Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.mft
File:                     jLb-ZWc_sSi7RFpfTfubpY4BmFQ.mft (raw, json)
Hash identifier:          yyqRN/UV+uQ9KdJmFKVgrnnlGQ1P2IWmQf5eJuCQ9uc=
Subject key identifier:   D3:69:3C:E2:DB:28:2C:57:5D:75:A0:17:AC:27:F0:4F:60:50:15:BE
Authority key identifier: 8C:B6:FE:65:67:3F:B1:28:BB:44:5A:5F:4D:FB:9B:A5:8E:01:98:54
Certificate issuer:       /CN=8cb6fe65673fb128bb445a5f4dfb9ba58e019854
Certificate serial:       01954710A9890A82BE22AFA54FE7DF3AADB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.mft
Manifest number:          02C5
Signing time:             Thu 27 Feb 2025 11:00:29 +0000
Manifest this update:     Thu 27 Feb 2025 11:00:29 +0000
Manifest next update:     Fri 28 Feb 2025 11:00:29 +0000
Files and hashes:         1: jLb-ZWc_sSi7RFpfTfubpY4BmFQ.crl (hash: 07WbVnwOSnfe8ePnc9tBaupYPZCnhKaZ62Tkzh5amm4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:10:a9:89:0a:82:be:22:af:a5:4f:e7:df:3a:ad:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cb6fe65673fb128bb445a5f4dfb9ba58e019854
        Validity
            Not Before: Feb 27 11:00:29 2025 GMT
            Not After : Feb 28 11:00:29 2025 GMT
        Subject: CN=d3693ce2db282c575d75a017ac27f04f605015be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:58:4e:74:da:ab:e0:8a:73:1f:80:06:58:66:
                    14:37:3d:2c:55:c9:32:dc:dc:f6:f3:df:17:85:78:
                    81:c0:ef:a1:a2:56:86:eb:90:f3:cc:73:33:83:a7:
                    cf:f1:9c:88:1e:b8:86:63:c5:89:50:15:25:15:f6:
                    fc:e7:df:96:17:f9:45:8e:fd:84:bc:c5:5b:62:d1:
                    20:f6:9f:4f:47:01:8f:45:e7:ca:b3:0e:27:7d:be:
                    f1:d1:a1:4c:2f:45:4f:bf:03:67:e6:b7:24:14:4c:
                    99:6d:69:ba:a0:a3:19:fa:f8:c4:2e:bd:f5:1e:82:
                    22:3c:64:56:de:0f:f6:87:04:a0:7f:e9:0b:b5:55:
                    64:e5:0b:13:2d:53:91:f7:97:b3:27:33:5d:94:31:
                    91:2b:4d:1e:d2:83:a6:c8:c3:8d:83:d2:88:aa:5f:
                    bd:4e:2a:ff:41:14:70:11:3e:37:32:b9:72:33:2a:
                    a0:0e:ee:09:f1:24:6f:52:57:bd:9c:55:10:63:85:
                    71:80:02:a9:a0:1c:06:fb:c2:c9:02:87:29:07:c9:
                    4a:8a:44:88:03:cc:12:45:d6:41:5c:b6:eb:12:6a:
                    c2:ee:4c:76:34:d2:c3:bc:77:e2:8b:58:62:04:ad:
                    35:57:db:6a:59:d4:10:dc:2a:c8:af:de:43:d0:27:
                    5a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:69:3C:E2:DB:28:2C:57:5D:75:A0:17:AC:27:F0:4F:60:50:15:BE
            X509v3 Authority Key Identifier:
                keyid:8C:B6:FE:65:67:3F:B1:28:BB:44:5A:5F:4D:FB:9B:A5:8E:01:98:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d6:04:74:ed:00:ec:cf:73:b5:60:62:88:3a:1d:8d:08:6a:
         ee:8c:46:45:23:92:64:8a:65:c7:5b:01:98:e7:da:6b:ef:de:
         b3:ba:52:03:71:8d:63:f9:63:74:e1:05:85:91:f4:d8:85:9f:
         d1:9c:ef:fc:0a:8a:b3:fb:dc:0d:4f:09:40:ab:1b:08:7b:2c:
         4c:58:07:02:98:70:fe:71:a7:6e:0d:98:38:39:fb:e7:8e:8e:
         32:80:05:e0:cc:11:98:3c:a9:a5:27:0b:ff:c9:43:2e:08:ff:
         a7:f2:45:49:50:c4:94:95:94:ae:43:21:fe:5b:e2:e2:72:94:
         48:97:27:34:0c:ee:53:f1:b5:de:c3:0b:2a:5e:38:b5:6d:f2:
         64:cc:61:12:26:b1:92:5e:f5:99:fb:db:0b:6b:a1:65:ab:d9:
         b0:bb:bd:0e:57:71:f4:d2:b1:d4:12:ac:93:d9:a4:b8:b2:f0:
         8d:2c:d0:27:d8:34:b2:b2:3f:65:25:dc:a8:a3:ff:5c:11:6d:
         c4:81:60:e3:48:47:84:71:6b:a7:f3:ea:73:8e:09:13:53:22:
         b3:29:67:43:40:f2:04:61:3e:89:fb:74:d3:9f:dd:92:3d:fe:
         d0:64:4c:6e:91:41:db:33:ae:76:7d:ed:b4:44:b1:2e:99:85:
         4f:81:23:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----