Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
File:                     jnADx8Z3zDvWhgMXaZKj69AvRss.mft (raw, json)
Hash identifier:          WMvs1bCIiKGiej92bnhg5nBqfEoabh7QGYdKCUPOSOc=
Subject key identifier:   BE:94:0A:DF:56:71:7E:D7:32:05:F7:E0:5E:E4:0A:2F:E9:A9:26:9A
Authority key identifier: 8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
Certificate issuer:       /CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Certificate serial:       01962ECFDA4D1B4FA26B9DD6FC2835B22F39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
Manifest number:          07DB
Signing time:             Sun 13 Apr 2025 11:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:35 +0000
Files and hashes:         1: Ai-_WODQT5gjGDaQ6CXKPNkmTMg.roa (hash: WNvkuBtCgqvZC4hHmC3CVdy2TgQFB8OfoCsx9x6UKkg=)
                          2: jnADx8Z3zDvWhgMXaZKj69AvRss.crl (hash: t5N5/e8m9zZ/ROU7S/TcJ8SBgeX0z9FNHVt/LUS3OPw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:da:4d:1b:4f:a2:6b:9d:d6:fc:28:35:b2:2f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
        Validity
            Not Before: Apr 13 11:01:35 2025 GMT
            Not After : Apr 14 11:01:35 2025 GMT
        Subject: CN=be940adf56717ed73205f7e05ee40a2fe9a9269a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:18:3d:dc:3c:8b:eb:c7:34:5e:17:41:5b:db:
                    91:da:53:e9:82:fb:09:bd:76:c2:81:e2:f5:71:2d:
                    37:04:3a:4b:24:72:a7:b5:6a:c6:7f:bd:c8:41:46:
                    06:37:d2:b6:2c:bb:ed:59:71:bc:5d:be:c8:1b:33:
                    58:f1:0b:56:1c:88:99:26:1c:d3:fc:fd:e5:7b:44:
                    96:f6:2e:a2:27:b4:c2:7a:06:c4:f6:05:21:84:64:
                    a2:ab:d1:5c:03:df:63:ff:bd:ef:89:4b:fa:72:87:
                    ee:06:e0:1d:26:4f:9b:5a:4d:79:f1:3a:2a:9f:bc:
                    79:aa:05:66:0a:ec:6c:fd:3b:ec:34:d6:57:75:b5:
                    24:f8:53:97:bb:16:f6:5e:70:1c:d8:03:11:73:78:
                    74:2c:73:09:96:ba:63:94:2f:89:b6:0c:f7:c4:78:
                    51:e2:51:99:bb:50:b9:71:e0:39:db:03:0b:7f:9a:
                    25:5a:8e:81:24:0f:69:84:0d:45:f2:65:cd:27:4f:
                    01:8a:6f:42:a1:4d:14:c5:4e:f0:5b:c2:9e:f9:28:
                    cb:d3:69:e1:aa:18:bb:f0:33:f2:b9:82:c8:54:78:
                    77:25:1e:4c:85:35:0d:87:64:8c:fb:04:78:7c:58:
                    71:8c:34:eb:46:27:78:64:30:f5:e6:38:64:99:f5:
                    05:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:94:0A:DF:56:71:7E:D7:32:05:F7:E0:5E:E4:0A:2F:E9:A9:26:9A
            X509v3 Authority Key Identifier:
                keyid:8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b1:1b:25:ec:d7:2d:c8:5c:35:dc:87:c5:f3:5b:19:52:81:
         77:11:8d:cb:70:03:61:e0:fb:d0:28:4c:46:0a:1f:09:1d:ff:
         bc:11:e7:58:2c:86:64:7c:39:99:f0:70:e0:7e:5b:7f:63:21:
         8f:27:96:aa:ba:2f:fa:dd:0d:70:0d:eb:c0:c6:ef:c7:10:a6:
         bc:54:6b:d4:8a:58:05:a3:61:af:49:08:2e:66:e3:b8:b4:00:
         e1:d0:d3:3c:d6:9e:d2:88:5a:8e:4d:54:1a:ab:c4:38:8b:49:
         01:ec:fd:72:09:92:6d:ff:42:59:de:28:74:64:e3:a2:4f:4f:
         91:52:90:ca:85:e6:52:a5:ca:f2:fb:f3:d8:70:be:a2:98:ad:
         a1:0a:bf:91:58:3c:49:ee:e1:4c:e1:56:b6:7b:44:98:ec:7b:
         6f:1e:56:ae:04:38:e9:6a:41:55:52:65:d7:97:98:f8:a1:ec:
         6a:e3:c0:57:0f:24:b5:25:96:da:f9:6b:dd:16:25:d0:1b:3c:
         4e:d3:ca:d3:5c:48:91:f2:1e:0e:e6:05:0a:f4:08:4e:12:99:
         36:74:e5:b5:40:34:90:25:1e:0e:9f:b1:98:b6:93:3d:2c:90:
         ca:ff:a7:cb:13:e8:19:d5:a6:a1:bb:a8:a0:1d:e3:9f:5d:db:
         21:94:bd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----