Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
File:                     jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft (raw, json)
Hash identifier:          XEb3YghN+g94m2MKZ87V98i6Lwb+BqC8UbwRZ1Y77ZE=
Subject key identifier:   4B:14:90:2B:BE:A2:FA:D1:6A:C1:B5:0E:2B:93:5A:B8:D5:70:31:39
Authority key identifier: 8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F
Certificate issuer:       /CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f
Certificate serial:       01962F3DD568444DBC9F995413073A218881
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
Manifest number:          0321
Signing time:             Sun 13 Apr 2025 13:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:43 +0000
Files and hashes:         1: jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl (hash: tRZ7GyogiFgQ2gXcOb91sjI+B4SUgeSY1cuNMNHH2EA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d5:68:44:4d:bc:9f:99:54:13:07:3a:21:88:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f
        Validity
            Not Before: Apr 13 13:01:43 2025 GMT
            Not After : Apr 14 13:01:43 2025 GMT
        Subject: CN=4b14902bbea2fad16ac1b50e2b935ab8d5703139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b8:ab:97:58:a3:c0:94:bd:a3:a5:d0:44:2f:
                    79:98:91:e2:b4:da:65:83:dd:85:72:a5:48:f7:0c:
                    d8:4b:5d:1e:77:1a:37:41:10:7d:8a:f4:1d:dc:41:
                    3b:a3:9e:c9:17:ac:93:61:a4:51:2d:81:ef:f8:8f:
                    2d:1e:f7:a1:aa:7d:d2:4a:df:db:07:93:2d:56:00:
                    45:3b:e3:05:a9:50:5d:fd:c8:7f:c1:9d:c7:46:cf:
                    40:0b:cd:99:30:15:64:c5:43:41:b7:c7:1c:3d:b6:
                    5c:32:66:fb:08:b7:e1:5c:1a:22:fe:59:20:62:ae:
                    61:24:be:e1:5b:5f:2d:5b:eb:ae:d6:71:80:ca:db:
                    9f:7e:ba:e9:41:fb:6a:73:77:f8:fd:12:b9:06:67:
                    7d:ff:ab:95:58:5e:6b:7e:5b:e4:30:f6:08:1a:04:
                    93:25:b7:46:73:45:a5:70:60:08:79:ca:02:4d:e9:
                    82:05:98:9a:c6:c9:62:d1:e2:69:92:7a:68:d8:9e:
                    d3:11:45:f9:f5:6c:9a:a3:4c:37:2b:39:e2:d6:ad:
                    63:05:b0:55:0c:21:32:d1:89:c7:9c:59:c3:81:f4:
                    fa:a2:79:57:1d:96:2d:57:5c:11:7f:50:96:f5:c8:
                    ac:71:5b:c9:30:b5:4d:45:07:7d:97:b7:83:3c:44:
                    a8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:14:90:2B:BE:A2:FA:D1:6A:C1:B5:0E:2B:93:5A:B8:D5:70:31:39
            X509v3 Authority Key Identifier:
                keyid:8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:6f:5b:31:e3:f3:d5:f0:ea:1e:6c:d7:2a:b0:1d:c9:15:ea:
         57:22:23:ce:e2:cd:90:62:7e:14:bc:09:66:b0:da:57:54:4c:
         fd:2a:18:09:dc:1b:be:5a:0e:16:b1:d2:3a:88:7d:97:da:78:
         f9:2e:74:da:8a:de:fb:76:4c:30:8e:53:f6:2e:65:44:03:92:
         ea:e0:31:4c:f3:02:fc:f5:84:25:04:b1:64:85:7f:c9:31:54:
         86:39:91:0f:f2:4a:b3:66:45:98:3c:81:34:5c:c6:a6:40:4a:
         75:b0:8d:b3:58:d8:4d:13:66:9b:0f:39:7b:6f:ba:f3:1e:95:
         9d:7a:b2:25:d9:c0:63:d7:8d:aa:86:be:ce:85:01:7d:d1:18:
         5f:4f:08:70:4a:d8:27:f3:f9:45:ae:18:66:86:51:1d:59:47:
         71:a1:65:5b:88:9a:e9:af:7b:f7:86:07:f3:f7:59:5f:96:5f:
         65:67:d8:44:2c:ff:f1:63:1d:3a:20:5d:86:9b:31:6a:6a:e7:
         a5:c4:da:bc:36:fc:ae:cf:a6:e8:d6:a5:ec:1a:13:16:bb:55:
         cf:b3:8b:7a:6a:f6:98:a0:3f:9a:77:91:24:6a:e1:97:53:66:
         73:f1:da:dc:c6:13:8c:67:bb:81:97:21:22:82:8e:1f:58:a1:
         a9:a0:ca:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----