Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
File:                     JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft (raw, json)
Hash identifier:          qHBPT0B66Igi5F0Ex0ytxEc/GLB6t4teP2H1nG+BH4g=
Subject key identifier:   96:65:24:F4:84:13:C1:6E:D4:1E:EB:70:2D:0F:C7:29:5E:FC:7D:EA
Authority key identifier: 26:F9:88:8E:73:DE:E7:CB:5C:DC:FD:93:B2:62:8F:BC:10:A3:E9:0B
Certificate issuer:       /CN=26f9888e73dee7cb5cdcfd93b2628fbc10a3e90b
Certificate serial:       01962F745634C9EC8C96F374A6158E5F2001
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
Manifest number:          0BCA
Signing time:             Sun 13 Apr 2025 14:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:15 +0000
Files and hashes:         1: JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl (hash: Bu76XQ8TJgJXiWdCvrb5ANy0/p9peppL5m59Ytd/CXA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:56:34:c9:ec:8c:96:f3:74:a6:15:8e:5f:20:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f9888e73dee7cb5cdcfd93b2628fbc10a3e90b
        Validity
            Not Before: Apr 13 14:01:15 2025 GMT
            Not After : Apr 14 14:01:15 2025 GMT
        Subject: CN=966524f48413c16ed41eeb702d0fc7295efc7dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cb:2b:3e:fd:1b:a4:cd:0b:34:68:08:e4:56:
                    d0:b8:4f:f5:bb:39:7b:c2:b7:1b:f5:47:4f:18:84:
                    ba:1d:89:a2:54:7e:02:e0:f3:22:b8:e8:0a:03:d0:
                    b2:46:b5:7e:43:70:de:e4:92:7c:47:4a:a3:a9:b2:
                    9a:d2:af:12:d3:e7:8b:f5:5f:10:5d:4a:e9:0d:c5:
                    06:07:42:38:55:6d:40:ad:4d:d5:0d:87:97:92:46:
                    ac:fa:9d:04:b8:17:36:33:c3:de:6d:20:86:82:ff:
                    38:29:64:87:d7:05:59:10:91:68:b5:af:1c:38:fb:
                    b2:27:d0:bc:65:ee:ee:02:94:1c:62:85:16:16:55:
                    58:a5:ad:c6:17:a6:23:f6:63:1b:5b:c1:a9:17:7f:
                    93:f0:72:5d:62:bf:ad:00:e3:87:6b:f3:37:0d:f2:
                    dd:7d:7d:eb:ff:c9:a0:1c:43:ee:20:7e:3f:fd:3b:
                    51:ac:28:a3:9d:66:25:31:f2:d9:01:8b:c9:38:a7:
                    b6:1e:c6:5f:8d:21:83:ff:82:c1:aa:43:9c:c5:56:
                    ec:8b:13:82:b4:bd:56:f6:5b:17:b6:f8:84:a1:d2:
                    45:7f:21:c2:3b:10:55:63:11:90:41:d4:60:45:b7:
                    9f:31:63:c7:3d:5e:9f:7a:b2:53:88:51:ae:56:23:
                    d3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:65:24:F4:84:13:C1:6E:D4:1E:EB:70:2D:0F:C7:29:5E:FC:7D:EA
            X509v3 Authority Key Identifier:
                keyid:26:F9:88:8E:73:DE:E7:CB:5C:DC:FD:93:B2:62:8F:BC:10:A3:E9:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:6a:a7:58:67:ee:43:b4:22:39:f7:b1:44:08:74:6c:87:8b:
         44:8a:86:02:e6:cc:4c:73:f6:c8:7f:d8:ae:8c:c2:d0:3c:25:
         8a:0e:7b:a7:14:48:87:79:2b:72:92:3c:34:7d:83:12:58:82:
         df:e3:0f:83:a4:df:88:9e:db:79:f3:5d:a1:b7:6b:39:20:8d:
         68:1c:f9:57:95:3a:90:e9:e7:2f:6b:f2:c7:4c:18:a6:bc:90:
         92:d3:e3:6a:dd:58:1a:ce:43:8f:2d:85:98:75:87:72:7e:72:
         17:40:6d:64:83:5b:27:6e:8c:5c:3d:b6:da:12:ed:0f:8d:ed:
         b0:78:a7:12:95:a1:22:31:da:66:93:3e:49:b2:01:09:94:65:
         01:40:05:21:a8:d9:46:49:32:c1:b8:cc:f5:b9:68:07:8d:c4:
         30:04:ca:58:a2:2f:db:f2:66:19:ad:59:be:7e:4f:66:67:83:
         c8:1f:4d:8c:89:f9:ca:da:e2:8c:19:6f:04:05:7b:71:bd:f1:
         02:a3:ec:86:1b:6f:24:49:69:87:aa:73:72:0e:3d:6a:5c:f9:
         45:ec:05:7e:2a:ec:d8:41:6f:a2:d7:68:9a:d9:7b:a3:1e:c0:
         b3:00:d1:71:2c:de:c2:e7:f8:01:e5:e6:5c:0a:73:4a:1e:a0:
         24:4b:17:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----