Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
File:                     jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft (raw, json)
Hash identifier:          sgn1SZA5FqmJrdJMND42W9zsWXgVFegmIinmwPyxS4U=
Subject key identifier:   55:9A:69:FC:11:F1:5E:D9:47:F9:B7:54:FE:99:D9:14:C1:78:E4:62
Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
Certificate issuer:       /CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Certificate serial:       01962E996661A58F3613A0C635D7CE60BCB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
Manifest number:          10D4
Signing time:             Sun 13 Apr 2025 10:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:07 +0000
Files and hashes:         1: 54maDBwwKTxHdkusWjL9_Ovz-qw.roa (hash: K+6mHC5B4TYfPyOtC0Ws3X1xogH31t6cVYvGSG2+010=)
                          2: GpJsbUU7ynXwevk6zegWgWclf9Y.roa (hash: Gj5/c+xCgDWNgWsyAfXPaCh0mgF3UrEUlCabtiae4lk=)
                          3: QKYFwfEUtIsE2zwk360KHQOdATU.roa (hash: J7RPiiX3svZf1ggdl8vvm2b4xvCEOydrVgV6jBu1CtA=)
                          4: baMjsDY94eZSoK-AIzqEOHNRACk.roa (hash: SLAiqx14sHLSHfAF2Lauw4go5jjzGTP4a1xj8l/WroY=)
                          5: jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl (hash: tyAYOu78CTkSHGIuv4nz+B2GQAhuYQ9gwzNRzKFrehI=)
                          6: nbxUHEZP7nLPsSWUzZlv-6zoI8E.roa (hash: b2RlxLzrg3Jt5vsvNFiprNhu9Bg/P/h2jB1aLvcyUR4=)
                          7: prOxBQFXKQHVMxFfWuCKBN6cC28.roa (hash: KQkvvBw6H6mLNvuqMCwSPUrSIm6c/c/LV/GGLcSdkGQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:66:61:a5:8f:36:13:a0:c6:35:d7:ce:60:bc:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3
        Validity
            Not Before: Apr 13 10:02:07 2025 GMT
            Not After : Apr 14 10:02:07 2025 GMT
        Subject: CN=559a69fc11f15ed947f9b754fe99d914c178e462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:25:ee:80:7d:ef:6f:8d:f3:fa:4e:e0:e7:74:
                    c9:c2:9b:f0:cd:e5:5a:b2:8a:6c:b7:f6:e3:03:14:
                    a5:31:fb:0a:1f:89:ca:0e:75:3e:b3:4d:17:5e:8b:
                    72:69:db:ef:23:a1:0a:62:fb:40:11:2e:42:23:87:
                    d3:82:7b:e9:c8:7a:e4:60:04:6f:7d:f5:ef:51:61:
                    24:21:96:56:4c:87:a6:d5:1a:21:b7:30:1d:50:d9:
                    63:c5:4e:0e:67:b7:7c:cb:e8:24:16:3c:24:0b:f1:
                    42:66:73:00:a5:c4:f6:5e:15:ab:35:54:60:17:c7:
                    06:b4:10:a1:74:ca:ef:85:d2:f5:9b:07:da:7e:72:
                    cd:8a:90:b3:04:5b:e5:28:10:0c:d6:73:9e:5d:ac:
                    02:8c:d6:cd:70:ae:4b:18:ad:04:b4:98:97:0c:46:
                    db:88:c1:a5:24:68:e1:0e:8e:60:53:65:09:5e:0d:
                    84:6f:46:b9:e9:66:9b:85:e2:fd:dd:2b:75:0f:a2:
                    fb:5a:c9:25:03:1b:b0:6f:11:52:74:1d:45:7e:c7:
                    f6:43:b7:68:4d:0e:12:8c:70:ca:bb:a2:8a:70:35:
                    ea:12:42:05:91:86:8b:3f:2d:e3:7a:63:ad:2c:c9:
                    2e:01:34:19:8b:4e:50:54:bd:8d:9c:18:ab:0e:e3:
                    4e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9A:69:FC:11:F1:5E:D9:47:F9:B7:54:FE:99:D9:14:C1:78:E4:62
            X509v3 Authority Key Identifier:
                keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f4:05:7a:27:b4:b9:38:1c:7b:ad:20:68:04:47:8c:03:27:
         38:32:cf:03:47:14:56:01:60:ca:89:12:5f:4c:54:f2:5b:7c:
         dc:64:1a:86:53:4f:33:8e:7a:83:43:6a:b0:2e:2b:15:4f:0d:
         8f:c0:09:fb:8c:81:84:03:4b:4c:ba:60:88:be:e6:bd:13:e2:
         52:2d:77:33:af:b0:e7:66:9c:76:3a:b5:2e:98:99:ea:bf:f3:
         bc:1a:df:03:9c:6b:81:fb:be:7a:b8:c4:69:81:ac:22:33:f8:
         ad:0f:f8:28:4f:b2:d0:0d:17:e0:8d:d7:4e:3b:f9:32:cc:73:
         2d:44:6f:9d:4a:f6:55:5e:bc:80:4d:27:82:74:7c:52:d4:35:
         c4:f1:d2:75:d4:3c:dd:32:6d:8a:6d:63:b2:9e:ac:64:d5:9d:
         5d:a3:f5:31:c1:86:a0:ba:8e:36:d3:f3:0a:ae:ac:f5:74:56:
         cb:d5:de:79:1c:9b:a7:16:71:bb:23:44:00:74:cc:63:d0:8f:
         7c:94:72:65:e6:03:ce:69:83:83:74:7e:c7:50:0f:b6:5f:96:
         94:73:88:10:ff:66:1d:17:9c:52:e5:e2:1c:8d:ed:6c:58:15:
         cd:bc:0b:22:d7:25:45:ac:25:ed:2c:1e:cb:b5:43:dd:fb:e7:
         c4:1c:a3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----