Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
File:                     jz-dhbyzpBNjYsV3Pp0U455SlFM.mft (raw, json)
Hash identifier:          t2Gt+3eEG0RuO3cCCMDJNjLPB2ZF3Ksm1GBOa/061HM=
Subject key identifier:   12:38:A8:AE:B8:DB:03:41:42:EF:CB:BB:1B:11:D3:C3:E3:8C:67:9B
Authority key identifier: 8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
Certificate issuer:       /CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Certificate serial:       01962F7483030255066A7446CFFDF976EB01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
Manifest number:          054D
Signing time:             Sun 13 Apr 2025 14:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:26 +0000
Files and hashes:         1: D6_4qEi07gtXF5ITukzXeqcyPaY.roa (hash: BB8G1BDTfHCkkOszf3uysnvPnN4MWEDmW1B2B7aR3bY=)
                          2: jz-dhbyzpBNjYsV3Pp0U455SlFM.crl (hash: DhTEL5OR/Aiz5R4mXo3dnyzSuUuDDN+d/i/fLD0VqKI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:83:03:02:55:06:6a:74:46:cf:fd:f9:76:eb:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
        Validity
            Not Before: Apr 13 14:01:26 2025 GMT
            Not After : Apr 14 14:01:26 2025 GMT
        Subject: CN=1238a8aeb8db034142efcbbb1b11d3c3e38c679b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:91:00:5d:df:22:fa:0a:a0:47:d7:aa:76:ca:
                    81:a0:b5:15:89:4c:2b:b1:c5:18:d0:d2:fd:cb:c6:
                    b4:ea:38:2f:42:f3:13:04:6b:8c:3c:a1:b9:e1:a4:
                    72:30:df:67:e2:09:fa:1c:74:c6:a3:4a:65:51:de:
                    59:cb:98:e7:88:bb:34:31:63:80:54:0c:66:56:fd:
                    a1:aa:40:28:1b:10:e7:02:4c:cf:df:d0:84:66:1e:
                    54:83:72:10:57:4c:5d:54:e0:b0:eb:90:a2:8f:53:
                    d3:ec:01:52:17:9c:7f:1e:a3:a4:98:82:37:80:c9:
                    7a:44:5a:de:19:fc:fb:c5:1f:b7:29:c6:06:50:93:
                    21:48:a9:f2:16:7c:9f:19:4b:14:51:c1:d8:17:a2:
                    12:3e:e9:d1:64:40:38:74:da:13:8d:59:fe:28:35:
                    64:e7:c5:0d:12:06:55:0d:af:4c:16:bf:1f:3f:b3:
                    1c:0f:e1:00:60:e6:4d:f1:ea:7c:d0:65:0d:e0:6f:
                    c4:f2:fe:cd:66:e3:66:3e:b0:65:e8:36:49:39:cf:
                    5c:bc:ee:f3:cb:e8:96:cf:a7:f3:45:c4:66:38:c1:
                    77:02:64:33:c5:5b:f1:89:6f:85:d6:a0:20:73:1d:
                    b5:bc:84:07:ba:00:41:55:e2:67:bb:d3:d1:b2:d3:
                    45:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:38:A8:AE:B8:DB:03:41:42:EF:CB:BB:1B:11:D3:C3:E3:8C:67:9B
            X509v3 Authority Key Identifier:
                keyid:8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:92:26:4e:45:1a:5d:dd:85:ac:14:10:b7:84:18:a8:2f:dc:
         7a:9d:f4:a4:20:3f:12:3a:2f:3b:f0:ea:a7:f4:b2:a0:d4:fb:
         67:5a:cf:5a:06:ae:35:62:c9:d0:ec:ec:69:6c:6d:b1:9a:d9:
         37:6d:a7:96:43:bf:4c:35:62:70:d3:9d:83:e0:63:17:9a:55:
         bf:72:09:b4:13:4e:a5:52:3e:d2:88:5a:2d:18:38:5c:f3:75:
         58:29:77:ac:64:85:0a:86:ef:b3:4e:27:c3:ee:10:94:a0:3e:
         38:52:84:b6:c8:74:09:ac:83:db:ea:df:8c:76:1d:84:11:39:
         78:0a:37:02:f2:d4:14:b0:79:3c:5f:fd:a8:96:0f:f5:68:05:
         a7:8c:80:49:18:6e:0e:74:bb:0a:3b:aa:10:97:72:78:7b:d3:
         6f:65:84:6b:40:14:b6:6c:c7:14:02:ae:26:4a:ef:69:ef:ed:
         9c:bb:3b:e0:72:d5:1e:8e:51:0f:c9:ce:a7:66:b4:73:00:4a:
         27:6d:61:53:2c:66:05:aa:6f:5a:44:04:7e:86:8c:3f:64:2c:
         a3:3b:38:32:b7:8e:47:a1:91:e1:a6:49:fd:22:8d:7a:b8:0a:
         b0:28:24:ce:0b:06:e2:95:2e:5d:99:06:ac:fc:72:f7:d5:bb:
         f6:91:fb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----