Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
File:                     jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft (raw, json)
Hash identifier:          eoYLmOr9WKEDnhU80UCAJECrLqpvKNekGvPWeX7mnV0=
Subject key identifier:   40:1C:EF:E4:9C:A1:19:70:61:B3:E3:9A:8E:69:C7:25:8C:00:65:09
Authority key identifier: 8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
Certificate issuer:       /CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Certificate serial:       01962F3DF84925426DF18DCCA865D6F0946C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 13:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:52 +0000
Files and hashes:         1: dHwX8PQaURSRhzT9O267zp2eAAU.roa (hash: pQKJANjM+1Peo4ZdiwJW4yKvtPIT0ly/kwXsgNJ+gjU=)
                          2: jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl (hash: 4Wk7VXexmLoEG9E/8h6shDIJkRFUz+qc4WaklPZImls=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:f8:49:25:42:6d:f1:8d:cc:a8:65:d6:f0:94:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
        Validity
            Not Before: Apr 13 13:01:52 2025 GMT
            Not After : Apr 14 13:01:52 2025 GMT
        Subject: CN=401cefe49ca1197061b3e39a8e69c7258c006509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:74:f6:60:6a:ef:fa:ca:6c:b6:3d:ac:02:b7:
                    97:83:e6:ba:1d:e5:8d:37:f2:46:6d:4d:da:22:94:
                    77:ca:5c:a4:a7:80:07:19:26:fa:73:5c:80:39:25:
                    3e:d6:26:39:a2:06:e8:b8:01:ff:60:55:7a:d4:ad:
                    0a:73:1a:8b:29:6a:7e:6a:96:6b:65:ac:18:93:83:
                    43:32:a7:de:52:27:c3:86:7c:e0:ef:3f:22:50:bb:
                    f3:33:19:49:d3:14:48:14:f3:b4:4f:28:3b:9b:b3:
                    5b:8f:4a:9c:39:21:76:20:61:60:23:f0:b4:93:59:
                    91:33:8b:07:ce:91:90:7f:ad:32:10:bd:10:b2:42:
                    4d:1d:98:50:95:f9:05:34:46:9a:f8:58:7f:00:df:
                    e7:02:c0:4a:44:69:98:9d:34:ba:e7:59:46:35:5a:
                    3e:8c:07:90:23:77:60:2a:32:d8:f0:d6:e6:b3:d5:
                    c3:b3:24:c9:88:4e:c2:d3:dd:74:69:e2:a7:94:45:
                    f3:b6:48:10:5a:64:51:e5:a8:fd:33:ae:b1:5e:c9:
                    6e:e1:0c:26:00:b5:2a:33:1b:6a:20:8b:aa:dc:1b:
                    9d:6f:ae:ad:f4:9e:22:ca:1b:4e:f9:22:d9:aa:a7:
                    ae:09:3d:84:00:eb:68:ee:a0:9a:f2:b8:a7:f9:f3:
                    85:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1C:EF:E4:9C:A1:19:70:61:B3:E3:9A:8E:69:C7:25:8C:00:65:09
            X509v3 Authority Key Identifier:
                keyid:8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:9d:e5:e5:13:b9:82:32:1b:4a:6d:3f:99:b5:94:7f:0d:13:
         59:4a:50:2a:87:c8:7f:31:ad:bb:a5:ac:6b:c7:a6:11:4a:be:
         f4:c4:40:64:60:a0:dd:34:b4:9b:f0:6b:ea:34:a4:ee:97:95:
         8d:e3:b8:0c:a8:25:3d:30:76:00:6a:ff:d0:2d:b0:26:6e:19:
         81:bb:51:47:93:4d:1a:be:44:94:73:36:fe:af:61:43:64:3c:
         50:88:3a:eb:09:53:75:57:3b:b3:2b:7c:6c:ee:00:46:b6:d8:
         eb:72:9b:9d:8c:c8:22:7d:20:bb:43:c8:51:24:f4:db:2f:2c:
         be:dc:11:d8:f2:1d:90:7a:8c:83:b8:de:ed:53:72:89:b7:ae:
         a6:68:14:11:55:b3:c2:d6:75:f7:ae:e0:e7:d2:de:12:9a:4b:
         45:f0:0f:d6:8d:b5:cd:c0:01:d4:84:ce:9f:10:97:9d:de:ff:
         78:e7:2c:64:ae:7d:0b:b9:00:0d:17:4c:63:d4:90:7e:f6:79:
         8f:e5:38:c6:26:85:4e:58:bf:0b:48:b3:08:77:20:2b:3d:5e:
         3a:1c:5d:7c:6a:fd:ef:d4:b7:c2:c1:3b:e9:2b:43:4f:f0:d1:
         1d:3f:c1:35:63:f1:f2:f6:21:4b:b0:7d:10:d2:da:9c:7d:06:
         fd:b1:e4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----