Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
File:                     jjA8wq-Dh4llJ3HDReB98-gNVE8.mft (raw, json)
Hash identifier:          kq06UQuCNDFTFy/vo1F+QuZ2peT1LNn7nUdppq8JMzk=
Subject key identifier:   41:1B:00:52:95:A2:C1:86:CC:45:85:F2:3F:3B:5F:41:CB:AD:CD:39
Authority key identifier: 8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
Certificate issuer:       /CN=8e303cc2af838789652771c345e07df3e80d544f
Certificate serial:       01962E9930925F8D443F9BD1AA7906EBBCB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: 7Ih44HEchM76fosssYsDhPW80DM.roa (hash: fUnotk/PUA4nwBmKa2OkgoRu1RIyYVBHFgrPwz0Fmwc=)
                          2: jjA8wq-Dh4llJ3HDReB98-gNVE8.crl (hash: pVQgaDfEyo1e3FOcZKlKmjCCN4m5XcO3ofYAkQJ/nKU=)
                          3: tnLXZpAcdsupjiIll_iKlzExQoQ.roa (hash: mDoarqNRra8hpVT2LOO1TVGYi/0LvJxSxAQ/O0wAR7o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:30:92:5f:8d:44:3f:9b:d1:aa:79:06:eb:bc:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e303cc2af838789652771c345e07df3e80d544f
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=411b005295a2c186cc4585f23f3b5f41cbadcd39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:04:9a:cb:6b:43:96:34:91:4e:d9:17:ad:3a:
                    fd:40:df:32:73:dd:c2:75:e7:67:cd:8f:af:f1:fe:
                    0e:0a:78:f7:f3:4f:39:a6:60:5b:8c:2d:62:d8:ad:
                    ce:a3:e4:8a:36:af:6f:38:9d:61:ee:1f:ea:37:cd:
                    26:75:aa:86:3b:36:28:6b:d1:dd:44:c5:4d:97:40:
                    7f:10:15:84:2d:74:5b:51:72:f1:72:65:d4:2f:2b:
                    6b:46:db:e8:c1:d5:a2:35:29:20:c3:db:c6:8d:ab:
                    de:b4:c2:55:2c:0d:0c:a8:ce:b0:e0:83:45:4f:38:
                    06:8d:c0:7a:3e:95:9c:f4:46:af:b5:f2:88:c1:ce:
                    6f:66:58:80:f0:69:37:2c:14:a4:fc:25:ca:08:8e:
                    8f:70:5a:43:a1:7f:88:c0:1c:78:c6:6a:cb:a7:40:
                    42:24:99:4c:13:0a:21:25:d7:c6:f2:b3:9d:d2:22:
                    ad:cc:83:9b:56:c9:29:7d:9c:64:ef:96:aa:83:ce:
                    13:0b:08:a4:74:c3:34:2d:d3:40:ff:bf:27:63:18:
                    51:53:58:53:ca:72:12:f4:dc:d0:4e:8e:0a:92:d8:
                    d4:c4:be:7b:f8:f1:f6:44:e4:de:55:d7:f2:a4:76:
                    73:20:41:4e:9b:6b:24:e0:e2:c0:7d:ed:20:44:a7:
                    92:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1B:00:52:95:A2:C1:86:CC:45:85:F2:3F:3B:5F:41:CB:AD:CD:39
            X509v3 Authority Key Identifier:
                keyid:8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:0b:ca:eb:e5:6d:0d:59:14:55:b3:ff:b1:ba:4c:da:9a:e6:
         3e:78:bb:10:61:bf:d1:94:c8:80:1c:22:46:dd:04:81:f3:b9:
         e2:8f:69:11:dd:de:bb:30:37:2e:b5:7b:6f:4d:78:a2:3a:8d:
         fe:db:bf:51:f0:11:e0:1f:39:3f:2d:ad:14:6a:87:83:85:35:
         03:86:7f:ce:60:48:6c:9e:83:e3:c0:ad:ef:58:4c:aa:22:66:
         66:58:de:7c:84:1b:c4:a6:8a:c9:5a:c9:7c:6c:ae:e2:c9:01:
         0a:5b:01:74:67:54:ac:d5:13:b7:a9:79:2a:3e:dc:bc:eb:bc:
         34:1a:7c:19:73:dc:17:12:15:be:de:82:a3:68:04:06:38:85:
         16:f2:09:cb:a6:6c:0b:86:68:d5:70:5b:34:a2:3d:a6:a2:83:
         14:02:d0:a8:d7:72:6b:82:b9:81:f2:26:72:e9:2a:0b:40:15:
         ab:d5:99:76:d4:a5:f6:80:32:a9:40:f6:f3:af:5a:0e:70:c8:
         26:01:12:0b:73:f4:42:29:f9:13:fb:c2:26:ba:86:f4:58:bc:
         d5:9a:36:31:88:00:3a:ab:08:2f:8b:2e:77:3a:5a:77:4b:9d:
         0e:94:92:aa:a7:d7:f2:1b:6a:f3:38:79:4b:ef:c6:00:08:da:
         8b:a6:c6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----