Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft
File:                     jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft (raw, json)
Hash identifier:          Brsh4Iw97zcm2LuQIDI49n4ecqISmXIvbfhtICIwkoU=
Subject key identifier:   08:1E:E5:15:50:B0:6F:08:76:0D:4C:A2:A2:22:9C:3D:0F:91:95:6B
Authority key identifier: 8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
Certificate issuer:       /CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Certificate serial:       01962E2AD88E1CD0F1DA25F1DD3FFCB517E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft
Manifest number:          1180
Signing time:             Sun 13 Apr 2025 08:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:21 +0000
Files and hashes:         1: Kt2ksaxPkIjtDoeyg1P8yernNDc.roa (hash: wfAd3vob2ra8znve71igmwtD5TyA3SG1S1RzxivWZj8=)
                          2: byPwkkahLGpxY_tW1OLYNjMyZ_Y.roa (hash: QA9SayE2KiT0c9dHKY7N9OrSbz3bY915oFBo7q1THjo=)
                          3: jxNyAMnqFWCj9C_X4QDtKEEUFrw.crl (hash: JkF+PBmtZWyO/TTkVmmvKw5i3dMwB/x3UTts/6NsuI0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d8:8e:1c:d0:f1:da:25:f1:dd:3f:fc:b5:17:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
        Validity
            Not Before: Apr 13 08:01:21 2025 GMT
            Not After : Apr 14 08:01:21 2025 GMT
        Subject: CN=081ee51550b06f08760d4ca2a2229c3d0f91956b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:02:56:a3:32:e8:b7:91:3d:48:8c:14:70:cb:
                    e3:4e:cb:c7:1d:2d:b8:f6:cd:b1:0c:ed:8f:ea:35:
                    d8:2e:86:94:9b:41:b3:30:16:e8:56:da:8a:db:e9:
                    a4:8d:9a:dc:d4:7c:0f:c3:12:a7:e9:cf:41:93:ff:
                    26:16:5e:60:8e:ea:25:f2:72:63:eb:79:ea:19:f1:
                    9b:98:89:1d:af:dd:15:81:b7:84:7f:ed:6b:dc:8c:
                    f3:b5:f0:fb:ee:0c:5c:be:55:32:68:76:e3:eb:24:
                    ad:12:b2:f6:ec:46:7e:4b:2a:c8:93:b7:38:ae:85:
                    0e:7d:84:7b:8a:f2:2b:b7:65:e4:fc:1c:95:54:26:
                    88:70:ec:15:c4:75:e4:0c:96:0b:05:e5:29:97:5b:
                    69:d6:9c:56:6b:65:b2:a5:8c:b9:3d:5e:a1:29:5b:
                    25:0e:53:4d:2a:79:99:ee:d3:42:56:14:fe:0e:3e:
                    cd:ef:53:30:3a:5e:72:ca:ed:3e:0f:0c:06:4a:3a:
                    c1:59:a1:a2:b2:db:68:06:e2:b9:ed:36:b3:c6:0b:
                    b6:cb:69:99:90:db:8c:42:19:30:19:ca:b7:6d:fa:
                    ba:01:93:31:79:a3:da:db:05:2d:ec:92:6f:76:40:
                    bf:3d:e3:6a:d3:35:26:81:d5:67:08:87:3e:e4:96:
                    a1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1E:E5:15:50:B0:6F:08:76:0D:4C:A2:A2:22:9C:3D:0F:91:95:6B
            X509v3 Authority Key Identifier:
                keyid:8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:8b:91:ee:d9:7f:3b:3c:c2:ff:b6:aa:80:af:80:db:cd:88:
         db:6e:62:04:c9:f1:8b:b3:7b:93:c2:73:32:b1:b1:46:b6:4a:
         b6:f1:50:06:ff:bd:01:10:bc:bd:4d:af:0a:22:28:79:d3:ab:
         bf:46:a2:53:38:bc:c8:74:81:0f:ca:76:07:9e:48:64:10:51:
         64:54:e0:d5:21:20:e5:05:aa:82:77:d8:df:aa:2b:59:7a:cd:
         77:8e:3b:7f:30:40:f3:c2:de:68:f5:dd:0c:0d:b4:3d:25:0b:
         b4:4e:25:f5:78:1a:4e:d8:0a:35:06:89:b2:4b:2c:7e:79:b2:
         14:39:ce:1c:2f:99:10:3e:0c:84:f5:8a:96:10:0b:99:c0:d7:
         25:46:39:90:1b:93:a4:e9:65:61:32:dc:42:5f:e3:c7:d2:96:
         bb:24:ba:1f:b9:76:f7:eb:5b:ca:04:4d:60:7d:82:cc:d3:33:
         b3:8c:ea:6e:0a:dc:17:f8:47:03:52:ac:92:ee:4c:f8:e5:5f:
         dd:b9:c2:a7:df:ab:e3:e2:cb:67:8b:26:8f:72:25:ff:29:11:
         09:52:cf:46:bb:d1:a0:11:50:3c:d7:63:bd:8c:b0:30:1e:fc:
         3a:98:68:83:72:31:fe:38:77:e6:26:da:b1:16:37:f2:26:75:
         55:5c:9c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----