Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
File:                     jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft (raw, json)
Hash identifier:          Oov3v+v1VBEoq53h27dIS+KDvU0CW8AJGKOVV4ukpq0=
Subject key identifier:   B2:37:3D:A6:49:D1:01:3A:79:6E:DA:5F:DF:EE:8F:53:E7:F0:F4:75
Authority key identifier: 8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9
Certificate issuer:       /CN=8cd99f3bfe992736a3885c796324db33977fa7e9
Certificate serial:       01962E99B01D100FDB8208A3FC7C3161EAD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:02:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:26 +0000
Files and hashes:         1: jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl (hash: LO3cspYHnvYO1+p2/eWe3NWpfebCOQFg5a9wmu8PIgM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b0:1d:10:0f:db:82:08:a3:fc:7c:31:61:ea:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cd99f3bfe992736a3885c796324db33977fa7e9
        Validity
            Not Before: Apr 13 10:02:26 2025 GMT
            Not After : Apr 14 10:02:26 2025 GMT
        Subject: CN=b2373da649d1013a796eda5fdfee8f53e7f0f475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:34:02:34:07:1a:fc:12:81:07:df:a3:23:
                    b8:fc:41:88:c3:b5:c9:22:35:43:c0:03:67:e9:36:
                    e6:e8:9e:50:dc:98:12:52:85:14:74:b4:ec:29:63:
                    4b:01:51:6a:e2:44:85:25:07:f9:2a:4f:f5:52:d7:
                    98:2d:98:2a:c1:1b:68:22:c3:b6:f8:b0:fe:54:3e:
                    e2:ad:d7:aa:ef:c6:f7:da:59:ce:0d:5b:3c:c1:5e:
                    a8:6b:29:b7:f8:0b:54:ae:b3:21:e4:1d:93:8a:51:
                    9e:ee:19:8b:75:14:8c:72:e4:6a:69:ff:d6:08:c0:
                    ce:b3:6e:71:c4:17:f2:6a:3f:74:8a:3e:15:56:aa:
                    e0:f2:4b:23:a2:77:b8:22:c1:4f:2a:ec:e5:af:5b:
                    cf:9d:03:2c:a7:a7:14:9d:79:99:8f:d5:67:81:7c:
                    ba:7d:97:fd:1c:b6:b5:50:da:9f:22:ed:47:08:31:
                    cd:35:1e:6c:95:45:64:79:e9:15:29:d5:a7:bf:ff:
                    7d:b9:f1:0d:1d:db:89:49:2e:fe:72:7a:2d:5b:c9:
                    df:26:78:67:4c:d3:f0:a8:09:b0:14:9f:96:75:8c:
                    1d:ca:97:44:c0:d5:2d:00:50:d4:16:d1:51:2f:6e:
                    fb:28:2d:2f:ec:60:12:d9:58:a8:10:f8:a4:5e:bf:
                    92:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:37:3D:A6:49:D1:01:3A:79:6E:DA:5F:DF:EE:8F:53:E7:F0:F4:75
            X509v3 Authority Key Identifier:
                keyid:8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:cf:a9:4a:1e:f5:d9:a0:b5:ca:40:78:e5:5f:2c:e4:71:58:
         fd:91:42:ed:8d:c9:e2:1b:01:50:96:fd:0c:87:39:1a:ab:8a:
         3a:83:04:a7:67:88:bf:62:93:5e:a5:4f:be:1d:22:8b:28:de:
         d3:f6:2c:8a:29:2d:2f:4e:90:8e:ae:5a:3c:c4:e7:50:46:e9:
         76:9a:16:69:11:6c:3c:e0:04:2a:4b:b4:4a:e2:77:0c:3c:19:
         c5:de:03:18:62:94:05:0d:8d:30:5b:f2:25:33:80:45:9d:14:
         5e:71:94:8d:cb:3a:40:26:cc:03:1e:c0:e6:bb:98:67:77:30:
         30:6e:04:6e:05:02:3f:17:ca:2c:af:0b:26:f7:fe:bb:dd:db:
         22:8f:51:20:8d:e6:3e:99:51:9f:81:5b:06:53:e2:02:bc:1e:
         59:58:42:f5:6b:d9:fd:bb:02:e4:6b:ce:3c:b8:2e:20:1e:b1:
         59:2f:70:a5:17:54:01:2b:68:22:5d:b0:4e:14:f1:32:00:79:
         26:48:8f:71:13:6a:0d:f9:13:00:19:d4:60:09:b3:98:c4:ba:
         14:e5:ae:16:88:f9:cd:b8:97:7f:c3:90:e9:72:08:cf:4f:fc:
         6d:0b:38:4a:75:e5:c5:e9:96:ad:0c:f2:87:7b:a9:ef:d4:4d:
         a3:70:d9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----