Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d20ed-3d4a-44d3-a2d7-d64d70612a17/1/jh_mbZ9htuZFpEe28GvUm9PgC84.mft
File:                     jh_mbZ9htuZFpEe28GvUm9PgC84.mft (raw, json)
Hash identifier:          ToI0G3tIbEjb49QMSKBEUSWf1oPII5TvZwKqrkXse98=
Subject key identifier:   8B:77:79:EB:05:17:51:A1:87:56:7F:E3:4F:F3:87:23:4A:C6:9A:E6
Authority key identifier: 8E:1F:E6:6D:9F:61:B6:E6:45:A4:47:B6:F0:6B:D4:9B:D3:E0:0B:CE
Certificate issuer:       /CN=8e1fe66d9f61b6e645a447b6f06bd49bd3e00bce
Certificate serial:       01962DF3D6D13330D5E179D325A4973265C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jh_mbZ9htuZFpEe28GvUm9PgC84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7d20ed-3d4a-44d3-a2d7-d64d70612a17/1/jh_mbZ9htuZFpEe28GvUm9PgC84.mft
Manifest number:          117B
Signing time:             Sun 13 Apr 2025 07:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:16 +0000
Files and hashes:         1: jh_mbZ9htuZFpEe28GvUm9PgC84.crl (hash: 8hEOSukJZpysULviTZA8AJ5I3CVBKv4mjvYweQMkQcE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d6:d1:33:30:d5:e1:79:d3:25:a4:97:32:65:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1fe66d9f61b6e645a447b6f06bd49bd3e00bce
        Validity
            Not Before: Apr 13 07:01:16 2025 GMT
            Not After : Apr 14 07:01:16 2025 GMT
        Subject: CN=8b7779eb051751a187567fe34ff387234ac69ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:63:a1:b4:71:2b:c8:27:ff:56:7b:5e:97:e6:
                    01:8e:51:4d:4c:2b:d7:a2:27:ab:7a:46:2d:b8:8a:
                    29:a1:5e:b2:e1:3e:2c:d7:b7:b4:17:7f:92:65:0f:
                    39:ff:79:16:31:f8:23:70:01:47:13:59:24:b9:22:
                    00:f8:c5:8b:d7:65:71:3c:b3:79:e4:bd:77:e7:41:
                    9a:03:43:b4:4d:47:e2:8f:a8:07:8f:24:95:bb:e7:
                    da:a1:fb:9f:5e:c6:82:ec:09:da:d2:dc:af:5b:54:
                    aa:4e:6d:7f:11:9d:f0:f5:1f:21:22:4e:70:95:f6:
                    70:8f:82:97:1b:ac:80:4f:eb:bb:90:74:c4:32:16:
                    e4:07:36:92:3c:35:2a:5a:8d:4f:72:96:c2:52:16:
                    93:af:76:4b:e5:21:03:f4:24:2b:52:17:3b:1e:89:
                    79:ca:10:0b:53:f4:1c:1a:d5:be:a3:ac:3e:5f:52:
                    0e:d2:c3:15:bc:c2:aa:a1:67:9b:de:a8:29:df:90:
                    13:3e:5f:1e:80:fd:e6:9d:67:63:1c:fa:9b:d1:90:
                    e9:37:d2:f4:31:8c:06:92:79:bd:79:17:96:4d:64:
                    35:b0:89:93:82:86:3c:b5:e1:aa:46:7c:5a:ff:f3:
                    b7:6b:6d:1a:48:01:46:0d:eb:d8:11:1b:07:b2:77:
                    4f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:77:79:EB:05:17:51:A1:87:56:7F:E3:4F:F3:87:23:4A:C6:9A:E6
            X509v3 Authority Key Identifier:
                keyid:8E:1F:E6:6D:9F:61:B6:E6:45:A4:47:B6:F0:6B:D4:9B:D3:E0:0B:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh_mbZ9htuZFpEe28GvUm9PgC84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d20ed-3d4a-44d3-a2d7-d64d70612a17/1/jh_mbZ9htuZFpEe28GvUm9PgC84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d20ed-3d4a-44d3-a2d7-d64d70612a17/1/jh_mbZ9htuZFpEe28GvUm9PgC84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:e1:d8:6c:87:f2:e5:f3:a2:29:18:5f:10:fe:27:3e:e3:d5:
         3d:ce:38:a9:66:73:48:e8:c9:19:b6:18:bb:b3:7f:c2:dd:c5:
         3e:5e:00:fa:59:d1:cc:06:c6:67:ce:29:00:8e:4a:b5:7c:2b:
         44:8f:a0:a3:71:7a:de:9f:36:9f:af:6e:72:22:da:6e:eb:9b:
         ca:ae:f9:bf:17:7f:24:27:1b:b1:c1:af:d5:0b:93:5d:b2:64:
         62:4d:e2:b1:be:b0:3c:c5:83:2e:e9:5e:28:6c:3d:93:cf:8d:
         70:c1:d5:80:2b:d1:20:62:e1:f1:85:c9:0e:69:d9:cc:d1:cb:
         4c:c2:23:c3:8d:bc:76:7e:08:07:dc:14:90:2d:6e:38:bd:ce:
         f8:3b:8d:0e:fc:f4:3b:78:84:37:98:7f:f2:d9:0c:7d:7f:3f:
         90:63:c2:f6:79:7e:d9:cb:b3:2a:0a:01:68:01:70:72:b5:ef:
         ba:22:7a:1c:89:83:00:a8:d3:57:c5:ce:eb:20:c1:9c:97:9f:
         ac:8c:cd:ba:4e:98:c0:11:f1:84:d4:1d:85:4a:c0:39:16:d0:
         c7:f2:ce:04:92:7d:89:42:00:45:17:57:0a:fa:4a:0a:b6:0b:
         81:db:da:81:f7:a9:f4:c3:fe:f4:20:04:5d:72:d3:ba:c1:d8:
         5b:ed:bf:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----