Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
File:                     jciXK026DSBJ03yEikoh1KQ7Ljs.mft (raw, json)
Hash identifier:          XiId9MEnFtu/LX/oh3G4GBlJx15PhhK8TxDXVkANXhM=
Subject key identifier:   97:B3:74:11:48:8E:C9:25:18:B7:99:C2:D9:13:08:7E:46:3B:C0:FA
Authority key identifier: 8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
Certificate issuer:       /CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Certificate serial:       01962F06518E493CE9034D6DADB5DF463B24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
Manifest number:          0367
Signing time:             Sun 13 Apr 2025 12:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:05 +0000
Files and hashes:         1: jciXK026DSBJ03yEikoh1KQ7Ljs.crl (hash: izVteVQj/C+sDjej2oVRYe02EDRuIXTIR8gPC7an/90=)
                          2: s8IxW5tuKoaeGci5PMMsvkBpqVA.roa (hash: r/ncpxBVtrl7LSWT4Ir7OLnEXZq1sFDkQ+rRRvqTryo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:51:8e:49:3c:e9:03:4d:6d:ad:b5:df:46:3b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
        Validity
            Not Before: Apr 13 12:01:05 2025 GMT
            Not After : Apr 14 12:01:05 2025 GMT
        Subject: CN=97b37411488ec92518b799c2d913087e463bc0fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:26:29:b4:de:2d:15:b5:b8:f0:b0:ac:e7:10:
                    0e:c6:ff:4c:62:a3:34:7e:90:b7:f8:21:2b:09:b0:
                    fe:1b:48:f1:d4:fc:d5:d9:01:07:2f:a3:9b:f8:95:
                    d1:44:6e:3a:81:0d:5a:9e:34:07:6b:6a:43:f2:f7:
                    9b:6e:70:f3:a9:41:be:ff:e4:b6:7f:bc:c0:5d:de:
                    df:31:8a:3b:25:16:43:f1:2e:b6:f5:a1:b4:9e:95:
                    3f:39:8c:df:42:e8:e8:f7:50:a6:f8:3d:26:a0:5a:
                    cf:f8:f1:00:90:57:13:a6:b5:91:39:85:3b:05:0f:
                    53:2d:4b:f8:1a:d6:2b:8a:90:7a:13:99:cf:64:a2:
                    20:da:51:5b:2c:ec:d3:31:d7:49:4d:21:a2:5c:ed:
                    74:a7:c1:b0:c4:08:46:b5:81:68:96:d0:11:44:50:
                    f3:0a:03:02:9a:cb:19:fd:54:bb:b9:eb:4c:de:9b:
                    18:42:9c:4c:a5:ed:f9:b2:6c:b8:05:50:84:1d:f2:
                    7a:e2:6b:78:36:1e:7b:a3:bb:cb:e3:31:cd:3c:b1:
                    3a:c7:77:32:f4:0e:6b:9d:85:93:9a:8b:78:90:f1:
                    6b:85:fc:f9:cf:4d:e2:67:26:d5:f2:32:23:d6:5a:
                    68:3f:dd:54:1c:43:66:6d:70:e8:bc:58:48:5e:21:
                    db:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B3:74:11:48:8E:C9:25:18:B7:99:C2:D9:13:08:7E:46:3B:C0:FA
            X509v3 Authority Key Identifier:
                keyid:8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:73:0d:ba:c0:69:35:46:3f:e7:d0:56:64:99:2a:55:cc:98:
         2e:5c:26:ef:0d:d3:00:e6:1f:fd:ef:e2:fe:91:4d:9a:13:cd:
         63:f8:d4:b3:96:44:42:8c:d1:8b:e2:ea:95:32:a0:41:3b:96:
         c9:84:0b:bd:7f:16:10:b4:7e:c7:be:58:7f:9f:e6:5d:51:0b:
         6b:ba:9b:76:b3:fe:28:23:49:ad:3a:75:eb:c1:09:c9:78:ec:
         69:78:89:7f:a9:c2:db:14:96:61:6b:f1:d7:f1:e8:ca:4a:38:
         f0:12:32:ed:61:fb:d1:00:cc:26:8a:d5:16:23:67:14:21:41:
         41:46:05:1e:43:6b:a6:79:73:ae:be:dd:57:9c:dd:d7:15:1d:
         3d:b9:9d:ee:de:71:40:67:c1:7c:6b:b8:da:5c:7e:a2:fe:09:
         0a:76:b4:85:d3:c4:3c:8a:03:17:54:f9:05:56:5c:f8:a5:35:
         e8:a3:7e:85:ed:8c:ec:4b:a0:2d:1c:0c:75:f8:11:36:14:70:
         fb:39:97:3b:5e:f6:d0:b8:44:30:b3:f8:d6:ac:7f:b3:08:3e:
         35:c0:0a:0b:30:0e:bd:40:e7:b9:71:53:39:40:a4:26:f8:8c:
         bc:49:85:35:24:6f:f7:7e:22:25:e8:f1:7f:6e:51:9b:ab:ca:
         24:5a:df:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----