Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
File:                     JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft (raw, json)
Hash identifier:          wtOzleEcrwZZLqKs2VQlyvzedUMrcKu3ZhPmL+CGa/4=
Subject key identifier:   46:F3:D1:F3:D7:38:47:CB:0F:F5:31:0D:F3:38:27:56:C4:FD:F2:EC
Authority key identifier: 25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
Certificate issuer:       /CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Certificate serial:       01962E991C22DA519BEE3117A7BE50F556D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
Manifest number:          02BE
Signing time:             Sun 13 Apr 2025 10:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:48 +0000
Files and hashes:         1: JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl (hash: Sz6Utkbs0h4Lu1U+ExiPV7Gh36oq1kJ+4XTnuQQhzm4=)
                          2: K6bM5601EY4aWoYwlB_yWaSAYWg.roa (hash: q1/+kZ6yqPL4e9VCBVnSxVBfdHwsRb33uiurUpP8SWw=)
                          3: Qp56EhXo02rtbXG9bpMugv8X2n0.roa (hash: TyqFIVR8sVZ/spucHhOleEaJbMKaFD4U+qZbekh1SEU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1c:22:da:51:9b:ee:31:17:a7:be:50:f5:56:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
        Validity
            Not Before: Apr 13 10:01:48 2025 GMT
            Not After : Apr 14 10:01:48 2025 GMT
        Subject: CN=46f3d1f3d73847cb0ff5310df3382756c4fdf2ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:39:23:39:1d:64:3f:86:32:db:a5:af:24:da:
                    0e:55:f3:f1:f8:4e:4c:18:46:6a:2a:b6:b9:82:e0:
                    34:b9:61:00:dd:5d:22:ed:d0:c7:7f:4b:11:88:e4:
                    b8:c7:71:a2:20:f6:f5:1c:bb:01:2a:18:48:a1:9d:
                    de:64:24:db:77:04:69:d0:bf:91:e3:52:c8:a8:4f:
                    b9:3a:23:dd:88:0c:26:2d:aa:a2:05:b7:3c:34:a3:
                    13:ae:d1:64:49:e2:81:d4:bf:fc:7d:06:8d:f5:f7:
                    01:39:cc:2e:50:b5:19:0b:01:2b:d4:04:34:1c:05:
                    04:08:8b:50:e2:71:9c:db:c2:29:5b:2f:45:e7:d2:
                    bc:9a:19:14:2f:c3:ed:20:74:5c:2b:93:c9:04:5b:
                    13:07:9b:a0:e0:72:71:7f:b1:4e:39:c8:5e:b1:0b:
                    bd:94:5b:e7:50:ae:8a:ac:01:31:0c:47:e7:0e:8c:
                    fb:86:19:16:15:cd:7f:5a:c3:19:32:ed:a6:09:e6:
                    bd:f5:5b:b9:df:a5:dd:68:90:de:fb:29:64:64:00:
                    a0:04:b9:d0:28:b5:5e:25:cd:99:3b:a7:b4:c1:94:
                    94:30:41:5a:dd:19:6a:95:2a:d6:64:6f:0b:1a:ca:
                    0d:77:48:64:9d:91:f9:cb:9f:a3:be:67:49:79:d8:
                    4d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F3:D1:F3:D7:38:47:CB:0F:F5:31:0D:F3:38:27:56:C4:FD:F2:EC
            X509v3 Authority Key Identifier:
                keyid:25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:19:87:04:e0:8f:69:1b:ed:88:32:dc:94:f3:a5:62:72:41:
         21:a0:88:46:19:16:2b:ef:53:1f:9d:01:5b:96:aa:12:30:13:
         59:c8:6d:56:57:97:b8:1a:5c:54:c0:33:65:d6:2c:41:20:20:
         f1:80:ea:03:09:4f:03:ec:3f:c1:68:a4:4e:ee:45:6a:bc:ac:
         39:b6:38:e8:1b:ae:39:e4:93:a9:82:60:e0:76:ee:09:de:13:
         6d:b5:5b:07:a1:fd:e7:04:54:83:58:1d:eb:25:7a:b4:3e:98:
         18:69:b5:af:00:3d:cf:9d:57:cf:d2:41:a3:cd:18:97:b6:80:
         f2:72:2d:ae:42:a2:58:4c:d9:7a:28:b9:80:f4:82:a4:4d:8d:
         c4:1f:8f:00:64:5e:34:77:ad:fc:9e:4d:24:6f:46:12:97:43:
         70:ff:cd:27:df:bc:9e:98:b6:54:1e:3e:07:32:13:bb:f2:26:
         ba:2a:fc:89:2c:03:2b:b7:cf:1e:04:58:ef:b0:af:c9:78:1a:
         34:83:fe:ea:be:8b:29:13:28:35:2c:1a:24:9f:5e:67:dd:77:
         84:9e:d1:6a:52:aa:ec:a9:2f:07:8a:a2:0b:06:d0:4f:cc:b9:
         c5:9d:5f:93:44:af:5a:91:90:8a:64:68:a2:fd:5d:da:55:41:
         ed:86:f0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----