Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
File:                     jlo2o46eViR2rnC5FQKOMBhxKRk.mft (raw, json)
Hash identifier:          2zGCXzYUNJUi+5yIFVz6xa9JUtBDtc+VFp3J17IYnS8=
Subject key identifier:   C5:5F:AD:F5:17:70:49:EA:1E:F2:C1:96:A4:0A:B9:BD:36:FE:A1:05
Authority key identifier: 8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19
Certificate issuer:       /CN=8e5a36a38e9e562476ae70b915028e3018712919
Certificate serial:       01962F74BC103CF3481BD0788F022D5C13C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
Manifest number:          088B
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: jlo2o46eViR2rnC5FQKOMBhxKRk.crl (hash: wSqFcLUFPR7CD2WlwPz9mfEg2brvSdjC4UoMC/v+P60=)
                          2: lCFWlcHQXl8OCfG8VkJf_ovcDUY.roa (hash: SWucWn1D4Fv0B4+THeJJxTuUCPWrkWrGEDFRw9TIy8c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bc:10:3c:f3:48:1b:d0:78:8f:02:2d:5c:13:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e5a36a38e9e562476ae70b915028e3018712919
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=c55fadf5177049ea1ef2c196a40ab9bd36fea105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:b4:c7:2f:85:95:a5:74:ce:4e:44:88:7e:d3:
                    20:24:0f:e1:e0:6b:f4:ea:e0:7b:7f:bd:94:a7:70:
                    79:e3:4a:d5:26:73:d7:b6:a7:ff:83:1e:fc:e6:f3:
                    b7:11:d1:85:41:9d:eb:3c:b8:a5:7e:21:da:fb:9c:
                    49:ca:de:3c:8e:02:24:90:67:bd:7f:1a:49:32:16:
                    32:c3:75:89:d3:64:29:82:4d:70:bb:06:3c:3a:6b:
                    46:6a:9b:b5:90:ed:46:92:f6:0b:f3:16:fb:ce:00:
                    ff:4c:50:ea:e5:4d:89:19:5e:66:8b:47:bc:86:ca:
                    69:fe:6b:0e:9a:7a:27:9a:ab:01:37:c7:12:ae:d2:
                    1a:2d:d8:53:66:5a:7f:54:ca:cf:b1:be:e7:9a:94:
                    4e:da:10:3f:65:ed:d5:c9:fd:bd:5b:07:54:9c:af:
                    b8:69:e2:51:5d:05:86:e1:e8:bc:3b:ed:c3:fe:a9:
                    c0:78:91:c2:f6:4d:16:8a:31:ef:e0:21:0f:b3:92:
                    d8:65:71:f2:c8:8d:81:44:78:0a:b3:c6:45:3d:8a:
                    8c:95:f4:72:e5:aa:02:4c:73:46:b5:ee:b2:70:98:
                    11:58:84:99:17:0d:4b:1e:ad:c6:02:de:ce:ac:ee:
                    10:4f:57:49:4d:12:02:e8:ec:66:af:1e:4b:9c:56:
                    ee:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5F:AD:F5:17:70:49:EA:1E:F2:C1:96:A4:0A:B9:BD:36:FE:A1:05
            X509v3 Authority Key Identifier:
                keyid:8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:08:e5:9d:80:b8:2f:69:00:8d:0e:b9:06:29:b8:ec:2c:f5:
         22:7c:30:78:c8:e3:3b:8b:f9:56:1e:ce:c3:b1:13:39:db:1f:
         d3:13:ba:87:1c:31:75:a3:7f:d7:bc:7c:d0:3f:e7:f8:11:45:
         04:20:f5:f7:01:1b:1d:b7:3d:f8:52:e7:c7:42:72:a6:98:5c:
         51:5f:be:f1:ba:c4:11:13:0f:a9:8a:ea:62:6e:8f:02:23:2c:
         37:e0:53:c3:bc:0c:9a:4a:82:01:6e:38:86:1c:5a:91:06:1e:
         3b:fe:41:82:2c:70:29:25:73:84:2c:f7:a7:91:4e:8c:d5:04:
         e5:f9:a4:8c:ef:c0:dc:28:45:ed:c6:d1:95:0c:ea:72:6b:d5:
         c9:49:af:67:87:ed:68:14:d8:02:86:47:58:37:31:69:71:20:
         b8:3d:31:6a:3d:92:30:34:49:39:8a:f0:44:4e:7a:af:d0:4f:
         6b:f1:9f:53:62:7a:5b:ea:46:88:df:64:43:bf:82:2d:0e:7f:
         aa:b5:58:bc:e6:58:ef:a7:52:e8:09:90:e0:be:34:29:d1:f8:
         2a:cb:8c:20:2a:06:28:11:8c:a6:5a:f2:13:fa:bc:4c:31:2b:
         84:9a:2a:a2:54:45:dd:8a:38:b0:d8:55:8e:80:e8:b2:e7:af:
         c8:81:7e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----