Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1e6c54-503c-4b55-93b5-a094ddea0c1a/1/JXeLID17zGSpYNx9FsghEodAFlI.mft
File:                     JXeLID17zGSpYNx9FsghEodAFlI.mft (raw, json)
Hash identifier:          ToBUN7UNwYC3cEMNanJ2u+VaFNmaFSLxf+W0J+4iefE=
Subject key identifier:   A0:7E:93:7A:18:A2:95:8B:E3:49:20:DA:E8:C6:7F:03:EB:C7:09:BC
Authority key identifier: 25:77:8B:20:3D:7B:CC:64:A9:60:DC:7D:16:C8:21:12:87:40:16:52
Certificate issuer:       /CN=25778b203d7bcc64a960dc7d16c8211287401652
Certificate serial:       018F28AA5174E07E0493D6AB63CF7CF2762A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JXeLID17zGSpYNx9FsghEodAFlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6c54-503c-4b55-93b5-a094ddea0c1a/1/JXeLID17zGSpYNx9FsghEodAFlI.mft
Manifest number:          0827
Signing time:             Mon 29 Apr 2024 07:03:21 +0000
Manifest this update:     Mon 29 Apr 2024 07:03:21 +0000
Manifest next update:     Tue 30 Apr 2024 07:03:21 +0000
Files and hashes:         1: JXeLID17zGSpYNx9FsghEodAFlI.crl (hash: ANQWrQoI8FxdansiDjvCZjEWBMMN9ISsuK/t64lG5oQ=)
                          2: rhtLkO1LgxwQ6A05seAeay51QnI.roa (hash: TzK2JqoYXIl73ds2WIdt1+Y5YJUlqJYFpxc7qe162mE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:28:aa:51:74:e0:7e:04:93:d6:ab:63:cf:7c:f2:76:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25778b203d7bcc64a960dc7d16c8211287401652
        Validity
            Not Before: Apr 29 07:03:21 2024 GMT
            Not After : Apr 30 07:03:21 2024 GMT
        Subject: CN=a07e937a18a2958be34920dae8c67f03ebc709bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:83:47:50:33:6b:39:62:a5:14:21:fd:61:f2:
                    6e:26:cd:31:4b:33:fc:2a:57:88:63:ef:2f:80:d6:
                    b7:66:36:f7:79:6b:4e:dc:66:22:aa:c8:3b:08:7f:
                    26:82:7f:1e:64:84:27:8d:f5:47:e2:e0:fc:e5:79:
                    93:1e:ac:58:0a:82:be:03:97:28:1e:42:3e:a6:95:
                    3a:ae:b6:eb:73:21:36:79:26:34:f3:78:a4:cf:39:
                    ce:18:79:52:6d:73:ca:6a:18:ff:93:b1:d5:c4:ef:
                    00:60:5f:a3:92:7a:92:6d:40:ff:e0:b4:a7:43:25:
                    82:87:66:e2:ae:8d:17:94:c2:c9:68:f9:8a:75:2d:
                    2e:e3:7d:9b:0c:c3:d0:c9:9d:21:5f:b8:e9:df:5a:
                    a7:59:f3:0e:e6:e1:c9:f5:a5:8b:e0:de:68:02:9f:
                    d5:e5:bc:4d:33:a5:93:13:b3:01:bc:f3:63:b7:bc:
                    7b:4f:19:7a:4f:4c:df:bf:40:b0:a6:80:63:28:89:
                    cc:2a:d8:8d:1a:5b:3c:fa:bc:4d:bf:70:91:38:52:
                    4f:42:b7:16:37:e1:9f:94:e5:f5:a4:fa:f6:5f:f6:
                    96:de:7f:34:3b:50:3f:fb:b2:5c:d9:2d:f5:ec:7f:
                    6a:6f:a2:89:9c:1f:79:12:39:42:9c:22:19:06:c5:
                    3c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:7E:93:7A:18:A2:95:8B:E3:49:20:DA:E8:C6:7F:03:EB:C7:09:BC
            X509v3 Authority Key Identifier:
                keyid:25:77:8B:20:3D:7B:CC:64:A9:60:DC:7D:16:C8:21:12:87:40:16:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXeLID17zGSpYNx9FsghEodAFlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6c54-503c-4b55-93b5-a094ddea0c1a/1/JXeLID17zGSpYNx9FsghEodAFlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6c54-503c-4b55-93b5-a094ddea0c1a/1/JXeLID17zGSpYNx9FsghEodAFlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:76:22:f0:71:c3:43:b9:6d:e2:48:c5:44:33:07:28:c6:ff:
         da:81:40:0d:b8:00:4a:8e:c5:08:49:ef:f2:48:8c:8e:74:bd:
         4f:02:cf:74:93:21:bc:4a:9d:21:87:82:43:83:e0:ce:2f:33:
         d2:80:f8:59:e6:a3:cc:d2:b7:d6:44:f6:ba:a4:61:fe:2b:b0:
         49:23:ae:6b:c0:7d:de:8f:98:d9:39:81:51:92:4d:e9:86:d0:
         a7:e3:e9:ff:6d:6e:46:ff:66:b1:f3:f9:91:98:3a:dc:1e:52:
         38:d2:02:e6:b6:eb:4e:e4:e5:62:47:e5:8e:58:64:d1:44:a4:
         e4:a4:8d:4a:62:c6:2e:02:51:65:8d:d4:60:22:46:19:2b:99:
         22:23:aa:a0:9c:55:c4:42:0d:f4:8a:7c:da:2e:1f:fb:4e:20:
         f9:d2:48:e4:fd:1b:69:8c:02:b8:93:63:69:18:44:79:71:ec:
         f3:80:d5:cc:26:85:8b:d9:c2:31:90:16:86:3a:ef:41:6d:71:
         2a:6b:1d:c0:ab:a4:2b:c2:fd:90:8d:8a:cd:f0:52:c0:4b:83:
         0f:5b:cc:41:41:ac:f1:5a:2d:20:f4:51:71:ea:3a:46:80:df:
         1e:fe:67:2d:3f:66:a3:64:92:b2:a4:77:d8:de:13:fc:a5:17:
         36:39:27:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----