Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
File:                     jAmWt03P0bu4ZvLrrU4W_cyStjs.mft (raw, json)
Hash identifier:          NiQO4cQb8IlIUsyCzmsx/8pUVMLXxa2IADlU6DyBTyc=
Subject key identifier:   01:A6:AD:0B:5E:C6:02:80:DB:1B:AF:81:F3:B3:18:8F:4A:D8:63:BB
Authority key identifier: 8C:09:96:B7:4D:CF:D1:BB:B8:66:F2:EB:AD:4E:16:FD:CC:92:B6:3B
Certificate issuer:       /CN=8c0996b74dcfd1bbb866f2ebad4e16fdcc92b63b
Certificate serial:       01962F3D6090BEFE1CC53A6F300665B6E907
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
Manifest number:          05D2
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: jAmWt03P0bu4ZvLrrU4W_cyStjs.crl (hash: Dz6oLJJA+J9esLHv4XrwgkZGaOEFf8oodH3+DAKZDrw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:60:90:be:fe:1c:c5:3a:6f:30:06:65:b6:e9:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c0996b74dcfd1bbb866f2ebad4e16fdcc92b63b
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=01a6ad0b5ec60280db1baf81f3b3188f4ad863bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d0:62:9e:ea:e1:aa:4c:11:8d:2d:d4:68:3e:
                    83:73:dc:17:18:a5:c0:fb:c9:50:54:23:56:05:5d:
                    d3:d3:56:ed:89:b0:f4:dd:1f:c2:c9:a5:a7:c5:33:
                    78:9b:06:fa:23:c0:11:14:aa:d8:54:e7:2d:d9:cb:
                    7c:13:bc:d1:86:2d:2e:38:f7:28:19:4c:04:83:24:
                    21:7c:07:32:10:26:af:b6:f3:d6:a8:b9:45:c3:83:
                    5c:78:5c:a1:47:79:35:b9:4e:68:c2:2d:f0:25:00:
                    4d:82:e4:ff:5c:4d:68:4c:a6:18:77:a7:6c:26:a4:
                    a4:b3:f3:f7:b0:b4:0e:00:ca:97:37:30:77:b8:19:
                    58:56:4c:dc:8f:9d:d7:c7:65:73:f3:e9:f7:76:a5:
                    91:c5:ac:8c:92:cc:51:f0:68:62:14:86:21:02:aa:
                    29:01:d9:47:39:8d:d2:3e:b8:6a:32:c9:b5:0f:a5:
                    9d:ba:9c:f9:d3:45:5a:6c:2d:35:ea:98:f4:2c:26:
                    9c:1d:04:f8:4f:84:9e:2c:4f:a4:68:42:4d:ab:14:
                    09:93:c3:49:46:73:5d:0a:61:ea:c6:e1:5d:15:fd:
                    70:dd:7d:4c:4b:b8:69:7e:39:76:6a:de:be:16:8d:
                    63:80:57:a7:d7:5e:ff:7b:52:cc:f9:b5:00:7e:be:
                    41:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A6:AD:0B:5E:C6:02:80:DB:1B:AF:81:F3:B3:18:8F:4A:D8:63:BB
            X509v3 Authority Key Identifier:
                keyid:8C:09:96:B7:4D:CF:D1:BB:B8:66:F2:EB:AD:4E:16:FD:CC:92:B6:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:12:32:fb:23:19:3d:ec:0d:1d:d8:aa:c5:ac:ef:bb:e9:b3:
         87:04:82:ad:2e:5c:3c:ec:4d:91:02:2f:af:58:3e:ce:0e:d3:
         9e:b4:5f:b7:1a:d3:4c:2d:d6:82:ea:22:95:8e:53:da:97:8d:
         16:e7:9a:a3:2a:54:c7:da:34:33:d6:de:23:75:75:53:ca:57:
         97:4f:f8:ad:51:11:e5:7b:93:78:75:fd:0d:df:34:cb:1f:88:
         bb:7b:68:62:c3:d8:2e:84:88:f8:67:ee:f6:26:a2:98:4d:63:
         53:d2:0e:d5:de:58:a7:0e:9c:07:59:8f:47:7d:96:8f:ce:d7:
         81:42:91:5f:c1:f3:e5:34:24:bc:0a:a0:76:17:13:63:40:4c:
         94:4c:25:7d:d0:68:57:ec:33:7c:d4:a1:c4:3b:2d:0f:2b:59:
         fb:3c:9f:6e:86:dc:9f:ce:99:f6:09:cb:83:2d:2b:fe:23:f5:
         bd:b1:06:ee:93:d5:75:19:2f:32:d3:40:ec:19:48:6f:ca:7a:
         66:f4:19:1a:59:2f:de:ff:5e:96:d9:6b:3f:bc:ac:08:24:6a:
         f1:8d:7e:d1:d2:37:bf:3c:38:06:01:f1:c0:7a:3a:68:2e:c5:
         c1:c4:12:60:88:71:d7:46:d8:89:3e:da:b9:2f:39:d9:54:8e:
         5e:33:64:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----