Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
File:                     jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft (raw, json)
Hash identifier:          IwjzFTZcHgx/VB2mse16fPkJpZDGGigHpgSZkFqppSM=
Subject key identifier:   48:98:60:0A:A5:0B:E8:E7:18:B4:C1:57:D1:C7:3D:B0:59:9B:B2:E2
Authority key identifier: 8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
Certificate issuer:       /CN=8c54a846632e83340e114d0d35591b3d42188b76
Certificate serial:       01962F74E4F02CC36997C4E2E554898F330E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
Manifest number:          0D07
Signing time:             Sun 13 Apr 2025 14:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:51 +0000
Files and hashes:         1: 0NQ-WA07ivHNbBCHB8RlQLxAoLU.roa (hash: yrHnQMXQ6Qe+mkwHNhl6sEUBZtgafrbZ/F8WnR+E6Bs=)
                          2: jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl (hash: TAriTHv/PHje579fpfcVK8Xq/7YX2tuy2gbLOFt8mLk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e4:f0:2c:c3:69:97:c4:e2:e5:54:89:8f:33:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c54a846632e83340e114d0d35591b3d42188b76
        Validity
            Not Before: Apr 13 14:01:51 2025 GMT
            Not After : Apr 14 14:01:51 2025 GMT
        Subject: CN=4898600aa50be8e718b4c157d1c73db0599bb2e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:64:aa:14:01:85:37:71:bf:90:78:80:0a:94:
                    7f:31:09:d8:13:b6:b1:2c:3e:3e:15:3d:36:2d:ea:
                    2a:9c:70:a3:18:2c:01:6a:c7:cf:2b:62:4f:b7:57:
                    90:ce:6b:5b:5b:28:5a:bb:0e:e3:12:eb:b3:17:27:
                    38:4f:b2:e3:b5:da:e8:48:c9:73:f6:cd:0d:d4:c2:
                    70:e4:ab:78:7e:cf:fe:6a:34:d0:34:0f:67:89:7a:
                    86:a4:ac:e5:07:4d:4b:92:39:f1:7f:d2:8f:4e:a9:
                    88:36:9f:c7:fa:57:c7:7b:6c:3e:17:c5:51:18:23:
                    92:97:92:2d:55:fb:05:c7:0c:7c:05:dd:52:0d:84:
                    de:58:ae:a1:37:84:9e:1f:3f:37:45:4c:01:59:9d:
                    d3:0c:d9:e7:98:d9:a8:22:f9:8f:8d:91:46:b7:cd:
                    39:6b:64:32:ca:db:0f:28:c8:fe:05:3c:1b:8e:6d:
                    cf:13:c1:ff:cd:e0:c6:45:48:55:e8:b0:b2:64:9e:
                    c5:79:ed:87:f0:87:a1:78:1f:23:44:26:be:f2:e6:
                    36:6c:c6:6a:34:91:38:f7:fd:3a:2c:c0:a9:78:70:
                    17:fe:2f:e0:d9:5f:68:fb:91:a0:0a:de:88:ce:c1:
                    7f:d2:f3:47:86:9b:0a:82:32:c0:53:e6:5b:72:56:
                    e2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:98:60:0A:A5:0B:E8:E7:18:B4:C1:57:D1:C7:3D:B0:59:9B:B2:E2
            X509v3 Authority Key Identifier:
                keyid:8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:5b:b5:9b:d8:8c:cc:b1:f3:0a:b2:39:17:34:22:ee:49:6d:
         56:74:76:52:a5:1b:ad:4f:31:ce:d3:c1:6f:8d:48:46:b4:0f:
         cb:d5:b8:92:11:f2:0f:a4:a7:bd:7b:83:93:16:2d:47:32:ad:
         28:65:24:ff:38:c5:0b:10:36:8d:47:94:4e:fa:48:1e:88:69:
         cb:04:27:c9:20:39:07:0c:99:1e:c1:44:3c:9a:3b:31:d9:60:
         90:17:ad:1a:9f:21:74:fb:f5:ce:3d:49:0a:1b:b0:9b:0d:c4:
         48:80:4c:9f:79:d2:0a:6f:a3:e7:98:d6:79:0d:e6:95:b5:d7:
         b2:fb:6e:ab:ee:49:be:15:75:01:86:bd:dc:31:1e:02:48:7f:
         de:a3:54:eb:f4:df:4e:e6:d1:04:26:e1:7a:a9:ab:dd:e2:ab:
         bf:64:90:9c:85:df:02:6d:49:9f:fc:ef:b7:f2:ec:c1:4b:4c:
         d8:f2:04:10:e1:50:87:f6:d4:91:11:1b:4b:37:7f:2f:50:4a:
         f8:94:6f:88:13:3a:81:1e:35:90:18:1c:d0:6a:57:2f:5e:55:
         a2:4b:83:16:a3:9a:37:dc:c8:7e:9f:82:c9:fd:99:21:fb:04:
         d0:73:bc:05:f7:80:22:cc:8e:4f:75:e0:cc:99:d8:cd:32:5c:
         bf:0f:98:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----