Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
File:                     jPCwtGoI0ecPy92Hetk5oBMuEmk.mft (raw, json)
Hash identifier:          +Mx8BW9Uk70hgXEcTUocdfXNwFLMnqEPCrYBqioXCwk=
Subject key identifier:   EB:1A:80:D9:E3:AE:9C:C0:A7:86:B2:33:D9:FF:90:A8:F3:97:17:9B
Authority key identifier: 8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69
Certificate issuer:       /CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
Certificate serial:       01962F3DC2D353A8B8A091C04D43A73DC8D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
Manifest number:          108D
Signing time:             Sun 13 Apr 2025 13:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:38 +0000
Files and hashes:         1: Gh9PpfuY5LxhoKf93mfL5cK3chM.roa (hash: h2BIVV97ReDZkfRDJTGtHCoQkarTn+cxIbkViPsb5Nw=)
                          2: jPCwtGoI0ecPy92Hetk5oBMuEmk.crl (hash: maeQ43ey+b/RA7c5iB5N2YQOXn5K6Z7zItwd1VkhpJA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c2:d3:53:a8:b8:a0:91:c0:4d:43:a7:3d:c8:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
        Validity
            Not Before: Apr 13 13:01:38 2025 GMT
            Not After : Apr 14 13:01:38 2025 GMT
        Subject: CN=eb1a80d9e3ae9cc0a786b233d9ff90a8f397179b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cd:0d:b0:83:35:26:09:23:fb:a4:80:05:aa:
                    fd:e5:85:9d:f9:ad:37:67:81:19:9c:6d:af:a1:0f:
                    00:36:7d:cd:53:b1:4b:c0:72:12:96:dd:4f:a8:fa:
                    74:c6:dd:4a:9a:6e:d5:1c:5a:08:1f:ef:30:cc:32:
                    e1:e5:80:23:eb:94:be:2c:8d:bc:98:32:d9:75:d2:
                    ca:ec:ed:e5:fd:88:6a:f2:65:64:c1:e4:db:f4:33:
                    9d:1f:6a:30:3c:87:f6:13:f1:03:d4:a9:63:02:a6:
                    05:66:fd:e1:74:72:9d:04:de:67:e5:a3:e1:29:2d:
                    64:7e:79:6d:17:6d:fa:65:b9:6f:10:56:f9:f7:6d:
                    14:5e:77:21:45:7c:94:fb:5c:d0:e9:20:08:13:bd:
                    ea:e7:b0:7d:e3:78:5a:9a:5a:8f:cb:5d:ce:9e:f5:
                    aa:30:94:c6:11:b5:5a:24:ca:c8:6f:b4:2b:a8:f3:
                    99:34:4b:3a:40:c4:67:80:a3:d8:0d:2c:df:f5:32:
                    28:ae:88:31:cf:65:33:dd:1b:fa:db:31:f4:1c:2e:
                    2f:55:bb:96:3a:5b:0a:7d:5f:13:21:5f:40:9f:d8:
                    3c:6a:9a:d0:42:34:8a:f3:f9:1e:de:bf:4a:c4:21:
                    40:f4:3e:42:00:7d:26:30:6c:45:3d:a8:a7:af:a0:
                    25:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1A:80:D9:E3:AE:9C:C0:A7:86:B2:33:D9:FF:90:A8:F3:97:17:9B
            X509v3 Authority Key Identifier:
                keyid:8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:71:91:79:27:f5:37:c4:f7:1c:c1:c5:7c:bd:45:c9:62:a3:
         07:16:40:d0:91:1b:b4:50:55:dd:3d:14:08:34:ac:9b:02:08:
         12:36:4c:b3:32:12:c0:ae:1d:aa:d0:99:ad:60:64:10:9d:1a:
         c1:e4:fe:03:83:01:8f:9c:52:37:cd:8d:a5:37:d3:3c:ff:07:
         4d:7b:d4:94:42:b9:f8:d8:0f:87:8a:9b:c1:dd:ef:90:65:fd:
         93:29:66:0b:c7:50:30:e6:21:ad:c2:4d:c7:1c:05:44:00:05:
         33:e7:cf:dc:4c:01:15:dd:80:5f:f6:94:78:35:6b:f5:5a:0d:
         ac:89:d6:4b:9c:08:6e:04:23:ee:55:01:6b:7d:c1:4c:d6:82:
         99:61:14:81:bd:c7:7f:3e:9b:aa:67:b8:ba:bc:fd:cb:3d:85:
         e3:4c:8d:ba:f5:e2:c3:59:50:81:de:ab:04:28:6f:e3:a2:11:
         65:5b:8e:6a:f4:40:2a:c2:39:ae:48:0c:01:c4:ba:e7:a6:cb:
         07:c9:85:c2:45:7d:13:bc:a8:35:c9:1a:32:54:19:5e:27:2f:
         c7:21:dc:5a:8f:b5:45:30:86:29:e8:fc:58:d5:b6:20:72:b0:
         6d:e5:5a:63:83:b3:fd:1c:e8:65:2c:70:e3:be:32:0d:d7:b6:
         0f:03:5e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----