Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b984d6-167a-4c0d-b544-58d5bb71c2a1/1/jdwENRyFimp_4PkIErsQZV5a-Mo.mft
File:                     jdwENRyFimp_4PkIErsQZV5a-Mo.mft (raw, json)
Hash identifier:          CcJ3NFsF6j49mKVdKBOBnET0GLYBk0KaPeJ7ucJ0tcA=
Subject key identifier:   23:65:32:2D:3C:33:90:18:CC:63:5F:D7:C6:ED:AE:82:1F:BB:AE:8F
Authority key identifier: 8D:DC:04:35:1C:85:8A:6A:7F:E0:F9:08:12:BB:10:65:5E:5A:F8:CA
Certificate issuer:       /CN=8ddc04351c858a6a7fe0f90812bb10655e5af8ca
Certificate serial:       01962F3D85204E18746A5159ADCF444AF260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jdwENRyFimp_4PkIErsQZV5a-Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/b984d6-167a-4c0d-b544-58d5bb71c2a1/1/jdwENRyFimp_4PkIErsQZV5a-Mo.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:22 +0000
Files and hashes:         1: jdwENRyFimp_4PkIErsQZV5a-Mo.crl (hash: JWUE5/Oidj9ZSMCFEeVpIh6fk+hUkugcM0zStQ8QLug=)
                          2: vTPGgvTFOTKcwrxoY8g2suU_KuI.roa (hash: z6QhLi9xuHghOnwXqxIVXZYJknTyD77QAsOudJ+xOTg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:85:20:4e:18:74:6a:51:59:ad:cf:44:4a:f2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ddc04351c858a6a7fe0f90812bb10655e5af8ca
        Validity
            Not Before: Apr 13 13:01:22 2025 GMT
            Not After : Apr 14 13:01:22 2025 GMT
        Subject: CN=2365322d3c339018cc635fd7c6edae821fbbae8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c9:7e:54:81:75:ff:cc:52:ff:3c:1e:e0:11:
                    15:b2:40:c7:20:73:27:ff:d7:86:37:72:ea:f3:b3:
                    7c:54:82:1d:82:c8:0d:f9:99:d2:5b:d7:7c:cc:38:
                    be:df:b0:d5:a7:91:21:68:f0:48:d6:9f:dd:68:0d:
                    0a:1f:39:62:56:cd:e1:f6:9b:71:8e:ed:90:c5:4f:
                    a3:99:9b:e7:ea:be:55:8a:a3:b1:fa:6d:2e:6a:76:
                    af:e8:32:be:95:33:a3:ce:a3:7a:fd:2a:4c:0c:0e:
                    c6:84:83:24:c5:b1:b8:fc:f3:38:e9:e9:40:53:c2:
                    5b:f3:13:f8:f8:c2:11:ec:83:f8:da:ba:44:b4:6a:
                    91:77:05:78:50:e6:55:30:9d:f2:65:26:8a:54:f1:
                    93:d0:42:ab:20:b5:61:2e:07:07:39:c4:ed:5a:27:
                    d9:a7:c3:b7:7a:e0:f5:e5:bc:db:f6:a3:9e:05:53:
                    56:41:25:58:ab:57:a3:80:bd:85:e4:07:2e:50:ec:
                    12:55:45:0e:ca:8c:b9:46:e0:b7:51:59:3f:52:10:
                    38:dc:18:1f:28:da:05:d7:07:4f:bf:75:32:06:d2:
                    df:4b:43:ba:33:e4:a3:8e:ff:9e:45:92:03:42:4c:
                    0f:a8:2d:f9:84:4a:ee:51:c6:e8:d6:4e:24:ea:6e:
                    a9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:65:32:2D:3C:33:90:18:CC:63:5F:D7:C6:ED:AE:82:1F:BB:AE:8F
            X509v3 Authority Key Identifier:
                keyid:8D:DC:04:35:1C:85:8A:6A:7F:E0:F9:08:12:BB:10:65:5E:5A:F8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdwENRyFimp_4PkIErsQZV5a-Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b984d6-167a-4c0d-b544-58d5bb71c2a1/1/jdwENRyFimp_4PkIErsQZV5a-Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b984d6-167a-4c0d-b544-58d5bb71c2a1/1/jdwENRyFimp_4PkIErsQZV5a-Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:d8:61:4b:b2:34:a0:4d:96:51:6e:f7:6f:d1:70:e5:8a:a0:
         cd:19:04:e2:b3:d3:cd:3d:36:a8:8f:04:8f:08:25:2c:89:21:
         48:45:58:06:9f:1d:34:b9:b6:e5:32:52:92:b6:10:33:e8:fb:
         69:e0:60:2f:c8:02:c2:d7:48:86:03:23:dc:b1:a6:61:0a:17:
         93:83:60:e6:a8:a1:6f:e8:47:67:18:e8:81:55:4e:8a:2d:71:
         ca:68:7e:0e:4a:19:bd:40:1a:15:c6:49:6b:fb:79:fa:fe:d2:
         68:c7:4c:45:74:e5:d5:62:42:51:d3:e2:77:c3:54:d3:1a:c6:
         ab:17:4d:84:6e:6c:73:87:ad:d3:e7:c9:03:3e:0a:b8:c0:a7:
         0c:f2:2c:1f:6a:8a:2a:5e:36:6f:1b:a0:21:5f:51:d9:af:2e:
         d4:a2:b9:b0:23:e4:db:5b:1f:c5:7e:9c:40:e3:00:29:08:6c:
         9f:f2:d9:fb:db:6b:38:2f:d6:fa:a9:41:39:5d:00:40:6c:3a:
         45:f7:40:1b:b2:58:d3:03:02:f3:5b:43:d4:51:b9:7f:ff:73:
         01:c5:83:81:65:52:16:e2:9b:93:30:98:e4:f2:a3:f1:51:17:
         00:b4:2a:19:20:40:3c:d8:39:1d:70:57:4d:06:84:de:2b:4c:
         64:29:65:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----