Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft
File:                     jgRb_s0rviTTP1MJ20fIqnejsQw.mft (raw, json)
Hash identifier:          fNukSUAfnHy5KOC2buWZpkwCe2PjMm9tY2cxpPVG6zI=
Subject key identifier:   4C:73:37:1F:7C:66:AC:CC:59:FA:DF:3B:A8:3C:B8:74:23:DB:94:B7
Authority key identifier: 8E:04:5B:FE:CD:2B:BE:24:D3:3F:53:09:DB:47:C8:AA:77:A3:B1:0C
Certificate issuer:       /CN=8e045bfecd2bbe24d33f5309db47c8aa77a3b10c
Certificate serial:       01962F3DD1199B056FA666B877BBA2EE50DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft
Manifest number:          11A0
Signing time:             Sun 13 Apr 2025 13:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:42 +0000
Files and hashes:         1: gdU2cKMCd_BtDDJgSD2HY00mPGM.roa (hash: RJwgl5pMoPPfHnsTPxLoSvX0DBqj4aREjSsl8MZfpXk=)
                          2: jgRb_s0rviTTP1MJ20fIqnejsQw.crl (hash: iNify/TTLPheWhbBo4dS5qbdVmVPk/oIx64I/OGcE1I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d1:19:9b:05:6f:a6:66:b8:77:bb:a2:ee:50:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e045bfecd2bbe24d33f5309db47c8aa77a3b10c
        Validity
            Not Before: Apr 13 13:01:42 2025 GMT
            Not After : Apr 14 13:01:42 2025 GMT
        Subject: CN=4c73371f7c66accc59fadf3ba83cb87423db94b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:da:97:5a:93:0f:d4:cb:23:47:7d:16:30:6b:
                    99:72:2f:1e:ee:0f:97:25:29:9a:86:3c:99:5b:d0:
                    91:4d:53:4c:f8:b3:30:7a:e0:8c:7e:22:43:5a:1f:
                    d2:a0:b1:80:19:14:e4:c1:84:01:17:7c:32:97:f9:
                    66:85:36:05:81:b4:3d:f3:58:9a:31:e6:a4:35:37:
                    3a:93:53:a8:c5:78:bb:1a:af:f1:89:23:13:59:f1:
                    a3:2a:24:27:90:cb:81:79:b7:0e:5c:c2:5c:ff:93:
                    6d:1d:51:ab:46:59:89:91:12:80:6e:26:60:c4:81:
                    a5:10:d5:31:47:9b:63:a7:11:5d:ec:ee:04:5c:ec:
                    5b:ee:54:da:b7:ba:02:4c:90:0a:ca:e6:0b:b6:be:
                    1f:65:1a:b0:80:24:10:75:09:71:c1:57:28:1e:c6:
                    98:76:b7:07:64:86:9c:09:45:57:ab:2e:59:f6:50:
                    9c:2e:47:93:c4:ef:f9:75:a9:ff:a7:18:e3:29:f4:
                    20:18:e6:45:c9:eb:4c:42:6a:a8:df:bc:74:b8:e2:
                    e5:70:3c:51:9b:e1:02:55:01:d6:39:71:00:83:76:
                    0d:8b:1f:48:17:f7:8a:05:85:8b:25:15:a3:80:5b:
                    59:8f:5c:41:b8:26:e8:eb:53:c7:81:e5:d0:fd:4a:
                    b4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:73:37:1F:7C:66:AC:CC:59:FA:DF:3B:A8:3C:B8:74:23:DB:94:B7
            X509v3 Authority Key Identifier:
                keyid:8E:04:5B:FE:CD:2B:BE:24:D3:3F:53:09:DB:47:C8:AA:77:A3:B1:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:7a:7e:a5:5e:86:d7:3f:ef:b5:a3:56:c9:33:87:47:4c:09:
         73:13:3b:db:8c:ff:01:a3:17:e1:66:5d:92:f7:d2:af:64:63:
         f7:92:3c:00:78:76:07:a6:93:ef:ad:82:df:85:3b:3e:d6:cb:
         24:f4:1d:e7:91:98:83:95:39:bc:f7:8d:78:65:82:9e:dc:05:
         16:26:41:d0:7e:20:10:ce:58:0d:f9:80:01:0e:87:7f:eb:38:
         c0:01:e5:84:04:5a:6d:0c:ec:2a:cc:fa:e5:8f:96:34:28:ac:
         84:af:c1:cb:d5:a0:ee:b7:ea:e7:7e:59:a7:87:85:dd:06:b8:
         df:f6:18:b5:e8:b4:2b:7c:d7:d8:0a:aa:ca:ac:73:1a:0b:c0:
         d1:60:c6:26:0b:6a:3a:9d:56:ef:ce:02:1a:b2:02:11:10:03:
         80:c8:dc:8c:e8:65:18:24:97:4e:a0:b8:c5:ea:60:61:37:ea:
         da:b8:fb:01:e0:fe:18:84:69:6c:e8:56:c1:71:82:2c:7f:fb:
         da:7e:da:96:a5:17:9c:90:0b:57:07:4e:df:26:53:19:c3:e3:
         f9:c2:fd:fd:28:69:da:7e:96:3b:70:26:4c:8b:25:8a:1c:6c:
         b4:e6:43:38:ff:c5:98:fc:c7:71:b4:35:c4:7b:84:0b:7b:a4:
         c4:f6:0d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----