Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
File:                     jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft (raw, json)
Hash identifier:          RW6lEiDRyvteVTjRm2CyBFYZKqqXSa4flacYHkHsQYM=
Subject key identifier:   F8:07:9C:C3:E1:F9:B4:6C:31:0A:2B:5B:23:6E:3D:6B:E3:C2:CB:53
Authority key identifier: 8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F
Certificate issuer:       /CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
Certificate serial:       01962E997AB5814E0DCF713649A07B715A0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
Manifest number:          0E3B
Signing time:             Sun 13 Apr 2025 10:02:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:12 +0000
Files and hashes:         1: IAhynHC3BeXQ5V6ipM00FrjrH7c.roa (hash: xUIuep5Mgj3+PGgYL02vof53aG5TJnfGHCNFQCcozjs=)
                          2: jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl (hash: HLpIIJBkhq/+9mzRfAjEXa/tZE+e/f2UlalihT/eGkY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7a:b5:81:4e:0d:cf:71:36:49:a0:7b:71:5a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
        Validity
            Not Before: Apr 13 10:02:12 2025 GMT
            Not After : Apr 14 10:02:12 2025 GMT
        Subject: CN=f8079cc3e1f9b46c310a2b5b236e3d6be3c2cb53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:46:3f:e8:62:c8:9f:37:72:9c:87:33:14:06:
                    01:74:b0:06:79:a0:26:8a:76:af:26:53:1a:67:f8:
                    fb:b7:8a:dc:65:8d:30:03:7c:6a:2d:ed:5d:c7:7c:
                    48:89:e7:1c:0e:db:d5:42:84:63:49:e0:74:f3:e4:
                    b7:d2:28:44:79:4e:14:d1:1d:2e:ba:ef:44:a7:10:
                    a8:bd:b7:03:df:34:80:a4:3a:09:7a:9b:30:4d:b7:
                    dc:30:f1:41:a6:94:91:d0:bf:69:27:53:1b:81:61:
                    90:cb:24:db:14:e0:cb:a8:e7:73:3b:6e:ea:be:9b:
                    d4:9d:ee:9d:db:2a:a7:a4:99:c7:db:5d:1b:16:90:
                    3e:49:fe:b6:1b:48:9e:30:3f:07:34:dc:cb:f7:63:
                    b6:69:64:c7:42:0c:0b:7a:0e:82:da:37:62:5d:87:
                    78:c9:10:30:d0:00:11:25:e7:0d:3b:a3:63:62:69:
                    69:a7:2b:e3:c1:1b:98:c6:ac:fd:2d:64:51:db:39:
                    0f:5c:5e:92:fd:65:65:ca:8e:1a:fa:4e:85:75:0f:
                    b0:98:52:d0:b9:6e:7e:d0:55:7b:59:43:31:9b:a6:
                    79:7b:95:ce:3f:af:04:b9:00:7b:fa:01:9f:d3:5f:
                    d4:1a:16:d0:74:5a:d2:50:fb:c1:18:cc:54:ef:7f:
                    77:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:07:9C:C3:E1:F9:B4:6C:31:0A:2B:5B:23:6E:3D:6B:E3:C2:CB:53
            X509v3 Authority Key Identifier:
                keyid:8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d5:0c:d8:43:81:7f:06:03:e2:11:bf:ce:10:e0:20:3e:66:
         1d:a4:66:8e:6f:27:8c:c1:29:da:3a:81:b0:75:31:e7:e7:9a:
         b0:62:11:84:43:5b:24:21:07:03:43:4f:1a:92:50:e5:e2:cb:
         6d:5d:31:ba:1a:5d:10:f9:72:71:f8:fe:1f:c8:4d:35:d6:ee:
         79:bc:6f:f5:7e:56:80:6a:6d:b4:29:4c:19:a7:a3:f0:ea:86:
         8e:ae:5a:d1:cf:54:df:d6:64:83:8c:a6:e2:0f:7e:37:ce:85:
         98:80:12:15:65:bc:3e:31:fc:a8:68:23:2d:7e:a3:e3:e6:5f:
         c2:51:5b:86:12:8d:a2:75:80:37:e6:8e:c6:f1:da:9e:c9:4b:
         65:f6:97:89:69:73:85:1b:30:13:2f:0e:c3:a4:16:5f:3c:b7:
         64:5f:a4:14:20:d9:81:60:09:22:66:e9:7e:84:b2:ca:b5:1c:
         9f:a4:16:12:9d:94:89:f8:6f:ac:49:87:b3:4a:7d:cd:05:01:
         a2:cd:5f:6f:b2:c8:b6:01:8e:bf:b1:87:77:18:6f:29:0c:cc:
         a4:02:e3:97:49:c3:14:38:d4:b8:4a:4c:8a:c6:a3:83:77:50:
         de:a1:c9:96:8a:f6:0e:5e:31:28:4d:23:3c:6c:87:8f:73:6a:
         01:ca:38:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----