Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
File:                     JXdsd_jr5wlMoAes4anAv9wrOuw.mft (raw, json)
Hash identifier:          XzqS9mtMYxqo0gazOyoG6cTxMSyP7lVQ/GocYA/fGWQ=
Subject key identifier:   DF:E5:F8:32:00:F7:D8:0D:AE:88:12:DD:F1:53:0A:E6:3A:3F:B0:D1
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Certificate issuer:       /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial:       01962F0714C40DA50695B7A97CE66FC6FD74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
Manifest number:          1230
Signing time:             Sun 13 Apr 2025 12:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:55 +0000
Files and hashes:         1: 3vNWcma8J3Yvm292bxcQMk9IMAg.roa (hash: 9vjWGwLIurMfDLhl3LmcOyaHZd6c7cfwMEUeIRekeL8=)
                          2: AIXPYVOLD4vG7-idW3xSmEYba3M.roa (hash: 0OO+kwQPJqN6G5I1BOBQWzk/kW2juMQTjTkhmJKwZ20=)
                          3: JXdsd_jr5wlMoAes4anAv9wrOuw.crl (hash: IxF8lfEIYwrE07hAuNZePSYAMcKSuD/HuIsAmPZHoro=)
                          4: Um1PZhGXZ7KzU5zkJ2mBWgRYing.roa (hash: r8yw/kx6PR2QiDWv/zH9T6r2Gmbp9EAyZ7zdCGmWEQY=)
                          5: YhneglxU-YMRltelD3FSRlJ3Zwc.roa (hash: Ncwlfcg8RLjA+nxHVjFBtQFwEe7HoERaw1MC4MeS+rw=)
                          6: hkaTE_7fhGUYELRP9AaJ9bAo5bk.roa (hash: KOzsqvok3H5PfVWyF9U8nn9XFXetQgaoM4WrEbmzfjU=)
                          7: iDjdph5PLZc9UolFIQRqVji6vII.roa (hash: iBRRjrv+DLQQpa8QabPAetjWPrtLGlWJ6l98+13EMEw=)
                          8: mUfMEaQY8q1gZSjzSxi9XIGiseQ.roa (hash: gaddKtYUZyG4gzalDVZzomDqdepgC8Jfd8AVgvRc31g=)
                          9: sF1coaLwpjJ9ERbX0K6NN9sGsfY.roa (hash: yKfJfqMuiWBIftmEax6OGMuhlaUME2Z3bSqwXVLFaTk=)
                          10: vk6LGZMNcC3KaiIa5C3dnYSKUhg.roa (hash: 7Gr8EYP5E5UsMRFGLJUElOUxKJpCvyrgvk2k+QyN1AE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:14:c4:0d:a5:06:95:b7:a9:7c:e6:6f:c6:fd:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
        Validity
            Not Before: Apr 13 12:01:55 2025 GMT
            Not After : Apr 14 12:01:55 2025 GMT
        Subject: CN=dfe5f83200f7d80dae8812ddf1530ae63a3fb0d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:8b:65:73:e9:7d:4d:79:b5:a2:49:b7:a4:f4:
                    3b:55:57:53:50:d6:49:89:3b:70:fb:82:f8:bc:dd:
                    73:d6:b5:26:4f:f7:fb:07:4a:1a:f0:d2:f9:c1:8e:
                    be:79:14:fc:40:1b:d6:f0:09:34:1c:03:08:41:ee:
                    bd:99:8b:db:6d:1e:c6:45:aa:c2:0d:8e:41:2d:62:
                    f3:3a:0a:fb:fe:bd:2a:c0:27:77:b1:b0:76:2f:b9:
                    2f:3e:43:c4:fc:45:59:61:45:75:95:69:9c:33:33:
                    7e:54:22:80:85:c0:66:49:e3:7c:5b:18:8e:38:9f:
                    e7:bb:ea:e8:b3:5a:2e:e7:42:c4:dc:26:4d:70:5d:
                    20:54:e8:ce:9f:0d:cf:15:c8:9a:ad:3d:b9:d8:0c:
                    cb:ad:68:c5:f8:0b:71:7f:c6:d0:93:43:7d:09:5a:
                    7a:af:46:d0:8b:27:bf:3e:24:fd:e9:55:1e:c9:a7:
                    7b:d1:73:8f:b4:35:6e:3c:f0:c6:b4:48:7b:e0:c0:
                    77:d0:41:d3:55:5e:64:5f:5e:b6:1b:e2:d9:75:91:
                    6f:19:b2:4d:09:24:5f:78:79:f8:a0:86:ef:f2:27:
                    3a:6c:c0:e1:c0:90:d3:19:e3:e8:7a:cf:9e:15:83:
                    89:66:61:ff:b3:2d:23:ea:e8:83:73:d7:a8:2a:f4:
                    55:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E5:F8:32:00:F7:D8:0D:AE:88:12:DD:F1:53:0A:E6:3A:3F:B0:D1
            X509v3 Authority Key Identifier:
                keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:0c:61:7e:f1:26:21:3b:23:07:b6:f4:6d:cb:70:e1:cf:9c:
         96:15:33:92:3b:bc:22:4e:d4:49:39:65:21:33:3b:f0:65:e5:
         30:93:f2:e5:22:7a:6d:1c:68:c2:c2:7a:38:cf:76:37:68:b9:
         c1:a8:a4:0a:72:2e:c2:d1:7a:92:47:90:6d:82:d9:7d:61:b1:
         67:86:e4:e7:87:70:73:d3:da:7b:5e:4a:98:c0:06:3b:da:90:
         09:fc:53:4e:19:cc:b5:9a:e5:62:41:93:aa:4b:55:36:cf:ce:
         16:66:fd:ac:4c:8b:55:14:61:36:c5:0b:4e:fd:a4:d3:5e:f5:
         a4:cb:80:83:00:dc:fb:25:c2:a1:0e:27:55:c5:90:50:3b:a6:
         28:58:f9:6e:9c:82:d5:e8:55:a2:5c:e9:71:fc:15:7e:55:05:
         af:50:64:e2:4d:9b:91:b1:c1:23:6c:50:e4:0a:02:94:49:d5:
         7c:f0:63:74:8a:89:2a:ea:e5:87:39:04:df:5b:be:50:43:e6:
         4a:9d:a2:b2:d0:cc:5b:9c:00:2b:d8:a0:3d:f5:69:75:68:ed:
         2e:68:04:5b:e1:c0:38:a0:a6:e5:96:f0:3d:16:90:d3:28:ce:
         f2:61:a8:d2:a8:ad:05:4c:a8:31:cc:1e:af:b9:9e:c4:f0:ec:
         ed:2a:95:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----