Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
File:                     jY9-tNJUj5zL88s45wKhkMEXQvU.mft (raw, json)
Hash identifier:          4IMuNYwhXxtDwHU4nySdtKhDrI9u0XyPV51eNexrUM8=
Subject key identifier:   B0:60:9D:26:9F:BF:B5:A9:C4:5D:37:41:05:5B:DF:09:7C:F7:9E:9A
Authority key identifier: 8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
Certificate issuer:       /CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Certificate serial:       01962E98891196D25EBA4B767B35D2442904
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:10 +0000
Files and hashes:         1: JoTSZ8E8fkiS501xBbOY7pc3jM8.roa (hash: JoNzI4ZspphrrJoARed2dcoamemKZ5kg0l+d/5sdlcM=)
                          2: SqfaLa-P64VMRzLu45OzZ7O-myU.roa (hash: 8RixXJbGYWZA//tOAjP6K4ex9vVhr1Y3178psfUi1TM=)
                          3: jY9-tNJUj5zL88s45wKhkMEXQvU.crl (hash: TY6tjztItEnEqWVGOSFg4Yb81dvvHlw9JbQ0OjGLsjg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:89:11:96:d2:5e:ba:4b:76:7b:35:d2:44:29:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
        Validity
            Not Before: Apr 13 10:01:10 2025 GMT
            Not After : Apr 14 10:01:10 2025 GMT
        Subject: CN=b0609d269fbfb5a9c45d3741055bdf097cf79e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:70:13:8a:80:26:99:47:6f:eb:39:be:56:1e:
                    ea:39:3a:ea:17:29:d3:d7:32:f1:01:28:68:20:50:
                    38:83:b2:c2:3d:fc:3b:34:74:d8:44:e3:4f:ab:40:
                    63:19:c5:9f:3b:e7:5f:ed:da:49:91:39:f2:e2:d1:
                    fc:a0:39:23:6c:eb:2c:49:96:47:ca:d3:c5:d8:f1:
                    b6:2d:0f:c2:3a:c2:b3:4b:00:da:4b:ee:2d:4c:42:
                    8b:af:f9:0d:36:a3:bd:7a:bf:09:72:f5:6f:8a:a5:
                    59:61:3d:1b:aa:84:0b:c4:d8:28:df:b2:60:05:42:
                    2c:a2:e0:8d:73:55:45:1d:1d:90:cc:74:ab:81:48:
                    f7:46:fe:d2:7a:b4:b4:f3:11:ce:9c:a4:28:41:84:
                    8f:f4:d7:16:52:51:f2:12:c6:e1:8d:10:48:a4:97:
                    4d:86:fc:e9:06:a0:b3:6c:d9:2d:f4:22:fe:68:97:
                    df:6f:1a:2a:70:4a:65:78:20:99:54:90:08:80:e2:
                    1a:b6:8c:47:90:c5:c3:de:8a:3e:06:a7:4f:18:ff:
                    fe:6f:8a:83:4b:55:14:84:24:6f:50:9a:d4:70:c9:
                    3e:9c:b7:0b:63:dd:cf:a5:8b:48:f2:38:1d:78:e8:
                    b6:69:06:42:cc:a9:1f:c6:84:a7:f9:a3:06:25:90:
                    d7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:60:9D:26:9F:BF:B5:A9:C4:5D:37:41:05:5B:DF:09:7C:F7:9E:9A
            X509v3 Authority Key Identifier:
                keyid:8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:1b:e4:10:79:de:75:9e:39:76:ce:fb:ad:ea:aa:a6:b6:2c:
         33:6d:3b:60:a3:4e:bb:ea:9d:26:d4:5c:86:76:cb:8c:99:a0:
         12:0b:9b:d8:83:c5:f5:0c:27:de:ef:c1:3e:6c:6f:27:3b:0c:
         09:c1:91:3a:9b:c1:c1:83:d1:37:e0:47:5b:3c:8c:a9:14:c9:
         80:28:be:04:c5:7e:4d:aa:fa:12:5d:e5:4e:c3:69:05:35:f4:
         23:2f:c6:78:7b:2c:ae:9e:34:a1:46:d8:cc:a2:95:e5:f6:b9:
         9f:91:c3:04:7e:48:b5:20:e1:ed:43:0e:fa:3f:4c:ef:17:db:
         64:0b:4b:02:7f:b3:d5:99:fa:7a:aa:c4:8c:0b:3b:60:32:b4:
         f8:91:66:fa:86:9f:f5:ef:e7:f9:f8:80:0e:7e:8b:e5:30:74:
         d3:70:62:4c:5f:c3:53:80:41:b4:1b:41:62:34:25:2b:37:ab:
         82:36:25:66:6d:98:33:0b:2a:64:4b:63:e0:d2:2b:3d:16:4c:
         a7:c8:57:c5:74:75:87:19:6a:7c:41:f7:1e:ee:52:25:a3:a7:
         c5:86:4b:93:6b:88:a8:3c:16:8d:40:ad:53:4e:8e:fd:85:78:
         49:00:9d:0c:43:a3:19:f9:63:1e:d1:c0:07:fc:f7:b3:dd:c4:
         bc:b6:37:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----