Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
File:                     j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft (raw, json)
Hash identifier:          B0N+nXwDyTeyqOG7WTrVWSHdyoC/5MbAcJ5DY2fF8Js=
Subject key identifier:   46:44:F4:4F:64:E9:9A:EB:60:C4:E1:09:CB:4D:3F:C7:2F:0D:E9:4F
Authority key identifier: 8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37
Certificate issuer:       /CN=8fe692658aef093d9e3603132b965bf1be075d37
Certificate serial:       01962FAB163A3E0D6655C14D924B84C82EC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
Manifest number:          01D3
Signing time:             Sun 13 Apr 2025 15:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:03 +0000
Files and hashes:         1: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl (hash: EQaIllR30DB4SEpJjYUmI83JoTPlqJLgwMEYIhGtCyM=)
                          2: m_DyVhepA8h1XGWM-orUdoIVf7o.roa (hash: saVyyQ5v2TSsmPKMina7v4SF//mHS3btHrahjrjyKxE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:16:3a:3e:0d:66:55:c1:4d:92:4b:84:c8:2e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fe692658aef093d9e3603132b965bf1be075d37
        Validity
            Not Before: Apr 13 15:01:03 2025 GMT
            Not After : Apr 14 15:01:03 2025 GMT
        Subject: CN=4644f44f64e99aeb60c4e109cb4d3fc72f0de94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:22:df:f3:58:3f:c0:cf:d6:1e:d0:fc:3b:
                    d0:00:b1:bd:58:bd:5f:0d:56:00:66:91:51:55:99:
                    90:e1:dd:e8:7c:22:cc:53:6b:3e:93:fa:75:f5:ad:
                    30:88:a2:33:8b:f3:47:7e:d7:de:0f:da:b7:99:df:
                    15:8b:a9:2a:02:34:9a:f2:a1:72:a2:f1:4f:f9:a0:
                    cb:bd:af:40:25:b9:70:ee:29:1f:6c:9d:83:7e:21:
                    08:7f:41:11:fa:86:b3:b4:cb:02:05:b3:50:0d:52:
                    cd:dc:3b:bd:70:6e:d7:d8:cb:71:03:9b:f9:a8:b6:
                    c3:98:40:67:b4:d9:0a:19:83:c3:30:e8:a2:7a:e7:
                    67:77:ce:79:e1:af:45:83:62:7c:c5:33:6a:97:0f:
                    92:d2:6a:f2:d5:80:6c:2a:cf:ab:d7:e1:dc:9c:94:
                    26:ba:ee:b7:2b:2f:1b:5d:fb:cf:e7:13:80:9e:9f:
                    aa:4c:5d:70:20:9f:8d:90:13:f5:db:21:d0:61:6a:
                    34:60:24:f8:a1:2d:f9:68:97:5b:e9:90:00:6c:e7:
                    38:fe:ed:65:dc:6f:b0:51:30:53:b9:b9:8e:65:b2:
                    a9:29:93:25:86:a3:e8:b9:dd:2b:93:9c:88:2d:5d:
                    b6:c7:68:a3:5b:53:7a:97:df:9e:19:5c:16:02:bd:
                    1d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:44:F4:4F:64:E9:9A:EB:60:C4:E1:09:CB:4D:3F:C7:2F:0D:E9:4F
            X509v3 Authority Key Identifier:
                keyid:8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:bc:3a:8f:48:25:9f:3a:60:a5:bf:81:ed:83:a7:4b:d9:94:
         6b:39:4b:1b:e3:00:3e:9a:43:24:3b:dd:09:92:e5:f5:bb:eb:
         cc:63:d0:e1:58:dc:c5:90:e4:aa:5c:48:05:c7:49:e5:f5:19:
         01:c6:73:80:c6:2a:27:d3:94:1b:f7:a8:61:35:97:f1:89:33:
         64:e7:b1:d5:3a:a2:01:9d:be:ba:5b:3f:8f:e0:1a:bb:dd:36:
         17:54:74:44:a4:08:e7:a7:57:13:45:a2:a0:72:89:36:ab:de:
         10:0b:0c:46:77:16:8f:d6:91:6e:c0:17:57:66:e2:a7:84:3b:
         de:66:c1:b2:db:0b:d5:83:a0:05:fd:69:fb:ec:b9:ef:20:69:
         fd:3e:0e:24:ab:3d:7d:fb:b8:b1:19:67:1e:3f:8f:e0:30:3b:
         55:30:83:73:e0:84:ec:28:66:c5:8b:38:96:1f:a5:e0:94:ea:
         db:a4:fe:10:b9:b7:6a:17:24:a6:b4:fc:17:db:ef:bc:63:60:
         af:7e:b3:fc:4f:4d:1f:22:36:53:b1:4d:f2:38:84:e2:78:0a:
         66:e7:f0:c1:24:4f:2b:10:61:69:d3:23:0a:d6:85:a3:6f:a7:
         33:2d:9f:60:cc:0c:ea:55:14:8f:54:d5:1a:ef:ba:6a:6d:da:
         9d:4d:81:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----