Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
File:                     JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft (raw, json)
Hash identifier:          Uq2SAVt09QWCKWs/8TIr9GZHNJU6Lejbrk/ThupO9FY=
Subject key identifier:   FA:1F:E8:AF:E4:37:E8:2D:C7:5E:C5:EB:EC:94:54:D5:78:A8:89:DA
Authority key identifier: 25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0
Certificate issuer:       /CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
Certificate serial:       01962E99C50575FE22EB658AEF129B7293C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:02:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:31 +0000
Files and hashes:         1: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl (hash: 7kvtC7aI2e6hg70DpgvMcHYPHrdhzdexbQ9UsCPWw+U=)
                          2: O7SXZPMFV3Am85txyKq-wzV0mJk.roa (hash: E3gQb/T8VdnvnhmQexSN7n2IkCaiiXjYdA/H9y6oGHw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:c5:05:75:fe:22:eb:65:8a:ef:12:9b:72:93:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
        Validity
            Not Before: Apr 13 10:02:31 2025 GMT
            Not After : Apr 14 10:02:31 2025 GMT
        Subject: CN=fa1fe8afe437e82dc75ec5ebec9454d578a889da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e4:03:59:32:56:e8:ce:15:39:23:c3:22:45:
                    a7:16:5a:c2:60:0c:29:d4:3a:36:04:38:bd:44:a5:
                    8e:89:3e:66:4b:1a:bc:2b:c4:14:ab:3a:30:2e:2d:
                    04:c4:ac:8b:f3:93:b1:fd:cc:df:35:36:27:33:d0:
                    46:8f:81:ee:dc:c5:34:0d:17:ab:48:7e:38:5d:36:
                    d3:8e:3a:69:0d:62:ca:7e:ac:b5:d8:4a:b5:2f:b3:
                    2e:70:2b:95:7a:8b:ca:32:1a:90:58:d2:7a:8f:05:
                    72:ca:e0:6e:ff:eb:42:60:c6:42:5d:93:be:b9:0b:
                    f3:9a:ed:6e:04:8b:57:38:8b:3e:43:c7:0c:76:b4:
                    e4:5c:47:6f:5f:ad:c6:a1:ae:66:24:68:21:2f:3d:
                    05:36:49:8b:ed:0c:5e:ef:a7:0b:ff:01:93:ae:48:
                    35:27:fb:45:6e:99:c4:9f:e3:a1:9f:82:80:cf:18:
                    26:da:7b:50:6a:65:5b:26:ff:dc:62:3e:e0:c8:be:
                    30:a0:de:1a:f4:51:43:26:de:de:e5:3a:bd:38:85:
                    f2:98:1d:35:aa:2d:57:2e:83:7a:3c:35:0d:c7:f4:
                    d6:8e:34:e6:80:2f:aa:f9:ea:bb:cd:f8:24:53:ff:
                    70:84:e6:6c:a8:2a:12:3d:f1:8a:c7:c9:de:61:3c:
                    c5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1F:E8:AF:E4:37:E8:2D:C7:5E:C5:EB:EC:94:54:D5:78:A8:89:DA
            X509v3 Authority Key Identifier:
                keyid:25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:0d:cb:24:6b:3d:02:8c:78:07:22:d6:48:30:8d:b2:28:5d:
         3e:98:81:4d:b6:d8:b8:b4:5a:43:4f:3b:79:20:a5:0c:d5:5b:
         68:23:c7:54:2c:13:2f:d3:df:ee:a0:0e:1b:c2:f9:b6:2a:e1:
         6a:03:f8:df:44:82:48:d2:8c:a3:02:ff:1a:90:a6:c2:26:b2:
         03:ca:dd:fc:72:db:13:1d:25:b2:41:e3:ba:de:98:20:89:c7:
         f8:a3:4e:b6:c5:39:9c:d5:32:54:81:35:85:fb:ff:31:9e:89:
         44:fd:fa:32:69:9f:10:f8:e8:92:52:87:66:52:72:43:24:e7:
         89:be:2d:bb:ea:ea:c1:bd:93:70:d0:50:aa:b1:e7:e9:25:d5:
         15:a4:89:f7:9f:f5:ad:b0:1b:0a:df:2e:22:62:d3:a3:90:d9:
         8a:03:a8:9d:b5:85:75:b3:fa:e1:24:1a:55:5e:31:c5:6d:fe:
         dc:25:35:be:ae:0b:93:06:39:1b:68:c1:b5:ca:e2:d0:df:8a:
         22:73:b9:1c:f3:60:43:91:49:5c:62:60:2f:73:3a:6c:cd:ab:
         17:85:5a:99:a2:1c:6d:86:72:58:23:f0:b1:6f:50:98:a0:21:
         e7:aa:0a:f8:0a:a1:17:f2:2e:da:2b:32:21:7f:b1:c1:2d:ab:
         3b:53:d1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----