Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
File:                     jygQkMQApWFm_Ii083pcuu0hhfA.mft (raw, json)
Hash identifier:          SwzTPbgTX5hcHfAok5t7gDQd+ZSrvqIx5xzuEs1385c=
Subject key identifier:   ED:1C:8D:BA:13:73:8C:38:0E:DB:8F:6E:30:C9:86:24:37:85:31:1E
Authority key identifier: 8F:28:10:90:C4:00:A5:61:66:FC:88:B4:F3:7A:5C:BA:ED:21:85:F0
Certificate issuer:       /CN=8f281090c400a56166fc88b4f37a5cbaed2185f0
Certificate serial:       01962E993CE39A1A13782DE1C5C553BFD374
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: 7XUdeR7Uiqy2nX_SzaBAY10QtF0.roa (hash: NZuDg+MfyuXfdZEwhDepOr5DFbg1lkCScWpvXsHFUtQ=)
                          2: jygQkMQApWFm_Ii083pcuu0hhfA.crl (hash: LozOni27zoWY0Hc4EfvDgNm6vioQe+UFAUBzC2chJmU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3c:e3:9a:1a:13:78:2d:e1:c5:c5:53:bf:d3:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f281090c400a56166fc88b4f37a5cbaed2185f0
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=ed1c8dba13738c380edb8f6e30c986243785311e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:13:eb:1d:80:96:96:56:7e:94:5c:2b:98:1b:
                    09:73:4d:1f:f2:3c:38:f0:2a:c9:f9:29:df:c1:a0:
                    0a:92:43:dc:3c:5f:d4:52:14:3e:9b:1e:0f:3f:bc:
                    17:05:82:46:f6:68:fb:41:fd:40:e5:f4:a1:96:d2:
                    e8:84:8c:c4:99:09:45:fb:a4:e5:6c:10:aa:d8:6c:
                    23:e5:f5:d6:cd:d5:7a:eb:7e:bc:73:11:c1:91:1e:
                    40:c2:aa:a8:5f:c5:f3:a4:22:7b:6c:70:0c:67:32:
                    8f:a5:58:dd:a4:1f:d5:69:2b:04:1d:7a:03:83:98:
                    27:49:98:98:89:a1:7c:08:7e:c5:99:98:95:89:26:
                    6c:65:13:62:17:fd:6b:4e:d7:75:84:cc:cf:aa:a0:
                    68:07:d0:9a:d5:8e:b0:c2:41:e7:fa:82:13:53:b6:
                    5a:a9:8f:5d:d5:1f:e5:d7:56:2c:35:db:0b:30:e8:
                    00:46:b3:c8:3d:4c:6f:e4:6e:6d:35:37:dd:15:7a:
                    2a:cc:41:80:97:84:89:81:b6:dc:b5:8c:bf:40:9a:
                    d0:98:3f:2b:ef:58:30:d3:dc:c0:a3:8f:f0:12:6a:
                    bb:41:ef:82:cb:c1:aa:a9:fd:eb:c8:14:d4:33:56:
                    8c:3d:3d:d4:f9:63:03:d0:d3:ca:4a:db:c0:3b:e3:
                    c3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1C:8D:BA:13:73:8C:38:0E:DB:8F:6E:30:C9:86:24:37:85:31:1E
            X509v3 Authority Key Identifier:
                keyid:8F:28:10:90:C4:00:A5:61:66:FC:88:B4:F3:7A:5C:BA:ED:21:85:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:44:17:0c:01:5e:a2:ac:7c:e8:70:34:4a:8f:40:6f:62:40:
         da:00:22:b5:98:44:49:a2:78:5b:a4:42:5d:bd:85:0c:a4:3a:
         e3:3a:bf:79:7a:92:51:a0:9e:f1:a4:c8:91:ea:80:4e:17:d4:
         6d:eb:06:cf:08:a6:f9:ea:b8:b4:59:e8:c4:f6:b9:8d:1f:b8:
         5d:4c:61:a5:5d:4f:c8:a1:28:cb:a0:11:5e:32:b7:aa:72:3c:
         3f:5d:35:26:a1:bd:9e:c0:2d:45:c3:db:d7:e6:fd:ec:09:33:
         c7:3a:8e:13:1e:2c:f2:35:80:62:26:a3:cc:20:94:23:8d:9a:
         2a:b9:1a:14:11:01:3f:e5:6c:32:9b:f3:21:4e:9d:78:1a:24:
         b0:58:b5:54:5d:a1:f8:62:b3:16:c8:08:6f:76:8f:9d:cc:d5:
         2c:f5:b7:12:34:c4:ea:3c:0f:d9:f2:dd:d8:17:c2:9d:15:52:
         88:88:dc:92:14:87:db:9e:eb:0f:04:e5:3a:da:c4:d6:87:7a:
         c4:d8:b0:2b:14:8b:7b:68:8a:b5:d0:3b:57:cf:0c:63:ab:07:
         7b:9b:48:2d:04:29:b3:99:0d:0f:21:6d:f3:61:a8:37:37:af:
         9a:fb:3b:ac:e0:a2:72:60:cd:93:07:81:3c:5d:af:2e:47:08:
         d0:13:c3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----