Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6cd798-31d4-4478-9962-f98796f51022/1/jzAoLIbxBGuTEkzycOEU5fAm_3M.mft
File:                     jzAoLIbxBGuTEkzycOEU5fAm_3M.mft (raw, json)
Hash identifier:          Zunx8f8jIgdUca8zTjfW5dJa5XXx/7XgE8BE7wyzBc4=
Subject key identifier:   F1:9B:1E:A4:43:2A:75:9D:CD:C4:8F:C2:FE:CE:E8:DC:D2:57:98:30
Authority key identifier: 8F:30:28:2C:86:F1:04:6B:93:12:4C:F2:70:E1:14:E5:F0:26:FF:73
Certificate issuer:       /CN=8f30282c86f1046b93124cf270e114e5f026ff73
Certificate serial:       01962E996B77386A48AF5075E217201FEFFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzAoLIbxBGuTEkzycOEU5fAm_3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/6cd798-31d4-4478-9962-f98796f51022/1/jzAoLIbxBGuTEkzycOEU5fAm_3M.mft
Manifest number:          0EA8
Signing time:             Sun 13 Apr 2025 10:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:08 +0000
Files and hashes:         1: jzAoLIbxBGuTEkzycOEU5fAm_3M.crl (hash: 2dOKvJF/JAHUEw7f8LDNALYEcLI2Hqaly4vsffQHEaM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6b:77:38:6a:48:af:50:75:e2:17:20:1f:ef:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f30282c86f1046b93124cf270e114e5f026ff73
        Validity
            Not Before: Apr 13 10:02:08 2025 GMT
            Not After : Apr 14 10:02:08 2025 GMT
        Subject: CN=f19b1ea4432a759dcdc48fc2fecee8dcd2579830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:78:2e:2f:44:f5:cd:4c:53:1c:16:79:8f:f7:
                    fa:a2:48:0e:af:7f:25:ae:78:3c:2c:e7:b1:f9:ce:
                    d7:cd:14:ef:0f:38:8a:e6:04:69:f9:52:27:2a:e3:
                    40:ff:c8:4c:22:2f:92:ae:d2:f7:b8:6c:f7:5d:cf:
                    83:05:2b:8e:11:2c:c6:1b:64:18:5c:75:e6:53:18:
                    2d:66:9e:2a:8b:ff:7a:90:e1:50:a9:f0:50:a9:22:
                    bc:60:cb:3a:9f:77:e8:e1:c1:47:96:f7:f1:e8:c1:
                    f2:f5:0f:53:9d:e8:d2:86:b4:5f:5b:25:26:e7:82:
                    72:1f:06:a2:f0:63:17:07:c1:e7:b2:f7:53:89:44:
                    fa:13:7e:a5:67:70:65:a5:0d:c4:44:67:bf:e3:11:
                    08:94:be:e5:c3:7b:dd:c1:7a:59:e0:96:01:07:e8:
                    f9:3d:a2:18:70:3d:0d:49:ac:26:fa:de:f6:96:83:
                    c4:86:9f:00:56:49:51:07:5d:17:05:48:69:4c:f6:
                    69:53:44:e4:8d:bb:ff:9d:d8:ab:10:d1:f4:56:67:
                    ca:db:a8:dc:e8:d8:ef:51:3f:ea:3b:e0:a0:7e:a6:
                    25:fd:74:bd:0e:81:eb:76:d7:a1:b9:68:96:d7:c0:
                    ba:c0:de:d6:0e:dd:a8:25:fd:ef:e2:0f:c2:a3:e8:
                    c4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:9B:1E:A4:43:2A:75:9D:CD:C4:8F:C2:FE:CE:E8:DC:D2:57:98:30
            X509v3 Authority Key Identifier:
                keyid:8F:30:28:2C:86:F1:04:6B:93:12:4C:F2:70:E1:14:E5:F0:26:FF:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzAoLIbxBGuTEkzycOEU5fAm_3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6cd798-31d4-4478-9962-f98796f51022/1/jzAoLIbxBGuTEkzycOEU5fAm_3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6cd798-31d4-4478-9962-f98796f51022/1/jzAoLIbxBGuTEkzycOEU5fAm_3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:1c:71:21:50:fc:83:f4:c0:36:af:d4:52:b7:1b:2c:bb:86:
         cc:50:ff:4f:33:6a:40:1b:61:40:ca:df:fb:6e:b6:65:8e:2f:
         fa:95:85:82:88:9a:54:a4:53:a8:c4:f7:aa:b5:8e:8c:3d:9d:
         90:11:1f:61:23:1e:78:f0:9b:24:d6:23:ee:08:5f:37:ce:f9:
         d5:b5:4c:43:c7:d7:ee:be:d5:b2:c6:34:5c:59:71:5e:7a:5e:
         f5:5d:9a:e2:f4:b2:21:3e:a7:34:1b:0e:b6:dc:5f:42:c8:c8:
         88:fc:37:8e:1c:c6:89:03:3c:08:42:57:9b:6c:45:81:a4:ed:
         16:77:30:f7:f5:08:6f:20:a1:c0:3b:c3:f4:65:57:23:85:b8:
         f7:57:60:4d:8b:38:be:b0:76:9f:9e:74:20:97:10:61:5d:c9:
         2c:c8:70:e1:96:4d:a9:69:67:d7:63:01:b5:f8:bb:04:80:a4:
         60:2a:04:e3:c7:89:3a:cf:24:d5:24:fa:45:4d:22:b8:73:c1:
         b8:ea:4c:eb:bc:60:ca:29:b2:aa:9a:64:a0:73:89:c1:bd:1f:
         3f:fb:29:ba:5e:b0:86:47:f6:30:e7:de:ed:2e:f2:5d:6f:85:
         00:92:53:3b:b7:a5:be:03:bc:ab:e3:22:d9:fa:c9:d0:6c:b5:
         24:2b:c3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----