Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
File:                     jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft (raw, json)
Hash identifier:          +rQnyVJM7k4EEjMQIUGz6ZovBAc6AU2LCM5gYrNGlGs=
Subject key identifier:   FA:C8:5A:BF:94:51:2F:A5:CA:BC:D4:AE:83:8B:5E:23:03:98:53:ED
Authority key identifier: 8F:1F:91:A9:EB:38:9A:26:68:9E:F0:37:63:A1:DB:B0:9D:68:25:BF
Certificate issuer:       /CN=8f1f91a9eb389a26689ef03763a1dbb09d6825bf
Certificate serial:       01962E98E4F833AEEF8FBC2BC8BFCC044FB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
Manifest number:          11F3
Signing time:             Sun 13 Apr 2025 10:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:34 +0000
Files and hashes:         1: jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl (hash: WKiPKqg9ZphpVgXiqZG92YjEfOkiBX1rSAc+VtWliHo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e4:f8:33:ae:ef:8f:bc:2b:c8:bf:cc:04:4f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f1f91a9eb389a26689ef03763a1dbb09d6825bf
        Validity
            Not Before: Apr 13 10:01:34 2025 GMT
            Not After : Apr 14 10:01:34 2025 GMT
        Subject: CN=fac85abf94512fa5cabcd4ae838b5e23039853ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:52:0a:64:57:b8:40:cc:0f:17:9f:66:2f:8d:
                    30:74:c7:ef:99:26:61:a0:b0:32:2a:ef:ca:a1:bd:
                    ca:36:0c:d5:5c:5d:49:02:81:4f:ab:e8:72:ae:18:
                    07:c8:1e:be:90:2c:8c:7a:3e:44:e7:f1:bb:1e:1e:
                    cc:e6:a1:de:a8:c8:3a:fd:38:bf:3b:dc:cb:f0:ba:
                    40:e3:f7:de:fb:65:8f:33:50:61:51:05:95:a8:02:
                    b7:a7:5e:24:06:6d:0b:6d:42:a5:10:0e:e3:d3:09:
                    52:82:a3:41:3d:7a:e6:68:9b:0d:0e:c8:b9:24:53:
                    95:50:8f:c6:1c:44:63:1b:47:eb:60:bc:b2:76:ac:
                    6b:ed:91:ae:81:45:32:94:2f:89:2a:4f:c6:7a:21:
                    3e:bb:90:89:2e:46:e9:1d:85:96:03:d0:f7:83:20:
                    73:14:af:7b:8a:29:57:e9:33:05:8d:80:9d:ae:50:
                    b6:8b:1e:3e:60:f5:d2:86:e5:4a:73:dd:4c:23:5e:
                    39:b7:51:c1:cc:04:b7:d8:fc:dc:5c:b8:b6:62:38:
                    e0:c0:14:0e:c2:cb:6b:24:6a:46:c4:3e:44:12:ef:
                    1a:ee:04:af:40:a5:73:b2:42:32:72:68:47:92:29:
                    a7:5b:38:e5:57:aa:36:14:3e:0b:d8:9e:89:aa:e3:
                    09:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C8:5A:BF:94:51:2F:A5:CA:BC:D4:AE:83:8B:5E:23:03:98:53:ED
            X509v3 Authority Key Identifier:
                keyid:8F:1F:91:A9:EB:38:9A:26:68:9E:F0:37:63:A1:DB:B0:9D:68:25:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:42:e1:a1:f2:ff:9c:9f:ef:94:16:57:aa:42:84:e0:ff:5d:
         b5:00:17:28:a1:c8:a1:e7:fd:4d:34:60:68:f8:54:3f:c0:b0:
         42:5e:ff:ac:16:ab:20:7c:3e:dc:00:9a:46:ee:60:d7:03:e6:
         81:97:6d:64:0a:6a:c7:7f:40:c0:35:b6:f0:f7:c5:ed:d5:d9:
         34:d6:0d:a1:65:49:de:e2:81:d2:29:6d:a1:ae:94:ca:90:69:
         10:44:34:d9:bf:31:e4:33:29:2b:90:61:57:48:b7:f0:23:00:
         da:b9:bc:e0:c6:b6:36:1e:ac:b4:06:15:1c:20:2f:b8:cb:c0:
         2f:96:6c:93:1f:b2:0c:8a:08:dd:f5:c0:1a:41:a5:01:66:e6:
         95:f7:dd:be:5a:5f:68:6c:73:39:ef:4f:1b:b5:fb:e5:f2:2b:
         0c:c4:7c:fd:16:13:b7:a5:15:c2:29:f9:14:84:e8:4b:f8:3a:
         6a:2a:58:a6:a3:99:b0:f6:c4:54:ab:28:5b:70:3c:11:fb:4d:
         53:7c:44:92:f9:96:cc:8e:b2:d1:c1:38:59:9d:5d:13:17:66:
         35:93:01:ce:7b:89:27:ac:4d:08:c1:96:56:69:0e:fa:39:b6:
         f0:97:a8:9a:45:f0:a0:3b:fb:c4:64:a6:52:05:f0:f7:8c:a6:
         4b:7b:37:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----