Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
File:                     JG-b54PXPZWriqVGGeYPkBHATWc.mft (raw, json)
Hash identifier:          8li9TW4yDgOdE/rhRwJqRj3QmGzAQjSvKdh6+nbNMdI=
Subject key identifier:   18:5A:1A:0E:6B:2B:8F:15:F0:8F:C4:72:69:87:C8:D7:FF:32:E8:AB
Authority key identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
Certificate issuer:       /CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Certificate serial:       01962E2AC91C4D5ACA0EF26CFF067B54F72A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
Manifest number:          067A
Signing time:             Sun 13 Apr 2025 08:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:17 +0000
Files and hashes:         1: 1714kp0cfca_poPK5-VjFlBE8Bk.roa (hash: j4eVSfOj5HVSdHjC10lxDRGeLnqFO2C+nkquqN7eUhM=)
                          2: JG-b54PXPZWriqVGGeYPkBHATWc.crl (hash: 8HZujDL4NC8z/Up4NyvBqgGfvLUTsYXpM/HwnVi2Ma4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c9:1c:4d:5a:ca:0e:f2:6c:ff:06:7b:54:f7:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=246f9be783d73d95ab8aa54619e60f9011c04d67
        Validity
            Not Before: Apr 13 08:01:17 2025 GMT
            Not After : Apr 14 08:01:17 2025 GMT
        Subject: CN=185a1a0e6b2b8f15f08fc4726987c8d7ff32e8ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:65:fa:92:e9:7b:4e:14:25:21:82:8b:88:
                    23:15:51:22:0a:c4:af:95:13:59:1f:a1:73:fd:70:
                    f2:fe:a3:74:67:74:98:40:9c:81:cd:ec:63:5e:8f:
                    b3:87:f7:80:83:88:fa:78:1f:55:54:7b:7e:56:cf:
                    5a:77:0d:92:83:70:02:61:16:a3:f5:d6:76:f5:ec:
                    a1:cf:b6:b9:28:95:ae:3b:33:3b:d1:9b:0f:b6:e0:
                    96:5b:db:3d:5e:89:09:bf:0c:1b:4d:1a:d8:26:1f:
                    20:d3:29:da:29:4e:98:4e:13:22:e2:5d:b3:72:b0:
                    2c:59:37:2f:77:fd:48:6c:97:13:fe:80:10:cb:7c:
                    46:f7:f1:9a:d3:d2:fb:c1:f4:71:64:a3:1f:9a:0e:
                    14:00:02:5a:ea:c1:12:46:88:50:96:cf:f7:5c:bb:
                    dd:ff:48:5a:4e:dc:94:64:e1:44:0e:b0:dc:58:a1:
                    31:2b:ef:a7:3e:ff:91:a9:50:f7:41:35:ff:45:5a:
                    c8:41:d4:2b:67:26:9f:87:cf:84:c9:8b:8a:04:96:
                    fd:9b:46:c1:6d:70:ac:d5:f0:fe:18:8f:85:d7:da:
                    cb:a7:7f:18:1b:95:28:ea:be:bd:2c:97:7b:08:c0:
                    f9:36:f5:1e:89:cf:90:fe:37:bb:ec:99:df:0c:4a:
                    7a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5A:1A:0E:6B:2B:8F:15:F0:8F:C4:72:69:87:C8:D7:FF:32:E8:AB
            X509v3 Authority Key Identifier:
                keyid:24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:17:ac:41:5d:ab:82:38:23:e1:65:21:9b:4f:f6:75:ac:3c:
         0d:23:f1:68:9e:1c:47:d6:d8:bf:48:b8:2b:d8:46:d4:80:b8:
         92:4d:f3:74:ee:5c:ae:e4:49:3d:a2:bd:99:61:ce:ef:b5:22:
         1e:89:0c:59:0f:34:ef:32:d9:3d:8f:a9:9f:40:61:2f:1a:15:
         ef:13:62:56:2e:fc:c1:a2:0f:06:66:19:3f:85:93:9e:fc:15:
         99:6f:42:b5:0b:b7:c5:c5:92:c0:bc:30:b7:d6:b4:00:59:f1:
         1b:96:52:b7:76:2d:51:0a:fb:fe:4e:18:66:9c:0e:51:8a:f9:
         a3:9b:8b:ff:ea:fd:67:1d:ca:03:10:8d:cd:0d:d2:b6:ca:4d:
         6a:87:24:bb:76:1e:61:cc:47:45:4c:d1:3f:5c:ab:99:c7:ce:
         f4:8f:80:ee:12:af:fa:d8:13:07:84:12:53:44:79:5f:29:ee:
         7b:55:4a:88:1b:8e:2b:26:dc:4d:04:9d:2d:7c:ec:2b:bd:e5:
         d5:cd:f1:01:b1:12:cb:4f:f9:31:9a:ab:69:28:07:7f:2a:05:
         f6:ee:1d:8d:99:82:c2:b3:db:15:f2:17:b2:6b:04:c6:89:e6:
         f7:81:ad:e6:77:0c:de:a3:1c:4e:58:8e:89:4b:81:21:02:95:
         23:23:b4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----