Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
File:                     jlVrUrjk5wn6Vpta43LG4oJm8jI.mft (raw, json)
Hash identifier:          zXDOILhmWcSKLtwxVK7uAyKHQmZUcXPQ5DXcDRWwoY8=
Subject key identifier:   C3:5D:71:4D:8D:E6:EE:00:65:85:47:08:DB:34:72:54:2E:AE:DA:05
Authority key identifier: 8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32
Certificate issuer:       /CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
Certificate serial:       01962F743E93DD0FA6B3969F0565CF56CD3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
Manifest number:          0776
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: OL1d446I3yxzCjYzKmvnNJ7y4OM.roa (hash: JsE4VCK3qUktBFupzIAgFOT4HayiXvdUAIXOsvhciFE=)
                          2: jlVrUrjk5wn6Vpta43LG4oJm8jI.crl (hash: GNbkJTleWIuZK5CLLl+OlI8kYB/dRa+Fi4jFLwiHKlY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3e:93:dd:0f:a6:b3:96:9f:05:65:cf:56:cd:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=c35d714d8de6ee0065854708db3472542eaeda05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:6f:04:92:0b:39:13:42:f7:34:c7:1b:cc:
                    8d:6e:eb:3c:2d:3d:13:f1:0c:1d:23:c8:6b:ab:94:
                    26:6e:ed:e8:ae:c5:a9:e3:48:68:45:c1:2d:2d:51:
                    26:8e:b7:d5:d3:b2:1d:1f:2d:c3:d2:02:ca:ee:e9:
                    34:34:89:6b:2c:8a:2f:45:d9:c8:c5:4f:08:58:fc:
                    f0:40:05:98:6e:68:a3:2b:6a:35:48:26:36:bd:68:
                    e6:36:a5:95:23:4d:cc:d2:43:8e:a6:e3:08:c7:7a:
                    c0:1b:86:d1:c9:57:8e:be:ab:b1:c0:86:99:ef:11:
                    24:f7:d8:9a:0b:31:95:0b:c9:35:25:68:c5:15:93:
                    d7:71:07:bf:d4:f4:2a:65:db:6f:34:cf:d6:cf:89:
                    e4:98:d5:fd:23:53:74:6e:7b:0c:c6:2b:c2:c7:de:
                    75:d8:45:4a:bd:16:92:d1:00:24:eb:2d:fa:61:c6:
                    0b:ec:ce:e9:1c:69:a6:e7:be:a5:33:6c:3f:3b:70:
                    d8:99:b1:09:72:99:d3:ab:06:a2:ae:60:85:1b:2e:
                    33:33:bf:91:41:f7:de:82:33:69:8b:58:6b:a6:27:
                    e2:16:b8:62:4e:78:4e:1b:7d:59:99:37:6b:14:81:
                    ad:06:2b:a5:7a:ba:d5:a8:cd:0d:9a:5c:35:15:50:
                    61:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5D:71:4D:8D:E6:EE:00:65:85:47:08:DB:34:72:54:2E:AE:DA:05
            X509v3 Authority Key Identifier:
                keyid:8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:34:68:85:8e:6b:1d:31:1c:54:af:ec:46:81:4a:0b:48:7c:
         08:6a:26:c8:62:a1:97:b0:90:34:2c:ed:3f:a8:4b:6c:d2:84:
         47:41:ea:96:29:96:56:3d:7f:e2:17:3e:91:f5:f8:ed:6e:25:
         da:84:4b:d1:00:61:a2:51:08:de:62:25:15:a3:21:df:f9:e1:
         75:c8:ad:a3:47:65:8d:11:d5:bb:19:4b:b1:7d:6f:ff:72:fd:
         0b:0a:30:73:05:34:d0:bf:d2:51:b1:ea:5c:03:aa:d1:a5:f8:
         20:d9:96:e4:3c:a4:d9:4a:3b:32:b1:15:e4:e5:0c:86:81:6b:
         c0:11:74:5a:7a:3b:64:5d:33:72:4a:e5:05:a2:cb:5f:db:93:
         84:fc:21:96:66:eb:d7:87:55:6e:ee:c6:e6:82:ec:b3:04:28:
         12:31:5f:38:b4:20:23:4f:64:8e:48:47:ab:47:4c:32:d1:b0:
         23:d0:89:92:f2:6d:0c:72:2e:9b:2d:7a:26:9e:d9:5a:e7:b2:
         85:6b:ba:63:76:9a:c7:02:91:f4:e9:e0:be:4f:52:2d:8b:d9:
         9e:1c:8b:63:98:7e:8b:72:57:55:1c:f3:61:0b:be:eb:1c:ce:
         9b:8b:25:27:b0:c6:5b:62:cc:78:bf:7e:75:5a:f2:d7:27:24:
         db:e3:95:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----