Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
File:                     jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json)
Hash identifier:          zlwDuC+YUZJRiBj6mz/u5bhpSanoS6Q3RrHMbM33nqs=
Subject key identifier:   24:A0:C1:94:2A:7C:61:59:FF:29:9F:3B:E1:F4:6D:F5:F7:99:FC:7F
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Certificate issuer:       /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial:       01962F06F80B0DB961BA17F92A6EF0CB7B1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:47 +0000
Files and hashes:         1: CLLXw20tFXDHP2NnWdXuz6OtVIE.roa (hash: fyANJPQO+a+aRIBA049SI7Qf8CVSPhtzXXD8t/DgeGs=)
                          2: f46_qQD3jnenHxB8isMlElB8Ow8.roa (hash: xiaUuaIqDN3MaDb9piyX8u90zRoK0nA4gMNUAGOcErw=)
                          3: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: f/ZMLQHszVv7bubBGomrZRRn9i6tmvUOLuBzoeIP7e4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f8:0b:0d:b9:61:ba:17:f9:2a:6e:f0:cb:7b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
        Validity
            Not Before: Apr 13 12:01:47 2025 GMT
            Not After : Apr 14 12:01:47 2025 GMT
        Subject: CN=24a0c1942a7c6159ff299f3be1f46df5f799fc7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:84:26:19:9e:fd:8e:5a:6b:5f:44:9f:37:
                    95:d6:30:f4:50:56:0e:70:ca:2d:2c:d8:66:2f:53:
                    21:ce:ea:83:91:2e:ea:95:32:32:d3:b7:9f:20:ad:
                    fc:1c:fc:1e:9e:db:2a:0b:f5:78:55:e7:5d:73:c3:
                    85:fa:ec:17:11:c5:4c:bd:e8:c3:00:d5:69:2a:67:
                    ca:0c:61:24:d1:90:72:a8:bb:53:26:d8:22:f4:b9:
                    fc:9a:86:f4:f7:f7:5a:1f:05:a4:75:72:4c:8b:71:
                    9a:0d:d6:e5:44:0a:ae:83:ff:bc:df:73:7b:4d:8a:
                    81:d8:d9:58:69:70:4e:7f:cc:4f:e5:6c:f2:2a:fc:
                    15:1b:7e:cb:39:2a:29:70:bb:ca:d2:af:fa:5d:75:
                    06:85:34:aa:91:8b:b4:42:61:10:7c:1a:13:26:38:
                    79:52:a9:f7:de:65:56:47:55:f3:9f:5f:09:f6:a5:
                    f0:3d:ab:e2:73:55:27:af:e1:c1:81:f0:95:43:78:
                    3c:6c:f8:4a:ec:22:8c:9a:4e:e1:cd:fd:ad:99:81:
                    f5:fe:67:22:13:60:c6:01:ae:c5:3a:82:ef:52:f8:
                    cc:1c:27:a4:25:6f:29:83:fc:c1:5e:27:cb:eb:80:
                    7c:e4:f9:32:c3:4f:3c:99:67:25:a8:be:0f:1a:ba:
                    f2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A0:C1:94:2A:7C:61:59:FF:29:9F:3B:E1:F4:6D:F5:F7:99:FC:7F
            X509v3 Authority Key Identifier:
                keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:7a:dd:5f:45:75:4c:58:2a:18:0c:f3:a5:a3:43:c2:bd:64:
         b0:55:06:93:48:d6:88:8b:a8:73:64:ae:aa:7f:98:55:81:0a:
         21:aa:9f:b6:05:2c:18:61:cf:6a:92:a1:56:f7:f8:51:07:69:
         79:dd:68:8c:24:2f:8c:38:33:85:35:22:f4:86:59:41:b3:46:
         2e:fc:cf:48:b8:43:5f:e0:4e:f5:e3:18:90:7e:3a:00:c0:8d:
         8b:e6:57:52:04:ae:6e:f4:6d:f4:fc:eb:b0:cc:b8:6f:a2:44:
         25:9a:4c:8c:39:7b:9e:d2:2d:b1:8b:a2:e5:a1:80:ae:db:c8:
         9c:f2:ae:20:df:67:38:b5:d3:88:b9:ab:94:d0:a2:e2:b3:df:
         76:4e:25:8c:7b:8f:53:d7:ab:33:cd:e5:a3:c3:7d:fd:cf:9a:
         b7:42:5a:5d:22:79:79:22:8e:1b:27:88:25:54:65:46:fd:1a:
         75:05:16:18:0b:cd:11:b7:47:ec:bc:c9:be:db:24:46:ea:57:
         0f:e5:2d:c6:d2:0e:b8:62:73:e9:ad:6f:04:dc:3c:71:9b:ab:
         8a:d7:3d:bb:a8:00:d6:5f:2f:4b:7e:86:b9:bd:08:ce:3d:31:
         5a:4c:2f:e7:85:f9:19:db:70:4f:4e:cc:bb:e7:32:bc:e3:98:
         4a:94:08:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----