Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
File:                     jDath5xkWu6YrEqJ_IALmpdOlB8.mft (raw, json)
Hash identifier:          oZ3C2I+0dII5FTcGwJebeBuUbSNS7PiFAKJ1fCh2fRw=
Subject key identifier:   C5:F6:0F:70:D7:33:4D:D4:07:FA:63:AC:A3:03:08:98:17:5C:00:30
Authority key identifier: 8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
Certificate issuer:       /CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Certificate serial:       01962F064B2FF0F50D3B1D3C52DAF19D0298
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:03 +0000
Files and hashes:         1: Zwk791BjXFiWW_GWZuipoheVevk.roa (hash: 98bTEWSKCgsr9ScLAh15mZ7s1p9cPoDYzZZ0PPizWyo=)
                          2: ebKQop9j6C8Jd62F7ue25JuDgWs.roa (hash: FqOT4Eu6V5AfcUcuw2gXk+K+VJY6kHg+9mF4TAN1HTA=)
                          3: jDath5xkWu6YrEqJ_IALmpdOlB8.crl (hash: fi7DBxIm9EnpJM0tLML80fjgG97ANQr0fDX0E2+A4dI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4b:2f:f0:f5:0d:3b:1d:3c:52:da:f1:9d:02:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
        Validity
            Not Before: Apr 13 12:01:03 2025 GMT
            Not After : Apr 14 12:01:03 2025 GMT
        Subject: CN=c5f60f70d7334dd407fa63aca3030898175c0030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6e:d3:89:79:a4:72:b8:d8:22:aa:0f:a7:eb:
                    dc:45:73:3d:e7:bb:c6:f0:74:a7:6b:24:66:38:1c:
                    d4:0f:5b:c5:cb:1f:3f:6b:62:b4:5f:b7:77:a5:f1:
                    0a:db:02:53:a8:77:12:0d:63:15:07:d0:11:3e:c7:
                    fa:27:58:2f:bb:25:74:65:bf:b4:f8:cf:cb:7f:93:
                    d8:b6:63:ba:8f:02:14:eb:e1:bc:75:50:5a:3a:21:
                    62:85:46:d8:a7:76:e4:f4:2d:66:81:d8:3f:dd:b3:
                    3f:a5:6e:f7:1f:40:ca:82:2a:5f:cd:32:0e:9b:95:
                    9a:cc:2e:c0:6c:5a:17:ca:58:d7:6f:15:1a:66:23:
                    40:4e:e8:b1:6f:f8:85:5c:4f:fb:b9:84:ba:8e:00:
                    aa:a6:9a:7f:c8:06:3d:07:cb:fe:cd:57:7d:26:56:
                    61:17:e3:64:c5:f3:b0:23:cc:cf:17:be:e2:09:73:
                    2e:e0:b3:78:7a:02:55:75:dc:00:0d:23:92:76:36:
                    8f:ee:91:da:b3:54:13:73:54:4a:35:33:63:7d:d9:
                    55:93:33:32:f7:b6:18:41:13:a0:74:46:17:77:83:
                    06:b2:e4:39:b9:5c:71:43:02:96:e7:3b:d1:c1:c0:
                    8c:22:74:ac:f2:d9:df:40:d6:50:94:b0:9f:c9:bc:
                    40:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F6:0F:70:D7:33:4D:D4:07:FA:63:AC:A3:03:08:98:17:5C:00:30
            X509v3 Authority Key Identifier:
                keyid:8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:ae:22:31:92:ef:19:a7:e5:a0:e6:2f:1c:1d:a4:b6:33:d1:
         d9:eb:39:50:2d:ff:fc:1c:b5:53:b6:6d:08:1c:ab:4a:3e:2b:
         db:86:b6:85:fe:3c:68:b2:0b:81:1d:8a:11:64:3e:4d:1c:bb:
         84:32:69:92:08:54:5d:7c:06:f1:9b:2a:30:f1:7b:20:f2:df:
         19:ab:68:1a:9b:af:b2:3f:c3:06:b4:f6:35:b3:59:81:f9:e0:
         9e:79:a6:20:28:ab:ea:67:00:ac:58:7d:09:f3:c7:ea:ce:44:
         64:cd:e2:d6:35:e6:77:6d:e8:cf:34:31:78:e0:ae:db:66:a5:
         cc:f6:92:33:bd:5f:0e:66:fd:7c:e9:b7:90:04:42:63:99:c0:
         10:b3:d7:1b:9f:7b:f2:e8:91:fb:a3:7d:6a:d2:df:53:3e:df:
         c9:9e:21:c1:5e:83:44:97:e7:d4:a7:d5:7a:6d:b5:e8:7e:7b:
         e2:d0:b0:f1:58:18:cf:cb:87:2d:44:8e:25:2c:17:65:8b:97:
         c2:ce:54:54:57:a2:e7:05:6c:fc:b7:82:34:4e:18:d0:4b:17:
         f8:7b:86:08:cb:6a:5c:f3:51:48:72:45:90:2a:bf:e4:d5:87:
         55:15:a4:23:c3:61:20:28:fb:6c:e8:fd:ed:11:31:2e:25:88:
         74:81:2a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----