Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.mft
File:                     jvk0jidxFMzrutie_olfUKEqgYc.mft (raw, json)
Hash identifier:          KyF38qzsWn9fE4OCZZFZiL16109WCOlsNKcSsbGJw7g=
Subject key identifier:   CA:54:FC:4F:8F:28:21:ED:58:B3:50:85:41:5F:C9:06:A6:0B:DA:91
Authority key identifier: 8E:F9:34:8E:27:71:14:CC:EB:BA:D8:9E:FE:89:5F:50:A1:2A:81:87
Certificate issuer:       /CN=8ef9348e277114ccebbad89efe895f50a12a8187
Certificate serial:       01962F743DDE9EF49B5C7279E35E0AF1460B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvk0jidxFMzrutie_olfUKEqgYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.mft
Manifest number:          0C46
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: jvk0jidxFMzrutie_olfUKEqgYc.crl (hash: uoOAyt7KEe+45Ps1cvNXFwzUVPsG3+seGyi+P6Hl08E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3d:de:9e:f4:9b:5c:72:79:e3:5e:0a:f1:46:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef9348e277114ccebbad89efe895f50a12a8187
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=ca54fc4f8f2821ed58b35085415fc906a60bda91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:70:23:2e:3d:2c:d0:e1:44:b0:b7:a1:5f:8a:
                    d3:1c:89:9d:b5:0c:9d:76:da:c5:74:c7:65:49:84:
                    a3:b2:69:48:4d:8b:1d:aa:a3:41:94:25:03:cb:fb:
                    1a:a8:db:d6:55:38:c3:4a:53:91:6c:43:24:49:39:
                    c7:f8:54:96:91:08:a3:09:4d:f1:cb:38:ab:42:e7:
                    11:33:aa:ca:68:ce:8e:d1:38:bf:a5:74:cf:a9:75:
                    a5:4c:db:fe:c0:27:b7:a7:45:eb:29:e1:a9:de:d1:
                    b3:be:36:9f:ea:35:e4:e8:e6:6c:fb:01:ca:3f:81:
                    f0:75:df:d3:ab:74:b6:dc:43:b3:47:4a:98:cf:c1:
                    3a:1d:60:c4:d3:55:57:ee:91:33:1a:99:66:99:81:
                    31:3d:cc:c6:7f:e9:5d:f8:1d:db:60:f8:a4:d0:ff:
                    5f:f1:13:36:61:9f:5e:ec:93:18:f6:1d:6c:44:c3:
                    46:03:ca:69:12:e5:15:24:8a:67:ab:26:8c:02:78:
                    61:71:92:e3:80:bc:f8:62:48:46:71:25:93:b7:1b:
                    15:b1:6a:6c:c1:4c:5a:1b:1a:b8:bf:0b:7d:1b:28:
                    b3:17:7d:88:e3:47:3a:53:44:c4:42:f1:df:8a:11:
                    50:3c:77:6d:f8:a9:3f:e0:52:6f:f6:78:68:c2:cb:
                    69:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:54:FC:4F:8F:28:21:ED:58:B3:50:85:41:5F:C9:06:A6:0B:DA:91
            X509v3 Authority Key Identifier:
                keyid:8E:F9:34:8E:27:71:14:CC:EB:BA:D8:9E:FE:89:5F:50:A1:2A:81:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvk0jidxFMzrutie_olfUKEqgYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:20:a6:37:ab:8a:e5:41:b0:97:76:de:f6:50:cd:c8:86:b5:
         26:50:ca:48:ab:26:55:c3:94:83:e4:70:af:42:d7:f8:9c:d2:
         b8:5a:53:5b:1a:94:a8:1a:f4:07:66:78:95:a8:a0:ca:27:c6:
         62:38:ef:e7:36:60:1e:5c:f2:a6:52:63:bf:e1:79:1d:55:7d:
         68:fb:c8:49:43:85:6e:2b:61:41:b5:d9:67:92:4b:12:6f:3a:
         1a:f1:02:4c:44:9d:c7:c4:41:f2:95:1e:21:cf:04:00:8e:1e:
         48:ac:79:5a:c3:02:5b:9f:9b:c6:e4:0a:f4:32:05:2d:bb:f3:
         69:c8:3b:dc:23:19:20:46:e6:6c:15:0c:f4:2b:92:1c:c6:99:
         44:08:c0:84:4b:c2:1b:e3:dd:84:e0:59:49:b8:85:43:4d:8c:
         d2:79:ed:64:18:1d:b2:92:8c:70:73:a3:f7:00:fc:21:02:b5:
         f7:3a:11:16:c3:ba:ea:1f:85:66:80:f2:83:4b:03:ea:4c:85:
         92:02:7c:5b:39:c8:98:1c:d2:90:10:8f:94:7c:6e:e8:01:a8:
         40:14:37:db:e4:fa:2c:3e:7c:47:5e:f3:2d:e0:13:e8:d6:f2:
         12:08:5a:34:d3:08:24:4f:32:5a:67:44:40:72:0b:3a:2d:a1:
         9d:c2:83:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----