Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft
File:                     JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft (raw, json)
Hash identifier:          xmtQZ9DDNhAeY9RcYF04F68cWU4b5UGk55Xc1YCGhZU=
Subject key identifier:   1D:86:D8:4D:66:BE:70:51:EF:78:A7:C7:3B:40:30:80:39:AA:7C:92
Authority key identifier: 25:BA:87:95:F3:E7:E2:D2:C7:C9:0F:1C:36:66:CF:7F:92:83:DA:9E
Certificate issuer:       /CN=25ba8795f3e7e2d2c7c90f1c3666cf7f9283da9e
Certificate serial:       01962E98A50B513C601B42658A4AD4DB7899
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft
Manifest number:          14E4
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: JbqHlfPn4tLHyQ8cNmbPf5KD2p4.crl (hash: vvedoIPVm6tR24NabVELCY0pKOfM2os+YQFuvGaQg3g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a5:0b:51:3c:60:1b:42:65:8a:4a:d4:db:78:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ba8795f3e7e2d2c7c90f1c3666cf7f9283da9e
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=1d86d84d66be7051ef78a7c73b40308039aa7c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9a:67:c0:2a:4c:98:fb:b3:f7:af:16:cf:18:
                    fa:93:65:c5:7c:5b:5b:73:ca:27:e1:6d:f1:e1:13:
                    bd:3c:ec:3f:a6:cc:e3:cc:d6:f1:0d:d5:7c:52:a2:
                    af:5c:da:5f:d2:4d:9c:9f:fb:89:97:8e:96:d1:a6:
                    d4:52:12:7b:9a:d2:a3:33:92:00:00:58:75:1e:79:
                    8a:ea:9a:3a:67:4a:45:22:ac:47:44:a8:d9:0f:51:
                    5f:23:06:8f:22:94:34:5d:c1:2a:f1:35:8f:a9:65:
                    b1:35:8a:d1:18:ac:a7:e7:ff:61:11:98:e7:7e:95:
                    26:c3:fd:6f:e3:a5:c7:6b:13:13:2c:9b:9e:ee:86:
                    62:f0:da:44:66:d3:8c:ff:90:40:fb:be:b9:08:3d:
                    90:e5:af:b6:a5:06:98:08:b6:f7:6f:dd:7a:54:e6:
                    fa:0a:74:63:05:5a:21:83:2c:57:bd:ac:88:f8:2f:
                    ea:17:47:86:29:6b:4a:ec:9c:33:ce:ac:36:2a:d9:
                    b6:02:17:aa:6d:39:90:41:60:3c:72:bb:44:e4:c4:
                    1e:56:eb:a9:02:e5:2c:9e:99:c5:e3:89:46:48:29:
                    85:54:b3:10:33:81:f8:a7:c1:d5:4d:d9:27:bb:89:
                    6c:e2:67:ad:1b:d9:a8:e3:c6:83:0b:d5:71:5a:d2:
                    3f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:86:D8:4D:66:BE:70:51:EF:78:A7:C7:3B:40:30:80:39:AA:7C:92
            X509v3 Authority Key Identifier:
                keyid:25:BA:87:95:F3:E7:E2:D2:C7:C9:0F:1C:36:66:CF:7F:92:83:DA:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:c3:de:a1:84:f1:87:39:d4:bf:e4:1b:63:85:01:53:53:8f:
         19:80:8a:8b:8d:66:42:87:b6:26:cf:f0:20:6f:7e:e4:4f:87:
         f6:ce:e5:91:a1:eb:b9:2d:19:ec:7e:fe:ca:3c:0d:c1:e7:7f:
         ca:2a:d3:98:40:3c:90:c7:17:07:a6:67:5d:d8:3d:fc:42:f9:
         2a:f4:fb:fb:0e:6d:f6:65:14:9e:b6:fd:3c:d2:38:3c:85:45:
         8f:5c:55:74:cf:0c:0b:52:85:d8:25:75:db:30:b8:1c:ee:27:
         7c:c2:b9:6f:37:dc:f8:a9:75:05:61:54:ee:7a:1f:59:4d:39:
         ea:f0:0c:e3:a3:89:a1:cf:12:64:62:ea:05:35:26:8d:02:eb:
         30:fa:ed:83:69:c4:6a:19:ef:85:fa:db:6d:7e:1a:c8:12:dc:
         25:d9:34:4f:e1:65:19:b1:51:ca:b7:3f:79:f7:57:72:5d:5f:
         1a:94:cd:1a:15:43:26:69:20:26:6d:1f:43:80:9c:4c:63:32:
         82:96:1c:ff:d3:c8:6a:64:0a:61:79:31:9f:07:ee:15:59:de:
         30:c7:b1:75:9f:95:71:94:1a:d1:0b:f9:5c:cc:1a:bf:7b:ac:
         fb:bd:6c:f1:37:35:32:b6:68:f0:92:f1:b0:23:33:04:80:12:
         8a:b4:1a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----