Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
File:                     j7x_Fwe20LIrzYGA9Puxtj78mfk.mft (raw, json)
Hash identifier:          f4NtKLjfHacrZD4g7mzgR5qFOg3Ia5haT3bCtmuvdl0=
Subject key identifier:   B9:B8:25:6B:45:C9:23:D7:52:8C:26:19:06:12:F8:59:72:49:74:C8
Authority key identifier: 8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
Certificate issuer:       /CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Certificate serial:       01962F06F2A0FD06424FC8FE325334F0D016
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:46 +0000
Files and hashes:         1: DSv-iSXA3wX9nDodPQXtYNJDYLQ.roa (hash: rLpTuxbTjwB1kMP3m7oQHgnYLtGjlIXTCssqGQyXU8s=)
                          2: abJHppOXbNRTL5BB9_dNqlKen94.roa (hash: yyWwgZa5PLui39TWj5tUmAj6wvoO0anzfsZ9NlvSNwI=)
                          3: j7x_Fwe20LIrzYGA9Puxtj78mfk.crl (hash: CEhMNlbGpLSdrs8PiIUCZgMcMdvP/vCk7yzpY7Dhuv4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f2:a0:fd:06:42:4f:c8:fe:32:53:34:f0:d0:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
        Validity
            Not Before: Apr 13 12:01:46 2025 GMT
            Not After : Apr 14 12:01:46 2025 GMT
        Subject: CN=b9b8256b45c923d7528c26190612f859724974c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:60:13:ce:e6:16:7b:51:a8:de:7f:60:f2:ad:
                    ae:b5:d8:ff:6c:ab:a4:0b:c2:a3:e4:af:b2:60:fe:
                    4e:93:41:1c:55:19:50:40:b0:e0:81:94:51:6d:d3:
                    42:b3:db:3a:95:b8:4a:24:c5:02:93:7d:50:0b:79:
                    6d:35:85:9d:50:fa:da:86:eb:68:34:77:9a:d6:5c:
                    d3:0b:21:33:75:f3:27:90:f9:89:d9:e0:0d:df:11:
                    42:09:b8:40:75:ab:1d:5c:e3:0c:b8:a3:a5:5b:0f:
                    a6:ee:28:c2:52:d9:74:8b:40:67:a3:01:79:07:95:
                    44:57:3a:6d:2c:d9:60:dc:7e:45:91:ee:7e:e1:4f:
                    4d:75:07:c8:5f:f1:0b:27:aa:27:22:cb:79:c5:4e:
                    41:dc:46:60:f5:dd:d4:ae:89:88:34:3d:03:3d:34:
                    6f:b8:92:61:51:0d:4d:9e:28:85:9b:ea:40:ff:07:
                    23:b2:4e:00:e4:ca:e6:72:c6:1a:a0:33:65:0b:b2:
                    59:f7:40:45:a8:6d:d3:fc:b0:3b:b9:b9:d9:8f:65:
                    73:fa:1d:54:57:dc:f5:fb:96:1d:36:e9:7b:06:d2:
                    23:93:71:a9:1c:40:a7:55:24:8a:bb:4e:01:1f:cb:
                    37:c5:b9:90:e3:e6:dd:d0:d4:de:f0:01:ef:82:52:
                    5c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B8:25:6B:45:C9:23:D7:52:8C:26:19:06:12:F8:59:72:49:74:C8
            X509v3 Authority Key Identifier:
                keyid:8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:0d:f2:1c:47:c6:2e:16:3e:b3:ee:64:49:d1:cc:4f:7f:b6:
         f9:ef:a5:6c:53:84:25:75:a9:d3:06:2f:5b:e3:06:46:7f:81:
         2f:e9:e0:53:12:2a:c8:49:56:95:c2:f7:be:a0:7b:9c:97:02:
         45:19:97:33:7e:11:0f:3c:88:cf:e8:dd:20:53:47:fe:4d:7d:
         f6:7e:47:54:35:0c:f6:7c:a9:f5:75:5e:85:bb:83:29:66:58:
         cc:60:9f:f4:a6:0f:88:de:99:90:d3:7b:5b:ee:d3:b3:a6:c7:
         18:c6:3b:2a:46:7c:d6:ae:53:86:cc:e4:74:3b:52:0e:98:6c:
         82:92:8f:be:db:10:74:e2:e2:f7:94:e7:96:c1:30:d7:ea:ed:
         c9:35:e0:a4:75:cd:1b:28:59:4b:a0:44:05:e7:bf:2a:c7:6f:
         3b:67:01:0f:7f:18:59:d4:11:e0:c1:4a:95:83:9a:0e:10:ec:
         c5:5b:6f:82:0d:75:17:c6:1d:e1:87:5b:15:16:9f:32:cf:ea:
         19:9c:c8:ce:e7:9e:a3:17:26:54:ad:be:65:72:6c:2b:d3:a5:
         91:e9:ad:98:d2:2d:dc:07:c2:3b:43:59:01:2e:12:28:0e:5d:
         fe:00:02:2f:70:48:ee:dd:2f:10:fd:e2:f7:6f:c3:fd:35:24:
         d7:5c:c5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----