Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
File:                     jImAGxmqlyitT2u3GFwR8UudjXw.mft (raw, json)
Hash identifier:          igH4my2n+CYH7nMFQEwWGCgN6ekdWETlnvS2dbDwTyk=
Subject key identifier:   55:8E:0B:F9:71:D9:8F:E0:6D:CC:7A:A4:29:9A:2E:44:29:CD:46:9C
Authority key identifier: 8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
Certificate issuer:       /CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Certificate serial:       01962E98715CB5A87341539A422A279B4F7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: jHt_1MNQirxASDmqQViticPF-ps.roa (hash: PWOLXQilLHy5JAj1j3MO8KwTsebKycEVRdXXWLZvuq8=)
                          2: jImAGxmqlyitT2u3GFwR8UudjXw.crl (hash: vM1ah2HDhoUHtuTrlF1U1DTsZBo8m8XTRxaBQtebbuQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:71:5c:b5:a8:73:41:53:9a:42:2a:27:9b:4f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=558e0bf971d98fe06dcc7aa4299a2e4429cd469c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:37:d4:6f:3a:3c:53:70:78:20:12:78:15:d3:
                    4e:61:40:fe:40:97:8e:04:1e:2d:b0:62:2f:d8:d8:
                    c0:bb:1e:f6:cd:0b:6e:39:6d:71:ba:7d:d3:9d:2e:
                    74:2a:bd:26:ae:42:0e:b5:09:95:2c:b2:23:66:bf:
                    c7:a1:29:c4:13:5b:eb:62:1d:3c:83:75:3b:4a:52:
                    9f:b3:22:ed:be:f8:59:30:79:ec:03:8c:1e:3f:81:
                    cc:01:44:03:29:bc:31:4d:b5:e0:8f:53:2b:2f:1b:
                    9b:ce:d3:63:1d:ed:ba:84:4c:3d:a0:7d:45:b5:e6:
                    cf:09:3b:f8:ca:cb:ff:c6:19:06:b8:a3:b7:65:c2:
                    c2:9f:1a:69:94:89:29:de:ef:3c:11:80:a9:41:0f:
                    7b:94:bd:d9:09:13:27:eb:86:ec:9d:de:a1:91:49:
                    ac:52:ab:f6:ad:c9:1d:44:cd:a4:e5:98:22:0f:92:
                    71:3e:a8:20:14:7f:3a:f6:49:16:1b:b4:b5:35:19:
                    23:c7:58:87:f5:6d:b0:e9:87:e4:ef:c6:c8:69:a6:
                    dd:fc:d0:66:61:b0:5c:fc:c2:7c:92:36:f3:96:4b:
                    fd:12:37:b4:61:28:35:2e:d8:90:8f:52:3b:61:b4:
                    09:68:8a:c1:4e:a9:9e:13:a0:56:a1:65:d5:56:47:
                    77:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8E:0B:F9:71:D9:8F:E0:6D:CC:7A:A4:29:9A:2E:44:29:CD:46:9C
            X509v3 Authority Key Identifier:
                keyid:8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:00:3f:77:d6:28:27:76:5a:9f:41:03:a7:33:a8:87:91:c3:
         d4:77:2e:f6:7c:59:b7:06:d0:49:09:9a:6d:91:9b:a1:1b:46:
         04:d9:af:39:51:8d:20:e8:05:f9:10:24:2d:06:83:8f:63:85:
         6e:18:76:d0:ae:d2:8a:92:00:b0:14:0a:34:55:62:0e:00:88:
         68:1c:ab:94:6e:f0:a5:e5:01:bc:01:8f:e2:99:8b:ec:83:f8:
         52:9d:f1:a7:6d:eb:59:89:40:46:25:e9:fe:f8:44:82:ef:4d:
         ec:c4:84:c9:6f:05:0e:fd:af:4a:bd:e6:3e:7d:00:13:ca:13:
         cc:18:d4:dd:de:63:e8:f2:ad:4a:8f:25:86:03:a3:08:45:74:
         a5:09:69:8a:5f:a4:d8:26:8d:a4:8a:0c:53:da:af:f9:0a:b9:
         d5:71:1a:5d:ac:1c:70:a6:27:1e:cf:ab:41:81:9c:09:83:cd:
         2a:f2:c0:4c:d2:5c:75:4f:b3:f2:4f:13:d5:f0:2f:41:10:15:
         3e:ee:53:1e:4a:58:5a:81:fc:c2:78:06:5c:2c:ce:40:0b:d8:
         8d:8c:77:cc:f6:3f:c1:d0:08:75:1d:6b:bf:c1:f1:ce:38:04:
         82:cf:db:7d:ad:1e:d5:51:84:42:e1:17:5d:3c:87:a0:e7:d9:
         68:f9:3e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----