Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
File:                     jV8GavgNDp8H6oeyS9r6WdH18m8.mft (raw, json)
Hash identifier:          y+X5QtLeJ1NEAdG+noRR0d6DUQGLmmMZxHLHp4wLoeA=
Subject key identifier:   94:BF:5D:FF:67:AB:51:52:F9:7E:C7:90:23:15:FB:E7:D5:51:94:0F
Authority key identifier: 8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
Certificate issuer:       /CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Certificate serial:       01962ECFCFEB683D12F07B5FC34791AC82CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 11:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:33 +0000
Files and hashes:         1: Nu6PzktHZPkZpTfNWDAC1WQ31fs.roa (hash: 0olptWKqLuwlqgvdBxIZwPcl+HWoWf7gPYNB7LvpZJo=)
                          2: jV8GavgNDp8H6oeyS9r6WdH18m8.crl (hash: o+/FrOUonPielavnJU5kDzRXHdey9wwMrAo0lddZcDI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cf:eb:68:3d:12:f0:7b:5f:c3:47:91:ac:82:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
        Validity
            Not Before: Apr 13 11:01:33 2025 GMT
            Not After : Apr 14 11:01:33 2025 GMT
        Subject: CN=94bf5dff67ab5152f97ec7902315fbe7d551940f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cf:1b:54:b8:73:05:ff:64:8d:31:e4:3b:53:
                    e1:6d:6f:69:34:88:88:44:8f:a7:48:c7:70:63:b9:
                    cb:e8:9f:da:76:5b:1f:d3:5a:db:b6:d2:ec:01:16:
                    d6:ef:5f:89:a7:b0:45:f8:f6:de:c2:d8:66:fe:0e:
                    38:04:bb:eb:85:5c:02:9e:77:7e:1f:83:9e:35:a1:
                    2b:cc:f2:f7:aa:54:ed:87:b7:ff:e3:e7:2b:41:9d:
                    94:e7:d9:57:8e:29:db:a3:b9:bc:50:6b:23:c3:59:
                    14:e6:67:53:c8:11:8a:e5:45:6c:c1:04:b7:68:26:
                    5e:1f:06:e3:32:e6:18:03:81:3e:b8:fa:63:94:98:
                    5c:6a:e2:e2:bd:58:68:47:c0:24:a8:8d:d4:c9:bf:
                    c8:a5:a1:5e:df:1e:05:b0:6d:ae:fa:c5:5c:7f:90:
                    b2:2c:93:c2:63:5f:60:fa:da:fe:70:5c:5a:21:f3:
                    81:a2:eb:85:69:48:ce:3e:d7:e1:90:ff:f6:35:ff:
                    69:52:85:c0:be:25:3e:c5:7c:42:6a:51:c4:16:d7:
                    f0:0e:4d:c0:aa:2c:bc:d3:54:0c:6c:84:48:57:8f:
                    f8:02:9f:44:9a:2c:27:10:60:9a:ab:b2:07:4c:66:
                    d6:e9:33:69:88:f4:61:79:25:8d:46:19:36:32:0b:
                    53:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BF:5D:FF:67:AB:51:52:F9:7E:C7:90:23:15:FB:E7:D5:51:94:0F
            X509v3 Authority Key Identifier:
                keyid:8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c3:79:77:f5:61:33:6c:4a:40:68:9a:54:bf:65:d8:7f:15:
         07:ed:72:4b:a3:5d:14:26:78:70:ad:68:89:4b:9e:1c:c9:f5:
         cd:13:88:a3:a1:8b:1c:a3:04:f8:ff:42:2a:88:48:8e:4e:7f:
         15:1b:81:43:cc:56:fe:56:5e:12:a6:16:5f:c8:0c:58:b0:30:
         a2:5a:6f:7b:a5:96:73:41:f6:61:a8:3b:aa:7e:b3:8e:03:6e:
         e9:20:93:5f:03:7e:22:13:99:71:0c:c6:b3:5a:60:44:1b:20:
         a7:98:4b:90:96:af:a6:bd:1c:e0:f6:a5:13:08:e9:3a:ab:37:
         d0:38:e4:13:ae:c0:0b:94:a3:ce:7f:c5:08:01:94:5a:3b:66:
         4e:00:af:76:ca:b7:c0:3d:83:e7:b3:e7:c2:0a:4b:12:e0:ad:
         11:bf:bf:c0:98:4e:5c:c3:65:1d:cf:51:16:5b:38:26:94:d2:
         42:04:b8:89:29:71:06:21:f0:8a:d8:c0:1c:4f:3f:ee:a9:79:
         84:ca:39:70:42:b0:3b:d8:cd:90:1f:4a:e4:d1:ff:bd:ac:7f:
         f5:d3:32:07:34:0d:21:98:b3:b0:3f:8e:74:48:81:f6:a1:16:
         6b:72:cc:e5:a3:20:97:a7:3e:c8:97:1c:fe:ca:e6:e0:18:b8:
         3c:16:52:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----