Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
File:                     jc19OY_EZuEhvEX69Q3YfDa7yW0.mft (raw, json)
Hash identifier:          syeGHIqg+KVBJLvcmHgiA2d/HQ1FxIIoeSDUoino5V8=
Subject key identifier:   52:38:20:B7:5A:71:94:3E:37:69:0D:DB:14:DC:61:B3:08:64:10:D7
Authority key identifier: 8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D
Certificate issuer:       /CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d
Certificate serial:       01962E61E33AA7A8B7924A3049E48AE0F484
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
Manifest number:          A4
Signing time:             Sun 13 Apr 2025 09:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:29 +0000
Files and hashes:         1: jc19OY_EZuEhvEX69Q3YfDa7yW0.crl (hash: xJPVbRlDh4f2xnvvBCjJqc9CErbdbZGC5AOFHUoTp6c=)
                          2: zXewAjWGvMnM0TC9WYL-KIwYeTc.roa (hash: lBVP9+96UyCRaPNC0pu5UG19WbXzwH4ZL/S+8Cro2UA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e3:3a:a7:a8:b7:92:4a:30:49:e4:8a:e0:f4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d
        Validity
            Not Before: Apr 13 09:01:29 2025 GMT
            Not After : Apr 14 09:01:29 2025 GMT
        Subject: CN=523820b75a71943e37690ddb14dc61b3086410d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ac:f5:d6:29:71:0a:a8:8f:fc:72:5c:5e:12:
                    b5:7f:3a:ed:62:31:cb:3e:2f:f6:52:e7:ec:7e:77:
                    72:50:71:86:60:81:2a:9e:5e:cc:62:61:af:e0:84:
                    c5:c0:6b:38:08:09:8a:96:4b:3d:65:d6:02:80:7c:
                    57:fd:91:ac:73:0b:5e:ec:fd:e4:e4:63:19:0f:7c:
                    33:24:b3:e3:44:82:d1:2e:1f:8d:94:74:91:8d:47:
                    e6:f3:d5:f8:70:b8:48:3b:70:bd:bd:ea:2a:a4:a5:
                    c6:79:91:e8:28:ed:62:e2:a0:bf:9d:0e:30:b7:44:
                    06:48:50:25:71:33:9c:ea:b3:e5:1b:c9:aa:50:eb:
                    a2:93:3a:b9:6d:fc:2e:f5:5b:3c:70:ca:60:4f:e5:
                    87:e1:eb:14:f0:89:ca:e9:eb:7d:fe:03:1e:2d:cc:
                    a9:6b:08:29:d4:11:ce:55:a9:28:ad:fd:e5:ff:11:
                    78:27:38:c0:57:d8:1c:9e:05:65:8a:5a:90:37:40:
                    5a:4d:c6:46:29:f7:20:ad:b3:f1:1c:19:6b:8c:9f:
                    6f:54:58:94:46:ea:6c:09:23:ed:75:a8:7b:5e:7f:
                    06:0a:72:ae:16:3a:18:7b:36:10:b7:e6:6e:a3:bf:
                    19:a1:23:5d:33:ed:1c:16:6b:90:1c:d7:5d:7a:e9:
                    52:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:38:20:B7:5A:71:94:3E:37:69:0D:DB:14:DC:61:B3:08:64:10:D7
            X509v3 Authority Key Identifier:
                keyid:8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:98:eb:3c:0c:2a:fe:47:5f:7f:f4:e2:0a:71:8f:61:b4:7d:
         ac:6a:f7:b7:91:f4:c7:14:d0:a9:0e:29:83:8f:d3:10:78:a4:
         3e:77:10:5c:78:8d:55:97:9a:57:7e:94:8a:ce:0e:a2:c5:50:
         c3:b6:a5:18:dc:82:fd:1f:99:0a:7e:52:ed:75:13:4f:a0:43:
         42:ea:d8:64:fd:e6:42:a4:6d:36:e4:e6:11:05:99:8b:89:28:
         ed:6e:66:26:82:9b:7f:14:73:b9:42:c2:03:a0:1f:53:2f:ca:
         2c:ab:32:cb:cf:f7:ab:3b:89:fa:08:59:3b:a8:8f:3f:29:3c:
         7d:d4:91:4b:c4:ab:59:5f:df:a9:87:e1:a2:cc:7d:7d:8c:06:
         d2:80:26:94:63:7f:51:45:97:07:32:0c:20:55:c3:9b:02:49:
         eb:be:e7:5e:1c:20:4b:ef:6b:63:42:4c:59:2a:48:c3:cb:5d:
         1b:c6:b5:6f:01:5b:fc:82:58:f3:61:44:c1:bd:6e:4a:c3:f0:
         7f:97:5d:27:e0:bd:aa:30:d9:bc:f3:33:52:df:d5:78:61:1c:
         20:7b:21:da:22:a1:c1:7b:e8:4b:e8:36:d8:4b:19:4c:57:81:
         e4:cd:19:8b:fb:49:54:49:a9:42:8b:1b:32:98:9f:d2:06:2f:
         5b:02:e9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----