Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
File:                     jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft (raw, json)
Hash identifier:          mpm4SdS65sys1ZZkEeJh7i4uED8t2V7asgT7C3Kf0uw=
Subject key identifier:   8F:D5:7F:AF:7B:C0:4B:87:5C:A7:ED:C8:AC:A6:2E:EA:1A:EB:DD:B5
Authority key identifier: 8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72
Certificate issuer:       /CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
Certificate serial:       01962E98DAC150DF1EC0D3DD04F572F9C60A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
Manifest number:          03FC
Signing time:             Sun 13 Apr 2025 10:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:31 +0000
Files and hashes:         1: jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl (hash: zy3mfjBAi5hpLDUkABrju2q/4nLyJys2jrABG/pyzYg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:da:c1:50:df:1e:c0:d3:dd:04:f5:72:f9:c6:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
        Validity
            Not Before: Apr 13 10:01:31 2025 GMT
            Not After : Apr 14 10:01:31 2025 GMT
        Subject: CN=8fd57faf7bc04b875ca7edc8aca62eea1aebddb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:58:87:03:83:b2:dd:e9:25:39:7b:aa:60:58:
                    e0:51:90:c6:cd:d2:dc:d0:ee:ff:bb:42:9a:e4:a1:
                    cc:04:8c:88:db:95:c4:52:de:c6:0f:d7:0c:41:9f:
                    9f:d4:3b:a8:0f:88:75:ef:4b:c2:b1:f9:bc:18:fe:
                    0e:79:17:27:4f:1c:60:8e:1d:ad:4b:f0:b9:2c:68:
                    19:9e:72:7b:a1:17:d6:c1:36:43:68:e3:3b:cd:84:
                    1a:6e:ca:3b:71:2e:c9:34:61:05:c4:95:7d:23:b5:
                    4d:08:6f:0b:82:3a:b2:19:81:b8:5e:85:e3:59:1c:
                    0f:8d:54:51:bb:5b:41:3f:65:d2:be:4b:be:8b:d3:
                    5b:36:93:d3:9c:85:18:53:63:6a:4b:4b:00:01:9a:
                    35:d2:d0:50:cc:56:10:62:16:04:2c:cb:12:37:75:
                    91:e5:51:75:d1:25:25:32:ca:56:d5:5b:6b:99:da:
                    64:92:28:c8:cd:24:40:77:98:2b:bf:8d:e8:11:b7:
                    db:db:f6:5a:7b:35:14:d2:b8:07:fc:7d:2a:40:6e:
                    27:d3:62:d4:0b:db:66:59:f5:5b:4a:6c:6e:ff:6d:
                    5a:55:f6:94:24:b7:11:02:2d:af:9a:1d:fe:f6:11:
                    f8:78:49:6f:59:c5:d5:cf:3f:67:bf:63:a1:79:4b:
                    76:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D5:7F:AF:7B:C0:4B:87:5C:A7:ED:C8:AC:A6:2E:EA:1A:EB:DD:B5
            X509v3 Authority Key Identifier:
                keyid:8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ff:17:4b:b3:7a:c5:ec:28:b4:d4:cf:07:9b:41:f5:5a:ce:
         58:21:14:67:85:90:94:67:1e:2c:5c:1a:f9:fd:28:99:a5:51:
         b0:44:8f:8f:e7:4e:d4:a1:71:d7:6d:b1:bb:1f:ff:c7:a9:82:
         83:fb:e7:54:72:4e:97:09:0a:5e:03:b7:c4:cd:25:2f:32:ce:
         b0:5c:e7:c0:d2:c4:0e:15:29:0f:4c:c2:19:eb:ff:a1:3d:5f:
         74:5a:ce:27:94:09:cc:47:6f:ec:63:f7:e1:91:59:3b:18:20:
         0a:08:df:12:b1:87:6d:43:47:05:52:e0:25:31:96:16:fe:8a:
         93:d2:98:84:2c:3b:9c:d4:2a:4b:d6:fe:3f:f6:60:9b:04:58:
         55:4b:1a:ce:65:00:4e:e5:b6:f7:0b:ac:c2:5d:48:ab:a9:b0:
         68:9f:ee:2c:7a:df:8d:60:99:c0:d5:ae:d2:56:f7:12:07:77:
         17:f6:65:9f:ef:be:21:9c:3a:66:c8:94:c3:43:16:71:19:63:
         c6:0a:53:36:27:e8:4c:df:6d:10:b9:4e:b5:ca:b0:29:62:91:
         ab:53:f7:52:25:e8:3f:26:ef:db:c1:8a:dc:bb:6a:8b:5d:bb:
         1a:d7:df:94:94:0f:22:b7:03:be:66:2f:16:a6:35:b1:ea:4e:
         df:00:e7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----