Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
File:                     JBOjQZZ67b5SqLEcecsTkRpKn3c.mft (raw, json)
Hash identifier:          fJnUaarCMKHqBEfAvj8IVzNgeyAQHjRfDvdQiLV5TDc=
Subject key identifier:   F8:9D:7F:A8:0A:97:88:50:E0:71:92:40:93:18:7F:FF:A6:FD:42:03
Authority key identifier: 24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77
Certificate issuer:       /CN=2413a341967aedbe52a8b11c79cb13911a4a9f77
Certificate serial:       01962E99AA39AB50009F6229B14ACDBAB78D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:02:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:24 +0000
Files and hashes:         1: JBOjQZZ67b5SqLEcecsTkRpKn3c.crl (hash: Sc2okXXKU5VuK7fzvs32p/qRu2A4VTO7cgaBh6g89P0=)
                          2: Q9tpjWUnZ29Md-50Kxu_HQRQ-Mk.roa (hash: zHTjqQivC3Wds3ZRsFbwTssRdBvxgxtLcNo5p+QkSKE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:aa:39:ab:50:00:9f:62:29:b1:4a:cd:ba:b7:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2413a341967aedbe52a8b11c79cb13911a4a9f77
        Validity
            Not Before: Apr 13 10:02:24 2025 GMT
            Not After : Apr 14 10:02:24 2025 GMT
        Subject: CN=f89d7fa80a978850e071924093187fffa6fd4203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:37:fe:81:3c:b0:4f:76:f5:a3:f1:ca:ad:08:
                    d1:db:8c:b3:a3:56:91:f1:82:90:f1:06:24:e2:31:
                    f5:38:3f:97:3d:36:ef:52:14:8b:19:5f:6a:da:0e:
                    5b:8c:0e:11:ea:9e:6b:88:c2:fb:4d:db:f2:92:4d:
                    de:af:3c:7c:02:cd:7c:bc:8c:eb:0a:4f:05:78:5d:
                    a9:06:cf:dc:e4:5c:1c:02:45:ae:ee:d8:d1:65:2b:
                    e4:02:df:df:82:84:c8:04:19:87:b9:81:27:92:48:
                    13:70:31:ea:76:be:a6:71:b8:9a:9d:27:97:0c:c2:
                    8b:5f:80:5a:e3:eb:45:43:c0:50:9e:40:5b:b7:ef:
                    a7:8e:bb:55:11:bf:f5:fb:fb:09:9f:b5:71:90:57:
                    02:49:ac:bd:9c:e7:8a:6f:59:b0:b4:8e:9b:a1:3a:
                    23:24:8e:8d:a1:f7:9b:1d:19:de:b0:f2:a8:4a:f0:
                    b7:f5:34:0b:ff:cc:a3:c4:7e:a0:4f:98:c5:35:55:
                    d9:be:a8:91:91:71:0e:f2:e0:d5:bb:1d:23:8b:c2:
                    ac:89:92:c2:c6:1e:62:e8:f2:38:b4:90:02:72:ee:
                    46:30:ce:ca:e6:88:04:ac:e1:77:05:22:f5:3c:8d:
                    63:b3:5e:ac:93:37:60:d3:36:19:4d:62:c4:ef:67:
                    79:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9D:7F:A8:0A:97:88:50:E0:71:92:40:93:18:7F:FF:A6:FD:42:03
            X509v3 Authority Key Identifier:
                keyid:24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ac:35:87:18:73:62:c5:da:16:16:d8:98:9f:b0:00:2a:e5:
         ce:0d:5c:ae:39:0b:21:7c:d8:2a:d4:c8:aa:07:dc:ed:c6:64:
         e1:6d:51:54:b8:9d:f9:ab:b7:e4:6c:29:15:5a:99:c9:24:16:
         21:bf:6a:f6:b4:22:01:e5:40:cc:36:96:d7:88:df:9f:2e:2a:
         0d:7b:8e:d1:7f:72:46:46:ea:44:24:96:89:e5:f7:68:0c:a6:
         ad:a8:c5:3e:9e:6c:59:d1:9d:52:03:ae:8a:7c:b0:12:a5:0b:
         6e:0d:a3:e1:75:b2:3d:ca:8b:94:ca:94:30:43:10:b9:1f:7d:
         f3:c9:c4:be:79:ff:74:b2:df:de:b4:37:ce:c5:52:86:af:99:
         14:5f:31:39:9c:ba:1f:61:78:23:69:86:84:85:38:f4:cc:c0:
         70:a6:ab:1a:bb:3e:d4:f3:6f:ab:80:1c:86:80:52:c1:70:07:
         21:e6:72:82:d4:a2:00:82:6e:fe:fe:8a:d2:b3:c6:b0:96:44:
         f7:d4:0c:03:fc:7b:bf:e4:38:ff:37:24:8e:66:db:64:c0:1b:
         93:1a:88:dd:29:7b:3b:78:68:2c:ea:eb:e3:77:4a:ef:78:87:
         ee:a6:6d:46:e7:67:3b:a8:20:c1:58:7a:74:43:18:fa:36:37:
         46:9a:74:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----