Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
File:                     jZknGRkaiU0GjbqNChAG6f6tqmg.mft (raw, json)
Hash identifier:          8pnFiwgrr2AMMV6pQm3hstGnHGTcpeVZNqzcD56j7UA=
Subject key identifier:   E9:4B:A7:96:45:5E:1C:F0:2F:41:33:31:20:6B:A8:5D:39:D0:C3:4B
Authority key identifier: 8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
Certificate issuer:       /CN=8d992719191a894d068dba8d0a1006e9feadaa68
Certificate serial:       01962E993E275757B936A7D361A5EBABAC5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
Manifest number:          069B
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: UEoVdPpKXNYPc5eN4NXhO3hKujE.roa (hash: S8TgRAvXGtwdrVW8V4DMPg99ZH66pkiGd931XsFhH8g=)
                          2: auh7CDhWY48lyi05uSGvAmCeUEY.roa (hash: EQMFxwLeohahYmNy2tmys2Ve5N9/cgGCjeiUU7kajMM=)
                          3: jZknGRkaiU0GjbqNChAG6f6tqmg.crl (hash: PwElvaO8YYwZdBsuZUdbCVKJfMSixHHlubWetmwRy3U=)
                          4: nz0zNU_fBq73BHptpznw6advDzo.roa (hash: 0C2SqHmcbAjiy/O+OBAPzaEZ28ZqtJabC+l8WC5HbPg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3e:27:57:57:b9:36:a7:d3:61:a5:eb:ab:ac:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d992719191a894d068dba8d0a1006e9feadaa68
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=e94ba796455e1cf02f413331206ba85d39d0c34b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:70:f2:c3:22:50:85:5d:b7:bd:74:99:7b:77:
                    84:5e:45:dc:c4:a1:e2:8b:c5:bc:b1:59:5d:b4:97:
                    eb:91:6b:d5:1b:89:cb:73:b9:6c:a5:a7:68:46:27:
                    64:d1:dc:c3:63:28:89:3c:b5:ab:2d:70:6c:6f:a1:
                    20:54:e1:b9:a0:19:44:27:4d:cd:f4:b0:3d:ae:80:
                    50:e5:8e:e9:5d:bc:bb:73:db:30:75:e8:59:69:a2:
                    9f:e5:64:eb:6c:8d:5b:7b:0b:5d:8e:16:50:41:97:
                    59:ed:60:5e:41:e8:0f:6f:b9:cd:f4:f9:c4:62:05:
                    c9:f7:65:b5:5d:90:39:f1:5d:e1:a9:cd:ec:38:e1:
                    f8:b2:a1:26:da:6a:d8:a4:de:9e:2f:aa:94:48:23:
                    3e:c6:c2:d8:66:6b:50:88:ad:e0:94:cf:6b:f1:69:
                    ba:0e:7e:1a:1b:b5:fd:55:7e:fa:9e:9b:c2:4d:95:
                    86:15:bb:01:ae:60:1a:de:b3:94:ff:ab:08:d9:70:
                    e9:aa:c3:ac:84:bb:22:51:62:30:6b:31:bd:87:58:
                    03:fa:04:d4:27:e1:17:5a:b0:f6:f8:4e:9e:a0:21:
                    7f:16:31:1a:c4:d2:cd:12:bc:38:22:eb:88:69:24:
                    c9:23:bd:5b:99:fe:85:fd:6e:41:bb:33:60:e2:a8:
                    dd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4B:A7:96:45:5E:1C:F0:2F:41:33:31:20:6B:A8:5D:39:D0:C3:4B
            X509v3 Authority Key Identifier:
                keyid:8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a8:98:20:67:c6:be:31:36:7d:66:6c:0d:40:03:84:b4:71:
         b7:ba:36:59:26:5a:5a:59:4d:88:94:00:f3:2d:e5:ee:b9:e3:
         47:33:a5:89:61:16:fb:96:fc:0b:29:8d:f8:e3:c4:1b:ca:d9:
         87:77:f9:de:ae:ae:91:75:6d:30:af:b1:c3:f0:57:3f:f6:33:
         35:59:94:4e:68:8a:c4:c7:d0:9e:88:93:ef:ad:18:20:61:70:
         72:95:81:8a:bd:04:80:4d:56:66:b4:14:4b:8f:7e:59:c9:ba:
         0c:7d:75:80:8a:75:4b:51:b5:e7:56:c9:e3:18:3f:55:72:32:
         0d:ea:c0:bb:e3:04:36:4b:a2:3e:1c:fe:55:32:86:a6:33:15:
         ed:8f:8b:07:cd:98:c2:2a:f5:e3:50:27:fa:54:69:a2:4b:5f:
         18:af:53:9b:57:fa:a6:f6:21:6c:e8:51:61:4e:22:73:5a:0c:
         77:5a:45:0f:d1:d9:1a:f9:8f:00:cb:a5:7d:f8:45:86:38:0a:
         74:40:a3:9b:11:c2:34:87:54:77:50:e5:3a:21:42:11:af:8b:
         34:d3:79:40:d8:f8:24:ea:16:a8:e1:7c:ba:d1:89:ed:25:04:
         2c:0f:de:a7:56:be:65:f4:8b:c3:e1:88:c7:30:6b:e5:ab:5e:
         60:f1:1a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----