Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
File:                     JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft (raw, json)
Hash identifier:          8CC6SRTMT5lu8PqiSxxh3EQr9uKmrODXFxvsNYCPqxc=
Subject key identifier:   B9:61:B4:DE:E0:4A:5F:16:7E:8C:2C:08:E8:CA:AD:A5:EA:5A:01:BE
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Certificate issuer:       /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial:       01962E2B41B09BB4DB7F7702EBAED9164C28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
Manifest number:          152B
Signing time:             Sun 13 Apr 2025 08:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:48 +0000
Files and hashes:         1: J5hR6qbnwqDQorjgQKA4nS-MMic.roa (hash: K6vNh4g2g+c8tlGqdXpR0r75yDquSeuJCke6e2iRcws=)
                          2: JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl (hash: JdfJJFlMzGiqF8TnTpl6fqU0EEKGTVe0xTBIisQ2L9s=)
                          3: Yjz0EriP9DUb51GdW-zHnP36Zd0.roa (hash: cjw7MupvPbtiLozQbL8Owq78kSNGKocuToBDzuLGFa4=)
                          4: ho-wkwgWDXjGCfVU_we6F8qB4H8.roa (hash: i1JSAfJoXpijSpLgKVP9y+qng3uHMvrJen2OJUNIMdo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:41:b0:9b:b4:db:7f:77:02:eb:ae:d9:16:4c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
        Validity
            Not Before: Apr 13 08:01:48 2025 GMT
            Not After : Apr 14 08:01:48 2025 GMT
        Subject: CN=b961b4dee04a5f167e8c2c08e8caada5ea5a01be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cb:6d:9b:86:58:e2:ee:8c:58:be:04:72:e9:
                    e0:19:fc:98:25:33:9f:c9:b3:0b:34:2b:ed:e2:2e:
                    ff:c8:62:5d:d4:15:83:16:a7:09:f9:f1:22:82:5c:
                    53:eb:a5:93:77:ca:39:c0:a9:d5:d3:5c:d5:24:c5:
                    40:64:c2:51:be:96:3e:cf:44:e6:49:2a:c3:98:63:
                    75:6f:d9:d8:39:ee:0b:41:d5:fa:08:a8:a3:f5:08:
                    66:b5:60:5b:ef:07:2d:41:65:70:61:1a:37:4f:68:
                    72:6e:2c:ae:a5:82:5c:9e:02:91:88:a2:dd:31:f5:
                    1d:3d:ec:c1:b4:58:ee:c8:83:6d:1d:90:33:8b:c7:
                    4a:47:31:93:eb:b0:0a:b7:80:15:b6:2f:f8:f0:dd:
                    36:36:7e:d5:7e:b9:3f:46:d0:51:56:d6:3d:8c:e6:
                    e9:e0:6d:bb:00:c4:64:82:ba:29:0e:37:e4:ca:fa:
                    d5:18:f3:b6:29:da:15:61:bf:d5:28:ed:1b:57:c6:
                    20:88:68:78:b1:1c:1a:93:62:66:6f:b4:75:fc:06:
                    fc:72:ed:8b:0e:47:f7:74:ee:1a:09:02:f2:67:35:
                    fb:49:47:e6:e6:95:e5:e7:4e:88:d2:0b:91:ad:2d:
                    b5:ee:18:ca:d6:78:20:2f:7a:ed:f0:e2:1a:ec:2a:
                    02:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:61:B4:DE:E0:4A:5F:16:7E:8C:2C:08:E8:CA:AD:A5:EA:5A:01:BE
            X509v3 Authority Key Identifier:
                keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:0c:f1:a1:c1:93:7f:b4:8d:4a:2d:31:73:5e:d5:fb:97:9e:
         89:4c:8f:6a:be:a0:c2:1a:31:15:e0:33:7d:d2:0b:56:3a:8f:
         b2:24:3e:4b:43:9b:2d:b7:ed:18:66:0c:03:82:5e:fb:48:09:
         8d:a2:aa:ee:45:2e:4d:e9:4f:63:2b:43:d7:67:39:36:eb:d9:
         39:b0:5d:4d:94:98:90:b1:98:e4:21:73:97:dc:5d:47:99:44:
         3a:4d:89:3e:59:88:ec:ef:8b:43:7a:3e:74:b1:3a:4d:41:ef:
         72:b7:c8:ca:f1:24:c3:ac:63:b8:1f:6f:70:c9:8c:e2:51:37:
         9c:96:fe:bc:4c:25:6e:a3:b4:67:70:70:d0:13:61:f7:42:1e:
         9f:c6:e8:e4:26:6c:21:9d:39:9d:a1:d3:65:39:62:52:cb:f1:
         50:cb:2c:65:cf:22:dc:db:e9:ef:36:2d:6a:62:46:89:c1:72:
         15:1e:c2:bf:28:1f:49:9d:ba:39:54:14:d5:63:9b:78:b2:49:
         a7:6c:59:a6:59:c0:26:70:d2:e9:6c:9a:8e:b4:bd:2c:95:ab:
         43:46:6f:f0:a5:5e:03:42:12:99:01:ee:1d:c4:6d:3b:19:63:
         ea:7a:d1:28:6d:2b:c8:6c:f3:3e:a3:5a:08:7c:a3:19:6c:ef:
         af:cc:52:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----