Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.mft
File:                     jc-CaQJi8GIu6_qtFDPVj7nKnh8.mft (raw, json)
Hash identifier:          9vNwxhWIA7HaGdOl3wMaHmsEAlPxa6ti64OXhocfJgo=
Subject key identifier:   2C:B5:85:B5:33:55:B2:CF:2B:94:9B:38:50:D3:8E:D8:D3:31:60:76
Authority key identifier: 8D:CF:82:69:02:62:F0:62:2E:EB:FA:AD:14:33:D5:8F:B9:CA:9E:1F
Certificate issuer:       /CN=8dcf82690262f0622eebfaad1433d58fb9ca9e1f
Certificate serial:       01962F3DA403AD12C356AEFDD4FE68F99A83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jc-CaQJi8GIu6_qtFDPVj7nKnh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: jc-CaQJi8GIu6_qtFDPVj7nKnh8.crl (hash: YLcJhBdzLr1oNnlN4dQTfxKSoGfY2SNEXiQfqlrZFyE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a4:03:ad:12:c3:56:ae:fd:d4:fe:68:f9:9a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dcf82690262f0622eebfaad1433d58fb9ca9e1f
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=2cb585b53355b2cf2b949b3850d38ed8d3316076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:eb:55:8f:e7:b3:c9:9b:67:61:f2:9f:6f:5f:
                    6d:92:33:6f:e3:eb:1d:88:37:98:72:07:0a:47:c3:
                    35:37:cb:b7:ae:76:0d:e3:03:cf:c7:87:f6:c3:51:
                    cb:16:53:0d:92:a7:e0:77:be:29:93:1a:99:b9:52:
                    f6:73:ce:6a:b6:91:84:7d:b2:2d:ad:0e:e5:85:e7:
                    b5:c7:69:ca:73:87:94:28:84:4d:b1:9b:1f:73:28:
                    d3:1a:b3:5e:61:df:75:a5:96:7b:d7:3d:78:00:c2:
                    df:e1:ac:32:0e:f8:f5:47:62:2d:02:d0:35:29:d2:
                    99:b0:c5:a4:a8:f1:d1:8c:be:c4:d8:23:ca:cf:4b:
                    4c:9d:e2:78:9d:28:49:a0:81:1c:a3:22:05:7d:6e:
                    0c:c0:74:f9:69:ea:86:6e:da:d6:94:ab:9c:00:a6:
                    f2:74:04:6f:99:1e:6b:1c:0a:c6:07:9e:c5:ac:fc:
                    b8:52:c2:75:a9:60:64:ac:5b:30:60:08:32:7a:f6:
                    19:2a:1f:0d:e8:81:cf:9c:c2:bc:b4:87:09:75:eb:
                    a2:54:03:64:de:ee:90:e8:17:2b:6e:48:d8:a5:1a:
                    ac:36:27:b8:14:36:3f:82:47:43:89:1c:60:a8:78:
                    1a:a6:b7:27:89:07:82:04:a3:3f:5d:92:bc:3e:ef:
                    98:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B5:85:B5:33:55:B2:CF:2B:94:9B:38:50:D3:8E:D8:D3:31:60:76
            X509v3 Authority Key Identifier:
                keyid:8D:CF:82:69:02:62:F0:62:2E:EB:FA:AD:14:33:D5:8F:B9:CA:9E:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc-CaQJi8GIu6_qtFDPVj7nKnh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:dc:92:89:a6:31:d3:d2:71:57:a0:3c:5d:bc:c8:2f:2c:59:
         01:4c:6c:e9:a7:30:41:9a:cc:84:69:76:3a:54:83:e9:a6:63:
         48:df:03:45:be:d0:bd:6c:11:82:b5:4b:a7:2f:0f:44:1c:b0:
         a4:5c:1b:c7:9f:1b:2a:b3:87:fc:25:db:3c:b4:86:aa:08:5b:
         c6:eb:95:69:e9:15:5e:92:e5:3c:bc:76:34:dc:0a:3e:2a:ba:
         56:21:41:de:e0:d0:84:7a:ec:ec:88:7e:58:d1:aa:e5:1c:95:
         3d:a8:92:e7:20:cb:73:41:ce:63:e7:03:e6:fb:73:b6:45:ea:
         09:1b:01:2e:69:4b:67:da:7d:5a:f4:4c:82:b1:56:ad:5e:ff:
         e8:bd:0a:50:8f:dd:ca:ab:13:e6:41:56:bd:01:06:e5:9b:20:
         da:f7:0c:15:31:7a:aa:21:38:35:2c:a6:4b:66:da:23:7c:18:
         29:a3:54:35:f5:16:39:08:28:96:f2:37:b0:17:34:ba:d0:8d:
         1a:45:06:42:eb:a8:6b:5e:65:c1:46:26:8a:ac:d9:63:26:8a:
         c9:f5:c5:f8:77:bc:9e:31:b2:92:ea:b9:79:13:0f:28:fb:2f:
         f9:32:a8:b3:65:3c:1d:3f:ff:4a:ab:c2:7c:7c:b3:b9:93:07:
         d0:bd:de:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----