Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
File:                     jNzyb3SGBYjKxrrhf5neItvEmuY.mft (raw, json)
Hash identifier:          OqZjJGEK4lsARK56UmV42BOJuiO4DV3gCf6H3zT76MM=
Subject key identifier:   A1:D8:5C:0B:F1:99:C9:85:18:9B:3E:BF:34:31:4D:73:C4:97:5D:92
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Certificate issuer:       /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial:       01962E9871F30A95D89BA3B4E824D2DB17C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: 6xQfGOt_4QRi194ctt1Yy_IpWvk.roa (hash: Zeq/X7clOOaPFxvhWK8RPC5T2Ckw08yRW0DPBjzvh6E=)
                          2: jNzyb3SGBYjKxrrhf5neItvEmuY.crl (hash: fmwxUb2Dala9tYUCNAsK4Cfk6gZTuf+mUbz118EgmRY=)
                          3: nMDCAx4S7BvyRseCP1AtruhoXlQ.roa (hash: MzKXqieiYhEALeqU1AUv5CMaIkFtOJxEDtJDUquvAg0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:71:f3:0a:95:d8:9b:a3:b4:e8:24:d2:db:17:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=a1d85c0bf199c985189b3ebf34314d73c4975d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:48:83:aa:db:71:e1:2e:82:20:af:51:c3:94:
                    a1:4d:d0:22:dc:fa:ba:6e:94:71:d1:00:f9:59:1c:
                    b4:46:79:10:9f:66:fd:50:c9:dd:c1:e3:47:a3:7f:
                    e2:a4:3b:4b:21:9f:d8:cc:36:41:a8:2a:54:90:b1:
                    e3:60:bf:7c:b7:d9:3d:7d:73:34:d7:25:53:48:12:
                    de:be:b0:ac:5a:3f:00:02:06:e0:ae:82:d2:22:85:
                    c7:fe:8d:6a:08:82:0f:d6:47:ac:a7:c4:9c:d3:bb:
                    d6:98:a3:48:89:01:87:51:49:55:af:6c:c0:58:ef:
                    5f:96:cb:76:3e:a3:5a:14:6a:94:c6:99:c2:f5:80:
                    44:d3:28:7f:f3:7e:a8:7e:3b:35:5d:86:e4:84:5c:
                    d3:67:a1:d4:d9:e7:53:7d:d1:8f:cc:55:69:5c:1b:
                    09:b1:be:ff:81:fd:76:36:b4:3f:22:1c:cb:a4:3b:
                    f9:99:92:37:67:21:4d:e1:63:e2:05:9b:ed:dc:8d:
                    d5:cd:bd:63:a0:1a:aa:ff:ce:11:d5:7e:ba:91:9e:
                    0d:f2:12:be:fc:02:eb:c5:d9:3a:a2:9b:33:83:60:
                    14:3b:b3:b8:1b:19:e3:3e:11:74:42:ce:c5:20:ca:
                    e8:8c:c7:89:a0:b1:82:f9:1b:0f:44:2a:ff:9c:22:
                    b1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D8:5C:0B:F1:99:C9:85:18:9B:3E:BF:34:31:4D:73:C4:97:5D:92
            X509v3 Authority Key Identifier:
                keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:6a:26:c0:d8:a5:60:17:17:5a:69:96:97:6d:74:98:c8:dd:
         07:28:31:97:a4:ed:bb:55:0b:d7:49:25:1d:4f:50:18:78:d9:
         2b:7e:b7:51:5b:70:bc:68:6d:75:90:a9:c7:87:67:c4:ae:96:
         6e:8d:a8:91:25:c4:d9:f4:7c:f5:eb:00:1f:30:5f:c0:9f:d7:
         e6:2f:e7:97:5c:14:03:f1:96:43:b1:1d:37:9a:d5:0b:b7:82:
         8f:66:f5:a7:02:fb:e0:da:e4:c1:6b:a7:c9:df:7d:5f:1a:c2:
         e3:e1:83:49:48:d4:39:c4:03:2d:4f:62:d4:a1:79:96:99:e3:
         83:e5:20:9a:04:10:e3:50:de:6c:72:6c:78:05:7b:b0:3c:5c:
         60:32:ec:ab:be:dc:d1:de:e7:f0:e3:32:2d:14:e1:10:20:f9:
         1f:4e:b6:72:b8:ff:58:42:c3:0e:0b:dc:18:72:12:3a:db:55:
         3a:15:56:90:a0:9e:33:ef:4e:82:2c:a7:11:ff:f7:82:45:0d:
         0a:48:41:d4:85:c8:4e:1f:de:ef:6e:2d:8d:bb:22:5a:9d:91:
         8e:b8:86:e9:f8:f6:5f:90:6e:7f:27:e1:1e:f9:26:75:23:ca:
         a8:32:ba:6c:fa:62:fc:70:03:07:ff:86:a5:f7:ee:10:1a:f9:
         eb:11:d6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----