Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
File:                     jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json)
Hash identifier:          aOxpvv4sBwZDxq7xd8UyumqnHSpGIAwBDOFSFU5FZDs=
Subject key identifier:   4D:55:AB:18:C7:D0:82:1D:D6:DF:E6:90:F1:F5:DC:7E:89:73:CA:22
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Certificate issuer:       /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial:       01962E98A2100080ED9B72C18B72735670FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
Manifest number:          0E16
Signing time:             Sun 13 Apr 2025 10:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:16 +0000
Files and hashes:         1: LSJWw_ptvazCnhCar9l_Y1TpHAM.roa (hash: wjRArMMbVUG2mvjIwU1Y1QgYT+m8+bZU67i+Zotaojs=)
                          2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: 2mGdz5nsgFMyBillNQrK5/5exnONE8WBsxQ1PjVKcGg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a2:10:00:80:ed:9b:72:c1:8b:72:73:56:70:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
        Validity
            Not Before: Apr 13 10:01:16 2025 GMT
            Not After : Apr 14 10:01:16 2025 GMT
        Subject: CN=4d55ab18c7d0821dd6dfe690f1f5dc7e8973ca22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:89:c6:49:79:b3:fb:88:9f:a4:2b:06:6e:a1:
                    2a:1b:9e:63:0e:7f:b9:03:80:3b:ba:59:20:0c:16:
                    1b:10:d2:2d:92:a1:50:94:24:86:3a:cc:f8:99:82:
                    4b:2a:22:94:0e:69:3d:dd:e9:5d:9e:d9:ca:a5:4c:
                    23:4c:90:a8:d7:ee:d3:77:b5:ea:1f:2f:a8:52:c8:
                    33:b5:db:25:30:e1:fc:1c:8a:42:8c:bd:51:c1:67:
                    c7:45:12:5f:52:a0:6c:dd:65:71:89:11:ba:c3:a4:
                    64:c3:61:bf:1a:4c:56:cd:f1:c5:d7:59:42:36:5e:
                    4e:8c:71:a8:ba:42:a7:ec:60:fa:ab:b0:2b:78:c2:
                    a7:ab:e7:34:e4:33:0e:5c:c6:f2:e2:3e:34:ef:ba:
                    38:6a:5b:14:74:53:3d:e4:28:08:af:d8:9d:9f:a3:
                    7e:48:52:08:dd:30:16:67:9e:31:37:f3:a9:57:36:
                    ad:d8:0d:2e:25:62:1c:48:5a:76:6e:d3:ed:bf:0e:
                    15:fc:9e:fe:c1:ab:25:71:77:57:91:83:17:51:05:
                    8e:59:67:a9:4a:ff:17:c4:35:76:3b:e9:8b:79:fc:
                    18:f2:a6:f8:38:58:48:24:85:54:e4:2c:1a:f4:c2:
                    ce:3c:f1:de:29:83:dd:66:9e:f4:eb:39:b5:b8:f2:
                    10:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:55:AB:18:C7:D0:82:1D:D6:DF:E6:90:F1:F5:DC:7E:89:73:CA:22
            X509v3 Authority Key Identifier:
                keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a4:90:68:18:ab:22:8a:73:a7:a8:a8:bc:f5:ff:86:5a:aa:
         9c:d3:b1:79:5c:a2:62:8e:d0:b4:3a:50:3c:6d:78:39:d0:47:
         0e:9a:47:65:bf:c3:e5:15:e0:50:a1:67:0a:4b:03:0c:79:d0:
         a7:e1:5e:0f:0f:8a:a6:70:d4:32:70:b7:11:6f:98:ad:0a:dd:
         9a:23:0c:0f:6a:70:27:cc:4c:33:e0:dc:ea:77:52:96:bf:f4:
         be:e0:4d:4d:51:77:bb:69:d4:0e:dc:09:46:c9:c7:b8:5e:d8:
         2e:29:32:11:e3:6e:50:3d:da:42:67:22:ab:72:4e:ff:5f:06:
         44:2c:b6:ca:b5:29:aa:a9:f9:f4:79:df:e7:a6:ac:b7:b0:5c:
         e5:90:79:a5:a5:42:ba:31:5f:2c:19:7b:2e:ea:0b:35:31:0b:
         ab:2f:a0:a6:8a:46:da:17:fc:d8:e5:5d:be:89:1e:9a:e4:23:
         ee:0d:53:12:2d:09:3a:3a:79:c6:37:87:a0:43:7e:79:ff:d5:
         76:af:36:13:fe:17:de:b5:b9:2a:fe:ee:25:2d:a7:46:d7:96:
         75:cb:03:fe:02:25:2e:4b:ae:ac:7f:a7:82:ae:4e:91:9e:92:
         27:e0:42:8a:dc:18:77:43:d1:04:29:01:d9:97:79:5c:34:ed:
         69:b5:60:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----