Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
File:                     jbNHdLAZeShP2edU_qaPo8YXg9A.mft (raw, json)
Hash identifier:          XgoAzZclGpbs5HcKKOn45SIwMgdE+1KOEiTIyZCaO5c=
Subject key identifier:   88:AD:93:E5:FE:EA:DF:80:31:C6:16:91:0B:11:60:62:10:EB:A8:20
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Certificate issuer:       /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial:       01962E2B4FAC0BAD1FE56D264F7028905D63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
Manifest number:          1528
Signing time:             Sun 13 Apr 2025 08:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:52 +0000
Files and hashes:         1: 4xDjMGoR5cxZD0TEt45OTNLuzZ4.roa (hash: aWtnbMWrytraTfwmFZQXH9y0uPlTO0CdQ7LWoLXK164=)
                          2: aXs8DBYHqH16kFI25mAmO1bJxx4.roa (hash: d1LoCC9lmf7ZBBsN52kpeKsNgpbykeADMERL6qdd4Bg=)
                          3: jbNHdLAZeShP2edU_qaPo8YXg9A.crl (hash: 8trsRR7viF0xAzQJop/a94R0XpEWzIQOOxf0ntPZ0B0=)
                          4: nFyZh5x08lIz1JqhlP26fbzVfb0.roa (hash: QQhMNmFLQU4RqfQz/4LypnupJTRIGeWGcOivoM9k/tw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:4f:ac:0b:ad:1f:e5:6d:26:4f:70:28:90:5d:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
        Validity
            Not Before: Apr 13 08:01:52 2025 GMT
            Not After : Apr 14 08:01:52 2025 GMT
        Subject: CN=88ad93e5feeadf8031c616910b11606210eba820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:23:cf:d2:07:48:fa:96:85:c5:7c:df:1e:6a:
                    7b:1e:3c:fb:4c:d9:06:d5:5f:d0:2e:88:07:af:62:
                    27:0e:fa:ab:d9:71:7f:24:2c:d5:d4:ba:e0:8e:fc:
                    f2:39:0c:2b:91:ca:f0:38:fb:8c:4a:56:ab:19:7e:
                    59:6f:60:4a:b2:f3:55:e6:1d:fb:76:48:fc:ca:c3:
                    2d:7e:dd:de:61:37:18:c7:ad:ff:63:38:9a:dc:1b:
                    13:1d:90:9e:ff:e1:f7:fe:f1:77:3a:97:28:ac:d7:
                    b0:9b:45:c5:09:99:65:63:f1:b3:af:e4:f9:7f:b4:
                    2c:de:34:9c:66:10:6b:49:0f:f7:3d:a8:17:46:a0:
                    82:c5:ad:f9:a3:98:2a:8d:eb:f8:ff:0d:71:fc:bb:
                    0e:e7:8d:73:d6:e8:70:79:bd:3b:ea:ca:9c:ba:b4:
                    e4:27:15:c9:c7:1f:f9:71:bc:c4:20:48:79:e5:f3:
                    41:64:8a:ac:29:f4:af:ae:b6:e2:b7:98:f6:1e:94:
                    5d:b3:49:fd:1d:b7:02:8b:83:76:c2:2a:71:52:2b:
                    df:5b:03:25:02:95:1a:8d:6b:38:46:81:80:e6:82:
                    a4:fc:e3:15:b4:d7:71:1f:e6:33:4c:5d:ef:41:9b:
                    5c:f0:40:d0:9f:57:19:de:0c:3a:7b:86:0f:ed:7b:
                    3d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AD:93:E5:FE:EA:DF:80:31:C6:16:91:0B:11:60:62:10:EB:A8:20
            X509v3 Authority Key Identifier:
                keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:94:bb:bc:57:50:13:0d:1c:ba:ad:5c:c8:0d:dd:d5:0f:3f:
         1a:df:80:60:5e:7a:06:1c:ab:6c:cd:0a:c3:e5:b1:45:01:ba:
         d0:d3:40:b2:f5:89:7f:dc:7d:e2:90:1f:69:a7:3c:3e:d7:b1:
         2a:2c:4f:77:d4:03:75:84:f3:db:88:43:c6:3c:e1:ae:8e:2b:
         54:eb:0e:f5:b3:d8:3b:cd:41:69:ca:18:97:52:c7:e4:ae:47:
         75:0f:29:08:e2:13:66:c7:36:83:c9:f1:79:39:23:9f:8a:3f:
         a1:7e:aa:ca:fd:50:87:b9:c3:f2:38:b8:a1:42:f6:77:03:25:
         cb:05:72:a2:2d:6a:3b:91:71:fe:13:4f:5f:35:a8:5e:ea:c4:
         2d:b6:91:83:71:95:99:bb:ee:9b:81:49:ce:17:d7:f9:52:20:
         17:3d:76:91:50:be:d4:d6:37:4b:0a:76:a5:db:fa:78:ae:ba:
         02:40:3b:cd:88:2d:c2:a8:5d:5c:63:39:b5:6c:23:09:62:d5:
         09:54:73:4f:23:1b:48:21:34:72:03:2f:ea:26:01:d1:1a:f3:
         6c:e3:39:eb:53:48:88:0a:e9:89:35:19:ca:82:eb:54:ce:4f:
         c1:d6:69:71:6c:17:2a:99:3d:88:b8:53:33:bb:4f:b2:59:4f:
         5a:65:43:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----