Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
File:                     jqw2_1M-tvj4qmWSAiDPpHHlorE.mft (raw, json)
Hash identifier:          fSoQwLRqY+1uQGCzWinAqh4431rHfQnCE9HqBsp7zGY=
Subject key identifier:   58:3B:6B:36:34:58:4F:AB:F1:94:7B:7C:04:6A:1B:93:42:B3:61:9A
Authority key identifier: 8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
Certificate issuer:       /CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Certificate serial:       01962F3D9C01E718361376CE87C7ABC41A1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
Manifest number:          1143
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: Lp4_8KBWJdha2Jzdhq102LYjczg.roa (hash: sRJMp6kjdQS4Uru55TcR1RrRtgv1vq1HoJumS3BQdg8=)
                          2: jqw2_1M-tvj4qmWSAiDPpHHlorE.crl (hash: b+HloU85GtYJD8q+cRHYdYOq97upmFWwcu3tS2fNxzs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9c:01:e7:18:36:13:76:ce:87:c7:ab:c4:1a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=583b6b3634584fabf1947b7c046a1b9342b3619a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6a:18:83:4d:b8:62:2f:46:90:a8:ad:55:9c:
                    eb:4c:93:cb:ee:3c:46:ce:a3:73:ce:d7:1f:77:c1:
                    72:07:ff:50:e0:1a:14:04:e4:aa:29:85:53:bb:31:
                    e3:b3:99:30:bc:5f:44:cf:94:16:b6:6e:b2:88:ee:
                    05:ce:6a:40:fc:8c:ed:2b:d0:c8:07:29:28:cc:35:
                    12:0f:82:cb:fb:93:23:33:b9:f0:a0:dd:e3:0e:76:
                    41:c0:f6:39:a2:68:d2:94:a7:49:28:d5:9c:aa:81:
                    fd:eb:34:fd:69:cd:42:48:c0:6b:a5:68:42:75:f7:
                    c9:ff:59:a9:5d:34:99:b9:a1:db:8e:71:f3:f6:85:
                    47:c3:d7:ea:c1:35:69:68:0f:fe:75:03:d5:b0:88:
                    ae:d3:5d:46:24:9b:70:98:a1:bb:be:78:92:8e:e3:
                    a2:35:1f:38:f9:ef:0e:fe:9b:3e:44:f2:fc:f3:df:
                    c8:f7:51:7c:19:53:08:27:2c:3f:e7:9d:11:76:b4:
                    e9:1d:71:06:77:5b:e1:af:f7:ed:f7:58:27:9f:0d:
                    6c:e5:aa:01:9b:6d:6d:27:40:29:4c:d6:df:24:7a:
                    03:36:15:6a:de:56:cb:2a:d2:72:87:45:b1:e9:82:
                    96:ef:15:7b:4f:b0:29:9f:1a:68:88:5d:01:58:2e:
                    9d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3B:6B:36:34:58:4F:AB:F1:94:7B:7C:04:6A:1B:93:42:B3:61:9A
            X509v3 Authority Key Identifier:
                keyid:8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:30:ce:64:8c:b6:82:43:e6:29:ec:e0:08:f9:8a:ad:6d:bf:
         ed:3e:02:78:66:fe:be:ca:a8:a1:dc:0c:66:f8:41:cf:74:3f:
         8b:a3:45:9d:69:9c:d1:5a:3b:5b:31:b8:ad:53:c8:96:be:86:
         07:9f:76:73:e9:14:ab:a1:bf:50:dc:2d:12:1e:1c:bb:bd:14:
         e6:08:ce:e3:5f:45:51:ac:fc:45:76:21:9c:95:56:b4:6d:5f:
         fa:0e:53:a8:14:a5:0f:24:bb:05:e8:b5:e7:e9:c7:d3:ec:0f:
         f6:c6:a7:3c:5c:c2:b2:53:1d:a1:b8:9a:c6:35:50:27:33:46:
         8c:e7:46:bd:cc:fb:f5:06:d8:ba:20:50:ea:c6:73:56:56:52:
         59:6d:17:78:85:5d:54:a7:fd:52:08:aa:9d:ff:bb:fd:4f:d6:
         e2:60:a8:b5:3b:ab:0d:cb:1f:0d:a0:cf:87:b6:a5:43:05:9e:
         45:50:ce:31:e2:0f:4a:cd:0a:ec:c6:9a:e0:b7:89:51:8d:10:
         51:17:4d:83:16:11:f5:b1:7c:fc:fe:0a:5b:da:7d:cc:8d:b1:
         35:93:49:6c:d8:9b:64:f1:5c:ed:c7:26:db:ca:d3:c2:3f:32:
         69:41:03:88:3b:31:5a:07:9a:54:18:64:ee:79:84:44:6a:b3:
         7e:d0:25:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----