Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
File:                     jYkiPB8zXAzFaTWfot2jSaIjbMs.mft (raw, json)
Hash identifier:          zTOr86lBaFOrmAKyiK6Wt7yt/46XEnu+zPwCGrs2418=
Subject key identifier:   8A:B8:35:2A:42:95:62:42:09:7C:C9:BF:4D:20:29:41:E5:D1:42:1D
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Certificate issuer:       /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial:       01962F74516637467D119EFD4895BC7554EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
Manifest number:          0EA8
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: 1-VympxjBDWi5MNPd5PqkAiFK8cw.roa (hash: g9oAglIOu05tbBj4MBirO8ol3RXV21sLtMa1CGtPD7w=)
                          2: RJkO8AUrZrMkwWrIpOKAj9ZRQns.roa (hash: DMl9U1g0NhHcsK5udeo5/s32paUDRQXnGqAqFKyzYXk=)
                          3: jYkiPB8zXAzFaTWfot2jSaIjbMs.crl (hash: Rmw17stna7caZ6vZxWJbKm92YRsy5mzHkuiQk+xrfFo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:51:66:37:46:7d:11:9e:fd:48:95:bc:75:54:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=8ab8352a42956242097cc9bf4d202941e5d1421d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b7:5e:56:bb:80:9e:9f:ab:1c:03:fb:6a:38:
                    19:5d:5f:cb:58:39:b1:9b:45:d9:16:b9:30:72:f5:
                    17:0f:fa:ec:6b:c2:13:12:1e:03:90:32:11:0b:ec:
                    73:da:36:5c:59:9f:b9:57:05:f2:e9:2d:de:d6:10:
                    38:99:18:2e:2c:c3:0b:15:6a:6c:58:cd:bd:27:e1:
                    2a:9b:5b:df:0a:20:55:f5:df:18:e9:3d:f4:cc:59:
                    33:18:18:7b:5d:ab:c8:00:e1:ad:eb:00:2f:b3:8c:
                    30:cd:9b:33:b8:36:a4:d2:38:e5:96:57:aa:b3:9f:
                    82:05:72:16:56:15:44:4e:db:5e:d2:5a:27:6b:66:
                    84:e7:60:39:1b:79:09:3f:39:9a:b4:a2:9e:84:20:
                    3b:3e:91:de:eb:11:2b:da:06:de:31:d1:75:71:ab:
                    3e:ff:a3:30:42:92:53:22:fc:06:21:0f:ba:4d:b6:
                    26:0c:1e:3f:20:7f:17:9d:43:c0:29:01:b3:a1:00:
                    00:57:50:4a:90:80:c2:76:a1:b4:76:5e:73:37:13:
                    16:dd:df:37:0c:8c:aa:20:32:37:41:8e:5c:73:0c:
                    2b:fb:91:54:d7:b3:ad:af:5c:b0:38:c3:d0:87:35:
                    00:26:e6:57:2a:68:9f:65:07:67:9d:59:1e:ae:a9:
                    39:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B8:35:2A:42:95:62:42:09:7C:C9:BF:4D:20:29:41:E5:D1:42:1D
            X509v3 Authority Key Identifier:
                keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:8e:4c:9e:c3:b7:4e:d4:15:b7:35:a9:95:4a:70:3f:30:9b:
         db:82:cf:93:17:54:f7:ee:b2:e1:45:5a:27:f4:47:14:d1:e6:
         04:97:4c:b7:72:94:5e:db:f3:9f:d9:63:e0:00:8c:70:f2:30:
         6e:9a:9c:ce:07:f7:8d:42:c5:0b:4e:fc:e0:91:59:11:ee:de:
         2e:06:c9:2c:bc:9e:12:4e:46:7b:d3:8a:e0:10:10:9a:76:32:
         14:af:31:c2:1c:8e:6f:c1:45:97:70:fc:9a:2a:54:dc:25:1d:
         74:a9:53:3c:46:43:5e:df:5e:a2:50:51:92:e5:fd:25:4a:5d:
         ff:f4:4d:34:2c:66:95:29:c3:5a:7a:a3:7f:d2:6d:a5:80:d6:
         88:a2:5b:52:b8:d5:71:12:42:c0:aa:d2:bb:ea:1d:39:9d:c7:
         51:ec:20:61:36:d2:4d:59:66:3f:55:c1:ff:7a:30:82:64:3e:
         14:e4:0d:09:c4:4f:26:d1:de:6b:6b:6e:c3:e6:24:d5:64:f1:
         84:99:d8:0f:0e:bb:7e:5a:60:72:c1:00:51:18:93:ef:66:0b:
         61:a8:80:64:b8:69:6e:75:d3:2e:42:b7:ca:5f:d4:57:8f:f0:
         4f:4b:c2:f8:75:ac:19:dc:2d:9a:bb:ab:29:21:d3:4f:7e:16:
         1d:4c:92:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----