Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
File:                     itJAYD7G681i9y1G8dwAy34fCy4.mft (raw, json)
Hash identifier:          rQuzz2JalWa/7048JLVyxizhB8yY61EU6aRJe1fDE0M=
Subject key identifier:   D6:B3:2B:09:7E:40:A8:69:4D:B1:EF:07:D9:D4:2A:74:23:F1:99:CF
Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Certificate issuer:       /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Certificate serial:       01962E98A41A7621F6DA6B2FAC898CC4A408
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: 53I3Xwp10sSBL-xtc_jqMRAMZEE.roa (hash: 5EdJdIMmiKFhoj2g+ghy+33i5Mlz/mFCHlU2tz6Caf0=)
                          2: WIThVUQPtnkqQGydyKr4DwKXGUc.roa (hash: ZG07WmGePqEgXeU18ulf3ZqT0pP1PSE97ftBth4OPug=)
                          3: WcvcGB5_rIhp6N6ub_yEOU1frVM.roa (hash: SAdoS4J2d6uhrm3KFzHcrPvgGi6wPamf1S8poWnS5sg=)
                          4: cJgTWrMWwO4cBqHTiI8A-Rbr9t4.roa (hash: +22ciZigEHHnJmjL2vAXhnyOPmbAxXckxCOmW9W102s=)
                          5: itJAYD7G681i9y1G8dwAy34fCy4.crl (hash: DSvQgWQ77082qAQOh9zsCWaS5e6X35lnHWnjmXxNS28=)
                          6: pOdO9Se2ice1mi6CizmcbokQTm4.roa (hash: vWI5ZOqTV/1a1r4zGntVeUM1tDGMCfxq337Ldn/5HXA=)
                          7: rD1DyuXlotr5xosPSyeJDExCkk4.roa (hash: vqY5iQLurSqfXlXZ7xp9Cs7NZG2x1ohqMIKv8p8BnDM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a4:1a:76:21:f6:da:6b:2f:ac:89:8c:c4:a4:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=d6b32b097e40a8694db1ef07d9d42a7423f199cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:15:d9:17:a3:f9:5e:ba:17:af:74:39:93:78:
                    51:a6:85:a4:8c:48:81:26:db:7d:8a:43:b0:fd:f3:
                    bb:4d:75:16:53:b3:ea:65:52:3c:49:bf:11:60:85:
                    1b:ac:25:1a:91:73:77:bf:46:74:ff:76:33:4b:12:
                    96:f0:36:83:bc:b0:ca:5c:5a:e9:57:62:e7:4b:db:
                    42:2f:62:7e:40:fc:5e:e5:90:cb:85:dd:8b:d7:d1:
                    58:44:1a:ff:5b:56:52:b1:6b:7f:9d:b0:22:f7:db:
                    cd:8b:1d:b4:39:bf:65:93:3d:2b:86:1e:97:5b:78:
                    0d:29:25:20:e3:06:2d:f7:5d:e2:d9:5e:12:41:6d:
                    00:4d:51:42:cf:bb:eb:59:71:f6:37:23:ef:c9:a0:
                    4e:50:33:0e:34:6a:64:1e:b5:21:a5:32:5a:4f:51:
                    cf:c8:2c:d9:61:25:e4:5f:ab:57:0d:0e:92:7c:db:
                    ba:aa:55:e1:e4:5a:a0:55:fe:a5:b4:ea:72:ed:63:
                    7b:af:b1:30:41:56:ec:9c:c7:08:f0:1d:92:2b:b5:
                    03:43:63:17:e9:17:09:d2:0b:25:2c:3c:1b:80:fe:
                    7b:71:db:40:ba:03:d9:6e:dc:d8:8a:41:b8:e6:75:
                    a0:66:a9:76:d6:ba:55:7d:2e:43:e4:70:f4:2e:a5:
                    5a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B3:2B:09:7E:40:A8:69:4D:B1:EF:07:D9:D4:2A:74:23:F1:99:CF
            X509v3 Authority Key Identifier:
                keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c8:4b:c8:29:6b:e1:48:11:53:bb:4d:b3:b1:01:68:a8:a0:
         90:9c:8c:e9:df:ee:e7:c3:3e:48:be:2b:df:8c:92:6b:04:e8:
         8e:8e:b3:34:4f:40:27:47:89:b0:ac:dd:d8:1a:d0:2a:14:ec:
         38:d5:42:57:c8:74:cf:53:a2:a4:3f:c0:c9:fc:e1:47:bd:dd:
         b0:2b:7e:56:e0:e0:51:e5:ac:73:a2:6e:50:47:f7:36:43:0b:
         92:1f:83:9e:02:7d:10:3e:5b:c5:81:98:a6:2b:06:ee:a3:5a:
         77:9e:64:a8:4c:c5:e6:d4:f9:38:6b:0c:d7:e2:b5:a5:2f:69:
         b7:02:36:16:8c:d4:cc:d9:66:19:b6:48:85:dc:08:68:4f:a1:
         48:e0:e4:b2:4a:11:8a:57:bc:5f:0d:fc:7d:ec:e4:dd:d3:59:
         f5:6c:ea:de:7a:94:be:53:25:d2:16:86:b4:7f:6d:16:8f:6d:
         1d:a1:ee:2d:35:90:47:ad:23:21:78:fc:a0:23:46:e2:29:74:
         66:7b:37:7d:94:4a:9d:4e:18:90:7b:3a:c9:02:e3:0c:9d:44:
         91:a1:6e:a2:09:be:f9:fa:6b:48:77:9f:48:39:fc:35:03:62:
         4a:a0:36:8e:67:2f:ec:5f:79:95:3f:4c:1e:6f:a0:28:ec:8d:
         0b:53:6a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----