Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
File:                     jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft (raw, json)
Hash identifier:          Dzrxg9Lx0lvHOmLbvZcWyC0X5+riCSF9LY3jrpGD6O0=
Subject key identifier:   01:76:19:96:89:79:09:4F:DA:DE:F9:45:78:DD:BC:BA:5B:E2:FB:F4
Authority key identifier: 8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
Certificate issuer:       /CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Certificate serial:       01962F745E616629E44FDD8D9FBCD2A0679D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
Manifest number:          05F9
Signing time:             Sun 13 Apr 2025 14:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:17 +0000
Files and hashes:         1: jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl (hash: jxxafGkM5MT7aL/Jn9pdMLeBImHx+fCTST/PbwqR3zI=)
                          2: wkrv7qV399Xz3jIuuQJ2l9bCxgk.roa (hash: 6BF3Tz98RJ+JLDH8H1TR0fBCjZa59O91O2lzWujL8yU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5e:61:66:29:e4:4f:dd:8d:9f:bc:d2:a0:67:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
        Validity
            Not Before: Apr 13 14:01:17 2025 GMT
            Not After : Apr 14 14:01:17 2025 GMT
        Subject: CN=017619968979094fdadef94578ddbcba5be2fbf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:11:f5:82:94:44:38:d9:ff:3c:d7:b1:22:81:
                    35:29:76:1d:69:3c:f5:fd:ed:d8:3b:68:55:33:9c:
                    77:c7:4b:c5:cf:c6:4f:71:d4:59:e5:17:b0:ad:14:
                    a2:f6:fe:9a:0b:4e:c0:ea:85:f2:a7:5c:e2:4f:63:
                    c6:0a:af:f7:16:c2:d0:07:d7:80:9d:5e:ae:41:d2:
                    69:8d:ac:de:ad:cc:01:0e:0c:90:2b:51:b4:90:91:
                    c1:4c:d9:99:75:c3:f9:14:d8:af:29:4b:97:87:df:
                    36:26:b5:29:da:d2:8c:70:8f:32:c2:54:42:a0:30:
                    c1:cb:79:ff:d8:88:be:02:f2:5a:09:fe:6a:1e:d3:
                    ba:bf:91:44:e7:4d:28:9e:42:0b:fd:4d:24:99:70:
                    0f:bc:88:23:eb:72:8e:fb:77:7f:6b:ac:fa:e5:85:
                    4b:e9:2e:cc:78:56:ab:83:75:8d:e4:69:1c:0f:40:
                    ce:44:3d:b4:e6:5c:4f:6c:8d:31:22:9d:b5:9e:55:
                    8f:db:44:13:5d:a9:1e:a3:02:4f:62:31:41:e2:36:
                    10:db:f8:b8:8e:85:a2:10:d5:2b:0f:7f:99:18:ab:
                    b1:ee:b9:f6:8b:73:ee:d6:6f:9f:91:bc:c9:f9:c5:
                    df:2d:3a:e1:9b:3c:6e:c7:9f:ee:b9:1d:a3:8c:c2:
                    9d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:76:19:96:89:79:09:4F:DA:DE:F9:45:78:DD:BC:BA:5B:E2:FB:F4
            X509v3 Authority Key Identifier:
                keyid:8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:06:bd:0e:2a:0f:dd:89:f9:24:3e:e3:2c:0b:65:bb:d8:f4:
         28:d8:95:7b:6d:25:91:bf:d2:a6:76:bd:46:24:f4:98:20:96:
         61:c3:a2:52:66:f5:e8:8e:d7:11:01:08:b0:bd:06:52:99:95:
         84:d9:1e:28:74:ee:fe:ed:eb:f1:71:c0:47:4a:4d:bc:c1:8c:
         3e:82:1c:87:10:8a:e3:c2:02:c8:41:3a:cb:ca:2f:fd:62:cc:
         05:a2:48:55:cf:bc:52:c2:a7:87:47:e8:d9:84:59:94:37:a8:
         42:bd:15:7a:0a:0d:82:7b:12:94:e5:8f:79:60:22:37:22:74:
         29:e7:b7:d5:d6:26:0f:8d:bf:e6:fa:9d:ae:a8:7a:bf:8e:0b:
         65:7c:b4:b2:c3:3d:44:13:74:45:72:00:4e:a9:c2:72:07:b3:
         54:9f:2a:f7:05:df:e1:51:bd:80:3d:fb:16:a4:13:42:1c:e3:
         ef:45:92:83:c9:fd:bd:50:52:01:20:a1:e2:72:04:1d:59:86:
         94:9f:84:35:1a:da:9c:79:ba:0b:8a:77:9c:a4:fc:da:0e:74:
         5b:0a:8d:2c:f5:6d:ea:83:bb:78:33:38:6f:64:ea:4a:7c:b8:
         dc:81:1b:da:98:43:da:a3:b6:ab:c5:f3:ee:02:e3:d5:6d:54:
         78:ae:04:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----