Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
File:                     jb7S38YJhwkqB6Dty0arFMv3QxI.mft (raw, json)
Hash identifier:          /ql+R93lnuPJDhhfxAnmxJ4EhC2o9sbrfGvY2rj2VVU=
Subject key identifier:   AA:BD:FB:ED:E5:E9:42:A2:82:69:00:C7:0C:57:07:8F:6B:67:90:6A
Authority key identifier: 8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
Certificate issuer:       /CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Certificate serial:       01962F749243C3AB2A838270EEBD8BD095E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
Manifest number:          1044
Signing time:             Sun 13 Apr 2025 14:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:30 +0000
Files and hashes:         1: MEDzHD9q2eGweUQdapdjXMBMfTQ.roa (hash: zXMAfE64URHINF27A6nJI8RqMOkKP0TBeGh/Il74bmY=)
                          2: TJNsPm3cbta4SQWCq5-FtGHmun4.roa (hash: /493UDv5vGkPWe3z6b3+uF0MkKOjrmJEUEa2xUPVozs=)
                          3: jb7S38YJhwkqB6Dty0arFMv3QxI.crl (hash: xelMwhc9bG86SH/QK4pHM+FPU2IeMA6ZzxNmz1NSKDs=)
                          4: sL9Kz85GaDEa7LnBULtmZSLy-lo.roa (hash: XUJoqmnJJ5H1J5j7ZDude3PAUu4a4U54u3Ws3xOI5pg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:92:43:c3:ab:2a:83:82:70:ee:bd:8b:d0:95:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
        Validity
            Not Before: Apr 13 14:01:30 2025 GMT
            Not After : Apr 14 14:01:30 2025 GMT
        Subject: CN=aabdfbede5e942a2826900c70c57078f6b67906a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ba:a4:1b:6f:35:49:e2:d3:e4:23:1b:32:88:
                    e4:b8:3a:ec:15:0f:ea:f3:47:e6:d6:89:6a:2a:a9:
                    8f:b9:37:44:1d:fd:e9:54:8f:84:f0:5c:9c:ec:9b:
                    81:58:eb:0a:9e:16:0c:5f:b8:bd:79:da:22:d6:41:
                    3e:28:ce:4f:60:2e:3c:c8:32:93:5a:70:aa:00:62:
                    11:04:0e:ce:45:b2:60:49:d9:fd:67:10:d0:50:79:
                    ee:31:e9:8f:af:ec:e9:ac:a4:d6:9f:e0:91:78:a6:
                    80:5e:eb:08:4b:aa:ea:62:e4:ed:20:e0:11:2c:73:
                    11:58:09:c3:71:a9:e6:6b:b7:40:f1:02:57:bb:59:
                    b9:5c:94:92:20:cc:40:9a:7b:62:3e:76:d8:38:15:
                    5e:10:31:f7:86:5e:30:82:d4:07:e0:9d:cb:6c:7b:
                    71:23:b1:27:53:1d:38:05:fa:90:75:33:51:76:7b:
                    b8:c0:76:ba:62:fa:78:9a:af:4b:ba:05:b9:e7:39:
                    6e:44:80:dc:83:a4:17:a7:5e:be:fc:d2:9d:55:4c:
                    5f:19:e1:ca:ee:88:f3:f9:f5:1b:65:ee:ed:d8:58:
                    b4:28:45:ac:32:d3:51:ca:ce:7f:39:75:70:a2:a8:
                    59:65:e3:1c:4e:8e:7f:d1:75:77:ca:e6:a7:ae:9e:
                    d8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BD:FB:ED:E5:E9:42:A2:82:69:00:C7:0C:57:07:8F:6B:67:90:6A
            X509v3 Authority Key Identifier:
                keyid:8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:ab:65:ad:b3:54:b4:5f:77:4d:a7:a5:f4:3a:da:51:ca:72:
         90:b2:91:b3:32:c9:69:ee:b9:db:be:61:90:61:c1:e1:00:8f:
         c8:99:d1:e2:7a:b4:72:c2:a1:67:ca:a3:e4:28:c9:83:9e:63:
         dd:8e:83:10:e0:7b:27:b3:7b:13:dc:65:b2:9c:b7:56:db:16:
         3d:ee:05:52:12:2f:cf:4b:61:78:48:b4:ca:07:1e:d2:a3:43:
         4e:a5:03:ad:14:29:ff:0a:5f:7f:85:25:f3:db:c3:86:cc:47:
         4d:44:0b:02:39:24:31:d5:f5:ed:c9:d4:af:12:58:aa:c7:ee:
         f3:df:ce:e4:08:19:db:06:f3:d4:aa:4a:41:11:36:e7:f2:67:
         20:14:ae:54:0d:0b:4c:90:a1:a0:42:6e:b4:6d:3e:9e:b6:75:
         1f:17:a2:0d:86:71:17:54:60:59:b1:9d:21:fb:05:f7:8c:42:
         e5:fd:f3:96:e1:b5:e9:60:a3:56:28:51:77:ab:47:df:d7:ca:
         fc:fd:56:d0:a4:26:2f:fd:21:de:32:f2:3c:49:39:79:3e:fc:
         18:14:b3:dd:21:db:3c:72:55:55:b1:e5:87:e2:0c:6d:1b:c4:
         84:df:e2:d9:7a:2d:ab:9f:67:43:5c:ee:90:77:33:1d:1a:ee:
         41:1f:e1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----