Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
File:                     jixqlU7QBSEWyinuD89V91LY5HY.mft (raw, json)
Hash identifier:          0NaWLbqBpcc4DTKC18H7Jh5cvIWwIWqgHzQHM0APfpc=
Subject key identifier:   1C:DD:E8:82:93:D2:42:34:3B:75:9F:D7:25:F6:CE:4F:C0:17:82:CD
Authority key identifier: 8E:2C:6A:95:4E:D0:05:21:16:CA:29:EE:0F:CF:55:F7:52:D8:E4:76
Certificate issuer:       /CN=8e2c6a954ed0052116ca29ee0fcf55f752d8e476
Certificate serial:       01962E98CEB4F7EE49CE648FD5378BD3FE6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:28 +0000
Files and hashes:         1: jixqlU7QBSEWyinuD89V91LY5HY.crl (hash: 9oYND6E7RbOlwmB8Lqp/p3hFQMQaO343q6crNFgIklU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ce:b4:f7:ee:49:ce:64:8f:d5:37:8b:d3:fe:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2c6a954ed0052116ca29ee0fcf55f752d8e476
        Validity
            Not Before: Apr 13 10:01:28 2025 GMT
            Not After : Apr 14 10:01:28 2025 GMT
        Subject: CN=1cdde88293d242343b759fd725f6ce4fc01782cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:85:cc:f5:07:9b:f2:af:e8:ed:09:0e:21:01:
                    b9:25:22:66:52:d6:a2:6e:cd:b3:0c:41:d8:44:4c:
                    0b:ec:f1:db:a7:ee:a1:36:ba:d3:7b:fe:29:b8:f3:
                    f3:21:3b:e6:39:24:64:33:14:d4:37:27:f4:45:b0:
                    58:11:ed:5a:91:2e:1e:c7:48:64:36:2b:72:51:a6:
                    8b:6a:6e:6f:f0:7c:38:b7:b0:52:13:41:93:4e:0f:
                    4d:b3:be:9c:97:ac:18:39:80:15:95:73:92:ef:a6:
                    fe:5c:03:41:46:59:61:1b:f0:62:be:81:39:3c:69:
                    02:d4:1b:c2:85:6d:91:9f:11:be:e9:b1:f3:db:b9:
                    43:c9:cc:a2:1a:f5:a5:e3:1b:00:07:48:f5:ac:f0:
                    66:c2:8d:81:f4:79:12:a5:2e:d6:8a:04:7e:fc:cd:
                    53:c7:05:f2:60:ce:d3:97:bb:58:55:8f:74:ef:ff:
                    ec:5f:c8:e8:a9:b8:7c:5a:cd:cc:2a:ca:23:8b:3c:
                    bd:80:93:f8:34:f7:e7:1f:d2:d6:d7:d0:6f:ee:7c:
                    46:f5:b1:c2:85:cb:73:0f:72:ca:8d:1a:d9:b1:58:
                    f9:ee:61:d7:c0:c9:03:16:f2:38:e1:b3:4f:6f:71:
                    68:f1:4c:6a:e9:64:3b:87:82:49:06:b1:6c:fe:4e:
                    8f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DD:E8:82:93:D2:42:34:3B:75:9F:D7:25:F6:CE:4F:C0:17:82:CD
            X509v3 Authority Key Identifier:
                keyid:8E:2C:6A:95:4E:D0:05:21:16:CA:29:EE:0F:CF:55:F7:52:D8:E4:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ba:14:48:1d:60:0a:d9:50:35:bb:df:df:8c:85:3a:9e:d8:
         4b:e6:6f:a6:f6:05:f9:89:8c:d5:d7:8d:0a:46:66:06:0d:bb:
         a9:f6:ea:f6:09:41:90:12:df:68:09:17:60:dd:f8:46:1e:b1:
         38:8d:65:de:e1:fd:0d:e3:75:ab:8d:63:6c:c2:bf:a0:ae:47:
         01:42:b3:2d:b4:df:9d:ec:ee:b3:b5:76:97:3b:9d:3a:f6:a7:
         72:4e:ce:fb:20:b4:74:9b:99:e0:9c:07:10:0a:bf:52:f1:c7:
         f4:c2:16:b7:29:61:21:79:8e:32:76:37:b8:d7:b0:bc:6b:2e:
         d9:37:6f:33:67:d0:38:f8:b9:e7:48:cc:25:b3:1f:11:a4:63:
         35:42:f6:4b:0f:03:ee:ab:60:c0:3b:49:a2:3a:cb:eb:95:bb:
         d0:bb:57:48:96:61:a1:b1:54:b9:7b:ee:ad:c9:6d:c4:d3:ee:
         b0:85:a2:48:07:1b:f2:ed:79:27:da:ad:0e:8e:0b:ac:39:bc:
         39:ad:93:8e:4e:47:a6:10:47:50:35:67:b6:a0:8d:c9:9c:4e:
         99:2d:5b:a8:5d:8a:3b:e7:46:16:e8:b8:0b:0a:1d:a4:30:7c:
         26:e9:2d:5b:90:e9:b4:da:a2:c8:ee:fa:46:f1:8a:bd:3b:ca:
         fc:51:ef:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----