Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
File:                     jsH30FMGguG2jjv-WodE7lGtM10.mft (raw, json)
Hash identifier:          oo95ImQtxtGBBIpWm49DZAwQRjrVURJWfoPM0MhmLcw=
Subject key identifier:   BC:BD:A0:A5:79:D5:02:9F:C3:B0:E3:F1:AB:3D:9D:05:9B:FA:DF:E9
Authority key identifier: 8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
Certificate issuer:       /CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Certificate serial:       01962E2ABA72EFFC4BAE2A597D1890125319
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:14 +0000
Files and hashes:         1: WqkjigZnCXf1cGoouiwLBsYhyDg.roa (hash: JS3h2BtVCeMAnMIYV0aIQuTD6sVEzA9KQapJj6DBbJg=)
                          2: jsH30FMGguG2jjv-WodE7lGtM10.crl (hash: Zs0NGy4yiH/U9jJxNwPgGinq2TN55lkSvbZ7a3/Ag24=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ba:72:ef:fc:4b:ae:2a:59:7d:18:90:12:53:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
        Validity
            Not Before: Apr 13 08:01:14 2025 GMT
            Not After : Apr 14 08:01:14 2025 GMT
        Subject: CN=bcbda0a579d5029fc3b0e3f1ab3d9d059bfadfe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:98:45:bf:88:17:0c:3d:19:24:53:6a:44:24:
                    15:23:d2:1b:f7:bc:57:6a:e1:84:5c:7d:4c:12:4b:
                    d9:61:18:75:3b:35:cb:73:c8:ca:ed:79:18:5e:1e:
                    24:9a:f3:72:fc:f5:d4:1f:29:5f:cb:5d:ac:b1:c8:
                    a2:f9:85:0a:33:26:3d:60:43:46:95:d5:b6:7b:6f:
                    d8:82:d5:21:05:84:77:15:5c:da:8c:ac:f0:4d:39:
                    c2:f8:22:ff:e7:38:f1:44:dc:a8:63:65:76:35:49:
                    43:ee:bd:c0:c0:95:8c:a2:be:a4:0e:6c:d6:8e:08:
                    42:9b:49:f6:7d:95:2a:53:af:8e:01:17:ff:d0:dd:
                    44:7a:a1:7e:85:d0:7a:73:bc:6c:b9:82:25:44:f0:
                    c0:4d:86:da:ec:e6:25:84:5e:d7:c8:a6:f8:c0:a1:
                    d1:c6:e9:8a:04:bc:b2:e6:be:38:de:98:a1:66:4f:
                    92:67:5d:72:db:bf:b8:4d:7c:95:33:08:8b:0d:08:
                    36:b3:ef:55:b6:61:e2:0a:3e:c3:62:87:0b:c0:6c:
                    7f:af:f5:b9:62:b8:37:3d:95:35:2a:58:e3:c3:8d:
                    35:d3:49:b4:f1:ab:d4:eb:ed:1f:18:c3:f6:98:0a:
                    c5:7d:65:84:b6:20:4e:21:b1:0a:dc:21:97:89:57:
                    fd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BD:A0:A5:79:D5:02:9F:C3:B0:E3:F1:AB:3D:9D:05:9B:FA:DF:E9
            X509v3 Authority Key Identifier:
                keyid:8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:34:fc:12:4b:d8:de:eb:b5:b4:b0:86:78:21:0e:b4:83:42:
         06:73:0e:92:c4:92:35:25:5f:11:16:41:89:c4:fb:b0:5f:b6:
         e2:32:c4:8c:1a:01:62:7c:4e:db:f7:3e:ca:0e:86:93:a5:52:
         a5:00:0e:f1:3f:f1:01:bf:c6:f0:ca:07:13:7f:b2:41:27:ef:
         96:bd:03:86:8d:8d:2e:ed:4d:06:c3:a8:09:cf:c3:e0:ae:15:
         a7:bd:92:bf:6a:56:b6:19:fe:40:b3:d2:05:22:05:4b:8a:ed:
         7d:43:af:94:c1:b7:28:09:33:b6:6f:9b:41:8d:44:62:46:6d:
         e0:f8:bb:32:96:a6:8c:51:60:2d:9b:40:0e:c9:93:ee:b1:c6:
         6d:03:00:18:76:2b:16:61:f6:c0:53:3c:b6:0f:c1:79:e4:51:
         a3:aa:99:1b:cd:b9:cc:ef:cb:c1:17:16:a1:c2:ea:45:5f:3b:
         c0:bc:28:d3:2e:36:20:9c:63:7f:92:d4:1c:2f:94:72:32:68:
         16:df:a4:05:fd:9b:b2:0c:a6:49:08:2b:0c:e5:73:1a:5d:c7:
         59:2b:71:5a:ee:85:27:46:0e:a3:df:78:36:54:c9:39:b6:65:
         45:11:b9:f7:2c:6a:32:4e:10:6e:7a:1f:28:ed:81:3b:34:d2:
         91:56:2b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----