Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
File:                     jmNwTVUB7XWm4glm6_B6NlVbGrY.mft (raw, json)
Hash identifier:          lmXW38S30QknVXIEQkOIXw7xzMg04KZbLmfB8TxI2tE=
Subject key identifier:   5B:A8:39:D0:95:CA:DA:E9:FF:DA:DE:1A:9B:2E:EE:4C:59:41:70:3A
Authority key identifier: 8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6
Certificate issuer:       /CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6
Certificate serial:       01962E61D4CACB30133EDDD376D13BFA3071
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
Manifest number:          0BCB
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: IzJAsPZQ1UGxFANdsG3oY69uKXA.roa (hash: CcyMr2iMEV8JAHDDzlmMrcymUQDZ/T8pHrLiuemKNGk=)
                          2: jmNwTVUB7XWm4glm6_B6NlVbGrY.crl (hash: 34EzH3HzmmWW3elk5qyxDViSAWYZm7QEi7tZbJMAiy0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d4:ca:cb:30:13:3e:dd:d3:76:d1:3b:fa:30:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=5ba839d095cadae9ffdade1a9b2eee4c5941703a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fc:ce:cb:92:e6:df:a3:a9:44:4e:00:fe:26:
                    17:bb:f5:b0:29:a6:f6:36:41:20:de:a6:50:97:c7:
                    c1:2b:b4:c6:94:af:4f:75:26:b3:75:26:d9:b8:9e:
                    fa:ef:93:9c:d2:7f:4b:f7:85:a1:64:07:f5:22:16:
                    90:c9:e9:7d:33:5f:d7:8b:38:94:f2:fc:25:38:ae:
                    7c:55:a7:d6:64:0f:b1:b8:18:67:cc:1c:d6:85:f9:
                    62:64:2e:9b:0e:7d:ad:5f:54:52:6f:e8:3f:f4:d3:
                    4b:96:62:0e:48:c4:67:9e:5f:98:c1:46:65:33:c8:
                    5b:ce:45:94:6d:98:83:f1:a5:cb:8c:4f:10:38:68:
                    58:93:ff:76:f2:93:af:79:7a:e1:ec:62:3e:53:95:
                    70:ad:24:b3:33:6c:21:76:75:51:ac:32:cc:92:af:
                    4b:1d:75:ae:ce:19:bd:04:98:df:e8:e3:32:e7:6e:
                    da:e6:5d:5e:c7:ae:6f:da:ac:4f:c1:9a:1f:94:62:
                    63:97:d3:3d:61:2e:a1:2a:74:e9:9b:c7:a1:86:06:
                    06:64:3b:6c:57:9e:5e:02:3f:11:b4:5f:45:41:1c:
                    b8:e4:af:d3:a1:e2:56:2a:8f:19:05:72:d0:9c:6f:
                    3c:40:bf:8a:b7:fc:8a:d4:0b:35:83:c6:01:3d:99:
                    1a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A8:39:D0:95:CA:DA:E9:FF:DA:DE:1A:9B:2E:EE:4C:59:41:70:3A
            X509v3 Authority Key Identifier:
                keyid:8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a1:75:df:af:5c:19:fa:3a:13:7a:72:3c:ee:7f:c2:6d:e6:
         83:c5:aa:ff:4c:d8:18:cb:e1:ce:b8:56:0f:0f:4a:13:ee:06:
         5d:af:10:dc:61:39:db:80:16:8c:50:11:c4:e1:28:3e:94:e0:
         c8:a2:99:8b:4b:07:53:a9:45:c7:d2:03:f5:34:c5:ee:e7:73:
         6f:51:6a:01:d4:5a:4e:ea:6b:a1:19:5f:70:82:69:4d:71:24:
         bd:e6:b7:df:90:4b:e8:70:e0:5a:6c:27:2a:57:9f:16:93:d0:
         87:72:4a:97:e6:53:70:fd:b5:df:2a:9d:48:92:91:d9:eb:15:
         2b:c8:ac:c1:66:9d:eb:5b:d0:a2:fc:69:a7:70:85:82:65:0c:
         de:d8:f4:28:e3:c6:ca:a5:41:42:c4:69:2c:24:39:3a:bf:52:
         71:8c:ee:f8:70:21:26:21:11:e4:69:4f:12:a3:f7:4c:c9:d3:
         ee:b8:a5:0f:44:8d:4e:43:f0:e3:33:26:64:92:24:6b:cb:95:
         ba:42:d2:b4:0d:01:a1:3e:08:1f:c0:5e:4a:d7:ca:18:bd:7b:
         4f:ba:0e:ee:6d:2a:3b:ca:fb:3d:0c:d7:08:2b:88:21:4a:35:
         41:50:0f:d6:ee:86:ac:bc:c1:e3:3c:77:ad:c6:6d:ce:b9:44:
         22:6a:fd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----