Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
File:                     jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft (raw, json)
Hash identifier:          CafqcL7EKgO8NGeEiP7PbHDbAnuP5EE3fzjD7Eyg6n4=
Subject key identifier:   31:E8:42:CC:17:68:20:A4:21:5A:F1:C2:75:87:6F:67:C4:8D:EB:E4
Authority key identifier: 8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
Certificate issuer:       /CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Certificate serial:       01962F074BAC493A691AB0C560A4FFCA108E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:02:09 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:09 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:09 +0000
Files and hashes:         1: MeStYchfIIM21gIjTEqDbpySbzo.roa (hash: HjyEWI+y6IoPKwCyj+P1YglxdC4kh2ZH6Sa5Jx7lTg0=)
                          2: ifGa29cDfCtmHluYzDCGArXBHSE.roa (hash: SagmwRWK2BwuwUrS3xLYWQnMEp8bHt5W3ObsAvGOP+A=)
                          3: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl (hash: CoVBzl+RhctyHpqu4auKijeIVm8q6SOFufJUm7574lk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:4b:ac:49:3a:69:1a:b0:c5:60:a4:ff:ca:10:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
        Validity
            Not Before: Apr 13 12:02:09 2025 GMT
            Not After : Apr 14 12:02:09 2025 GMT
        Subject: CN=31e842cc176820a4215af1c275876f67c48debe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5d:03:f7:07:96:a6:46:73:ba:0f:09:43:9d:
                    9a:60:8b:7e:b1:d6:e1:39:63:d6:37:bc:03:9e:4a:
                    64:78:cd:ff:2b:1b:59:5d:93:de:cf:36:15:9b:2c:
                    3a:7a:a3:96:87:78:2f:e3:0e:ea:0c:62:d9:b4:46:
                    9f:36:6b:9e:29:1e:2f:f5:75:ac:55:37:a7:3e:ab:
                    07:2e:37:0c:62:3b:22:a1:b3:8e:f8:7f:53:c7:06:
                    dc:b2:90:a0:a1:03:6a:3a:b8:c8:15:ff:05:4b:2c:
                    ca:8e:eb:be:61:a1:2b:69:9c:cf:67:90:83:2c:64:
                    d3:95:35:70:fa:dc:b4:f2:4a:4e:d3:a2:73:a0:6b:
                    6a:36:f3:6a:3d:7f:81:3a:31:07:c8:ca:a7:87:d2:
                    75:68:8f:ef:56:11:ff:15:17:7d:c0:dd:78:cf:5b:
                    80:0d:76:d4:d8:ff:9d:74:8b:61:8e:43:f8:90:05:
                    22:95:9f:28:4e:46:ca:ab:3f:3c:8c:d9:8a:16:8a:
                    5d:c1:af:e0:55:f1:63:ed:b1:3d:ab:e8:bf:e7:d9:
                    ff:17:49:9e:53:d6:7a:31:e3:e2:79:ff:35:74:32:
                    13:f5:be:23:36:36:9d:5b:22:13:f5:11:b7:c4:4b:
                    6e:48:51:2b:72:1f:8b:58:eb:43:3f:50:46:ba:ff:
                    0c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E8:42:CC:17:68:20:A4:21:5A:F1:C2:75:87:6F:67:C4:8D:EB:E4
            X509v3 Authority Key Identifier:
                keyid:8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:d0:f5:2b:a6:44:bf:62:65:16:db:22:9e:19:e2:31:a4:40:
         b0:10:1b:3b:48:8e:99:5a:1e:49:50:e4:3b:11:94:a9:9b:f6:
         d6:39:70:01:2c:dd:61:0a:77:6b:d7:18:84:64:a5:90:3a:4e:
         87:25:f7:1b:df:f5:6c:22:6d:00:06:15:0e:4b:85:ba:eb:76:
         6c:04:8e:65:6d:6d:1e:73:a4:60:57:a8:e2:f0:28:3c:04:f3:
         ce:b1:71:f8:ea:65:2a:54:d8:3d:2e:2a:19:03:61:86:f6:15:
         de:94:7a:28:ed:ae:b9:f5:3d:9b:3b:af:4b:8d:bf:e6:ee:16:
         95:d2:a9:71:f0:1d:f9:88:25:0a:c0:ee:45:9a:1f:ff:18:09:
         74:dc:d6:1c:e5:9f:42:7b:ae:b1:0a:28:ef:39:49:f5:42:dc:
         de:68:ae:c8:88:cd:fb:cb:b4:f7:6b:a3:14:c2:3a:e7:39:e2:
         b1:00:f0:9a:5e:b2:eb:f2:1c:82:11:e6:f8:3d:82:47:66:00:
         b8:f9:98:cd:c7:2f:7b:72:e5:88:41:57:34:15:63:10:a6:59:
         f4:04:ef:63:dc:8c:4f:f6:f6:7b:83:f1:95:d6:12:09:9a:0b:
         3f:14:7f:46:7c:8a:bd:f8:fd:fd:09:38:88:c9:97:a8:2b:fa:
         62:52:ff:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----