Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8544a0-ae46-4da2-ad2d-e893b13b2c9f/1/JchJyqV3LJi4E8E7TzD85PSNLa4.mft
File:                     JchJyqV3LJi4E8E7TzD85PSNLa4.mft (raw, json)
Hash identifier:          Cp46s+fRWKKuwjeG4acHOwfk3+rAtMDS0dp/NjLx/cE=
Subject key identifier:   B5:7B:26:27:D4:E5:E4:77:5A:F7:DA:4F:EE:79:E4:F6:0E:8D:11:FE
Authority key identifier: 25:C8:49:CA:A5:77:2C:98:B8:13:C1:3B:4F:30:FC:E4:F4:8D:2D:AE
Certificate issuer:       /CN=25c849caa5772c98b813c13b4f30fce4f48d2dae
Certificate serial:       01962F3DC35A94399A4E801FED2B7D7BB26D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JchJyqV3LJi4E8E7TzD85PSNLa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/8544a0-ae46-4da2-ad2d-e893b13b2c9f/1/JchJyqV3LJi4E8E7TzD85PSNLa4.mft
Manifest number:          08BF
Signing time:             Sun 13 Apr 2025 13:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:38 +0000
Files and hashes:         1: JchJyqV3LJi4E8E7TzD85PSNLa4.crl (hash: oRMObuItdz3+2dfgP7P8fMGO5OKCQ+VBAyQTtChpTP8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c3:5a:94:39:9a:4e:80:1f:ed:2b:7d:7b:b2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25c849caa5772c98b813c13b4f30fce4f48d2dae
        Validity
            Not Before: Apr 13 13:01:38 2025 GMT
            Not After : Apr 14 13:01:38 2025 GMT
        Subject: CN=b57b2627d4e5e4775af7da4fee79e4f60e8d11fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8c:07:7c:05:63:e3:b6:fa:57:bc:b7:81:15:
                    e5:c1:bf:f3:16:ba:2f:14:9c:25:d6:e8:75:1f:26:
                    fb:22:d7:96:34:b1:34:52:7e:56:10:86:62:9d:d6:
                    66:5e:41:af:65:6e:b1:6a:1a:53:e7:7e:e1:f4:42:
                    9a:fa:da:2c:35:cc:3f:fe:95:a9:31:e0:fb:1c:6e:
                    a7:c9:d1:3b:f8:aa:57:a4:e3:26:8a:b8:c5:06:42:
                    67:e8:81:87:a0:39:02:a4:10:79:f8:06:7a:a3:cb:
                    1f:61:5f:6c:1d:32:d7:bb:92:de:e6:2a:c0:50:a7:
                    5d:f3:35:c7:f9:30:b9:aa:f6:31:6d:89:7f:93:5b:
                    e1:82:2e:8c:41:c1:fc:f3:03:c1:3f:34:77:c4:eb:
                    cb:2a:85:28:89:61:bc:16:be:ea:a0:3a:3d:2c:fe:
                    9e:41:36:ad:77:f8:8c:61:cc:50:44:4d:5e:4c:57:
                    96:f1:29:bd:df:55:fe:c3:8c:f8:ee:80:e7:02:92:
                    e2:57:d1:f5:5a:83:12:d6:84:33:26:4d:e5:44:ff:
                    5c:94:a4:b7:3a:2d:e0:99:87:2b:90:9a:8b:d0:43:
                    2a:4e:b6:e5:df:f1:2d:3d:56:6c:3b:28:7d:4b:ca:
                    f7:25:76:a7:e0:a2:34:70:14:51:0e:4a:f1:19:f4:
                    d6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7B:26:27:D4:E5:E4:77:5A:F7:DA:4F:EE:79:E4:F6:0E:8D:11:FE
            X509v3 Authority Key Identifier:
                keyid:25:C8:49:CA:A5:77:2C:98:B8:13:C1:3B:4F:30:FC:E4:F4:8D:2D:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JchJyqV3LJi4E8E7TzD85PSNLa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8544a0-ae46-4da2-ad2d-e893b13b2c9f/1/JchJyqV3LJi4E8E7TzD85PSNLa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8544a0-ae46-4da2-ad2d-e893b13b2c9f/1/JchJyqV3LJi4E8E7TzD85PSNLa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:0f:c3:23:0c:30:df:61:88:36:30:3e:bf:33:9e:1e:eb:bc:
         09:7e:0d:97:e4:5d:91:53:6e:fe:e6:5a:77:c5:b3:ef:f8:94:
         23:c0:be:b0:20:06:0e:cb:58:5d:aa:5b:54:b6:74:06:ec:ad:
         3c:34:2f:a9:8e:b0:66:11:c6:f4:20:e2:09:7a:cf:94:48:f0:
         a9:15:66:7d:c6:c1:35:e7:b1:8a:71:47:0f:2c:9f:bd:aa:dc:
         0f:d8:20:2e:29:30:e2:9d:2f:71:14:79:b9:3b:fd:24:cd:e4:
         a8:5a:82:ed:60:aa:90:6d:2f:80:ff:a7:52:d2:60:ec:e1:eb:
         32:41:39:10:d5:4f:33:5c:0b:f9:a9:db:f6:12:23:23:fa:eb:
         18:53:df:0d:2f:5f:46:04:c0:6a:69:e7:9e:4e:64:6c:1c:c2:
         7b:58:86:cf:5d:d9:ae:f2:ed:45:4b:59:ac:62:c3:e2:fb:ab:
         e8:a3:56:63:e0:2e:e6:23:6d:31:c8:44:f6:f2:67:69:bb:a4:
         9d:0e:2d:a1:d6:1a:4a:a4:be:0e:1d:17:4e:02:e4:ce:21:2a:
         5f:cb:14:31:bd:97:49:fa:a3:1a:cd:e2:86:1a:e6:ce:bc:21:
         84:e1:5a:ea:a5:42:23:b8:9d:73:0c:62:2a:88:e7:ca:15:28:
         4f:eb:3b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----