0f:7a:47:b5:65:25:c7:15:
                    65:5b:0b:b8:34:65:3c:97:00:d1:68:12:20:2f:13:
                    2a:5f:d5:bd:e5:a2:2c:25:81:82:35:00:c2:62:d0:
                    b1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1F:3C:2F:2B:50:4B:D4:C3:1D:AD:02:B5:98:7F:06:59:36:69:DF
            X509v3 Authority Key Identifier:
                keyid:27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:11:41:9c:c1:28:88:ec:f8:e2:9c:fd:ce:bb:98:9d:c7:16:
         4b:7b:69:3f:eb:de:58:86:a4:eb:7a:af:ce:13:e8:88:53:8e:
         f1:d2:8e:1b:c8:fc:1a:ff:75:31:63:23:2e:c3:6f:a4:56:bf:
         d8:76:b8:11:68:bb:c3:e6:ca:04:16:42:87:f4:06:11:28:48:
         7a:14:f2:c7:ee:38:a9:25:96:36:c3:19:8a:67:c0:a8:f5:3e:
         e5:85:63:70:a3:95:87:79:c6:a2:00:af:30:00:58:7d:ea:ae:
         36:61:f7:58:76:ea:9d:cd:38:de:07:2f:ad:31:e6:1b:f6:fe:
         f9:bf:0b:4e:c4:90:e1:6e:55:02:83:89:ce:7a:b7:2c:17:4b:
         42:6e:29:8d:26:d0:9a:ef:21:41:ee:12:8d:23:82:92:04:69:
         53:87:49:9e:bc:26:b6:68:14:fd:3c:87:79:f3:9e:dd:78:d9:
         67:11:d4:70:cb:ef:28:27:47:bd:43:ad:f9:44:a1:c8:ef:75:
         c5:1e:8a:bc:83:bb:b7:99:c9:73:9b:39:6c:86:df:39:d5:20:
         c6:81:78:32:6b:29:91:5e:a4:5f:41:d3:a2:b3:a9:7e:c1:f0:
         16:b5:75:0d:53:1f:a8:3c:0a:c4:28:24:22:23:d4:b4:7d:e2:
         f9:39:16:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----