Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.mft
File:                     jrsOsZ53d9cDgAD2wS053tEgQkI.mft (raw, json)
Hash identifier:          baM4AOKX/TVKWvJHjw1siHs8K0d8XZ5MGYNj91EECGc=
Subject key identifier:   AC:80:72:AE:7B:A3:CA:1D:A3:76:5E:2A:25:47:D5:A6:73:D9:40:5B
Authority key identifier: 8E:BB:0E:B1:9E:77:77:D7:03:80:00:F6:C1:2D:39:DE:D1:20:42:42
Certificate issuer:       /CN=8ebb0eb19e7777d7038000f6c12d39ded1204242
Certificate serial:       01962E61A521F02EB6F428D08C2A0F9A5AC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrsOsZ53d9cDgAD2wS053tEgQkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.mft
Manifest number:          0B24
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: 68-2o2gnqeFje-83JI2NL7vcFCs.roa (hash: 5XT1BGaZiWzYIBY9EJMQdD9z2CvFYvirF/G5S8/gceM=)
                          2: jrsOsZ53d9cDgAD2wS053tEgQkI.crl (hash: yvki3OrbLX9q3CfrFT9MX+qOz1ttN/wTYcNQn+x9P5c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a5:21:f0:2e:b6:f4:28:d0:8c:2a:0f:9a:5a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ebb0eb19e7777d7038000f6c12d39ded1204242
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=ac8072ae7ba3ca1da3765e2a2547d5a673d9405b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a3:2d:7e:85:b8:c1:d6:5c:ee:96:58:ca:d0:
                    12:53:c3:ef:d2:10:b6:ae:ea:e9:4f:b4:43:db:38:
                    8a:44:d8:2b:bc:86:e6:ec:04:d4:24:9e:c1:73:37:
                    0a:f9:79:4d:f5:38:c1:3e:88:2c:15:74:0c:99:5b:
                    02:3b:74:f7:70:6b:ba:68:a0:cc:2e:8e:15:3a:54:
                    e2:4f:d6:eb:21:31:a2:83:08:98:30:71:2e:0d:a8:
                    0f:33:41:d2:77:9b:2c:df:9c:ee:56:63:70:e0:12:
                    57:e2:a2:b1:24:da:36:e9:48:35:de:22:fb:a5:b5:
                    27:fc:07:41:4f:83:16:15:61:51:d0:a8:d6:9c:24:
                    ba:e1:c5:b3:e2:f4:b8:0c:2b:e3:81:11:c9:a5:57:
                    63:58:7c:ff:ac:07:5c:84:32:77:1c:70:2c:66:ef:
                    9a:d9:75:ab:b6:28:87:24:76:9e:be:cf:3b:9b:08:
                    ef:a9:3f:69:d0:2c:b6:af:55:9f:10:98:8e:fd:98:
                    38:03:cc:fb:ff:11:64:cd:5d:97:b6:62:0b:83:1d:
                    52:26:5f:6b:2c:d6:3c:2f:c2:f2:7c:48:97:d3:ad:
                    ca:ed:d8:14:d8:d6:29:ff:ca:93:a8:96:9f:ec:d0:
                    f2:cf:1e:7c:65:50:c6:ec:9f:4f:fc:a4:66:d5:d9:
                    dc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:80:72:AE:7B:A3:CA:1D:A3:76:5E:2A:25:47:D5:A6:73:D9:40:5B
            X509v3 Authority Key Identifier:
                keyid:8E:BB:0E:B1:9E:77:77:D7:03:80:00:F6:C1:2D:39:DE:D1:20:42:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrsOsZ53d9cDgAD2wS053tEgQkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:1f:1f:1d:87:32:b3:17:bb:54:29:81:db:09:0b:0f:80:94:
         9f:c6:ab:d3:82:95:d0:89:cf:10:a6:58:54:fa:b5:d6:7a:38:
         54:57:3d:53:ca:fc:c1:1c:03:0e:35:3c:1a:3f:d6:a8:f4:0d:
         94:f8:36:7c:8c:4a:f5:7d:a7:5c:e2:21:01:8d:98:8f:6d:41:
         a0:ec:56:81:9f:a7:c9:43:8a:d8:93:e4:e8:c5:05:2d:00:8d:
         8a:e5:c9:60:4d:b1:c4:40:cd:0d:23:1d:14:9e:3f:40:4c:b0:
         84:b0:10:6c:f5:ca:1d:1a:13:76:f5:d8:bb:cf:d5:a3:56:49:
         98:fe:5a:4c:f3:72:f9:b0:2a:8c:ac:9d:56:1a:70:14:9a:50:
         79:7d:46:1c:db:ca:c2:59:b9:e3:be:86:30:95:2c:f3:56:09:
         22:0a:e6:fd:27:b9:d2:78:3e:93:63:5f:6e:6f:6e:5a:5f:30:
         b1:80:1d:36:b0:28:cb:7c:3d:ca:f4:77:24:52:59:e8:0a:05:
         a7:e7:b1:68:e4:57:91:c1:ba:14:3b:10:bc:02:08:12:d2:b0:
         37:4e:79:8f:b6:06:7c:76:77:bf:cd:b3:36:29:69:29:86:fc:
         63:3e:4f:a7:bd:4d:75:5b:4d:11:29:36:bb:75:c7:25:7c:36:
         f0:4b:be:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----