Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
File:                     jqJrRYrUHUfSYadtjF3A_I0aniw.mft (raw, json)
Hash identifier:          G9RitiS8rvZRtGA3cKTJC9PwgPxvlT0tZQwt2zkig1s=
Subject key identifier:   08:DD:53:67:F7:AF:E8:DE:40:86:4B:39:51:90:29:EE:FE:25:86:BA
Authority key identifier: 8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C
Certificate issuer:       /CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c
Certificate serial:       01962F064B35E7BD6319918067E6721B0184
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
Manifest number:          0594
Signing time:             Sun 13 Apr 2025 12:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:03 +0000
Files and hashes:         1: jqJrRYrUHUfSYadtjF3A_I0aniw.crl (hash: FubByb05IVliyN3cF6/Da7i8jBiGg1sDIdZwqtWUz3Y=)
                          2: ujm37J3ubbyu5Ql44pmF8ExX4hQ.roa (hash: OE+0eHHx77x/+wl6GWmKStuCDxrk3hiiJvkYlOvzxhY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4b:35:e7:bd:63:19:91:80:67:e6:72:1b:01:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c
        Validity
            Not Before: Apr 13 12:01:03 2025 GMT
            Not After : Apr 14 12:01:03 2025 GMT
        Subject: CN=08dd5367f7afe8de40864b39519029eefe2586ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f1:16:2f:85:92:78:fe:56:6e:ac:e8:92:cc:
                    19:2c:d9:38:69:bc:c4:ac:76:50:e3:6b:10:cc:bf:
                    3e:aa:21:31:6d:27:a9:d9:27:60:93:fc:1e:cf:66:
                    7a:5a:a9:40:a9:37:ef:e4:d2:2a:d7:53:22:a6:40:
                    ea:92:b0:cb:86:32:39:d8:ff:2f:80:91:11:7f:80:
                    62:c1:5b:d1:59:8b:0c:34:9e:4b:87:19:b6:04:98:
                    5f:e2:6b:47:4f:cc:91:b9:61:3d:d4:ef:d7:27:1e:
                    d2:1f:aa:03:96:4d:c4:55:09:a2:8f:54:61:48:b1:
                    87:a9:61:fd:f8:52:3d:63:ab:44:12:b6:15:6f:32:
                    fc:9b:0a:d1:86:bc:94:6b:12:28:d5:97:7d:b9:3c:
                    0b:26:cf:ee:70:1d:8c:87:95:70:8d:3a:80:c9:98:
                    d2:7f:09:68:3b:f3:4f:de:33:e6:76:d7:75:97:65:
                    e1:f5:1a:84:b7:b1:df:ba:8e:c4:39:47:d3:ba:ed:
                    34:c9:cf:74:33:3c:86:06:9f:45:21:08:95:e4:ae:
                    dd:79:9a:f6:33:f5:eb:bd:80:0b:5c:73:4d:55:4b:
                    f4:bf:97:93:10:fd:c6:93:a8:26:1d:52:0d:9d:df:
                    92:1d:02:ea:d6:48:74:fc:d2:27:9d:0b:ec:10:7b:
                    c7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DD:53:67:F7:AF:E8:DE:40:86:4B:39:51:90:29:EE:FE:25:86:BA
            X509v3 Authority Key Identifier:
                keyid:8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:15:d4:90:bc:54:a3:5c:cb:91:b3:af:51:08:dd:ef:2c:ef:
         56:2d:7f:33:76:7c:4f:5f:2f:15:70:f2:80:1f:4f:82:42:42:
         bb:88:72:8b:f0:fe:6b:ba:44:46:1e:37:6e:70:99:97:51:24:
         5f:2d:a1:a6:20:f1:8c:78:06:50:64:e9:7d:61:70:2d:fc:90:
         2d:22:54:6d:1a:3e:6e:b7:65:ed:6b:00:19:37:3b:52:29:7e:
         69:6c:5b:ea:90:50:9d:fd:d4:89:a5:da:27:6b:e8:67:43:79:
         09:34:db:1e:a6:7e:24:ac:d6:1c:60:1f:87:a0:d8:67:46:78:
         7c:a7:ac:55:97:c3:80:9c:c2:f0:9b:ae:e9:77:b5:97:18:1d:
         a1:ef:4a:f3:ef:86:e2:35:3b:ee:bc:4a:f4:32:75:c5:05:11:
         71:0f:7f:9d:11:0a:17:a5:8e:58:4f:f1:6d:0e:f5:a7:e2:96:
         ed:53:5d:ff:2a:28:47:1f:b6:95:fa:ab:90:6d:c9:1e:19:cc:
         43:72:67:47:bb:ce:e1:e8:67:fc:fe:28:58:fd:87:91:1a:f6:
         52:2e:00:31:c1:69:97:c4:3a:0d:d6:46:91:40:d2:bc:4d:9d:
         e1:b4:6b:f1:7a:f5:fe:bd:c8:6f:4b:cd:94:dc:6b:f6:f5:3c:
         c0:53:be:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----