Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
File:                     jxLb_EZr00gJDtwa4yklIunXO9k.mft (raw, json)
Hash identifier:          d1QsTQ18ncC8tB1E1mNSOzdCnyITJMaIA/Pa0Tg/lec=
Subject key identifier:   37:53:01:79:27:B9:06:78:9B:95:5E:E0:62:3D:CC:6B:77:F3:95:14
Authority key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
Certificate issuer:       /CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Certificate serial:       01962ECFB2888D1966FB2A56A1082363CD30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
Manifest number:          0BD1
Signing time:             Sun 13 Apr 2025 11:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:25 +0000
Files and hashes:         1: jxLb_EZr00gJDtwa4yklIunXO9k.crl (hash: CScp0yvawNjXTqkq+HjDdgKmCSwOsbNXK2T+oaasy7s=)
                          2: yo4e6Dd_pcrThs4Ucnd01TxRwfY.roa (hash: zRJvfuooLD1ukObnKFMb0zFwDQ9keCDuprZkYYzC4qc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b2:88:8d:19:66:fb:2a:56:a1:08:23:63:cd:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
        Validity
            Not Before: Apr 13 11:01:25 2025 GMT
            Not After : Apr 14 11:01:25 2025 GMT
        Subject: CN=3753017927b906789b955ee0623dcc6b77f39514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ff:a8:1e:08:64:2e:26:77:b6:ef:28:75:3b:
                    fa:f3:a5:ea:22:99:1c:07:1d:38:86:8b:50:3e:1b:
                    2c:1f:4f:33:68:08:0a:14:02:b7:71:54:15:89:5f:
                    be:f1:e0:10:f5:8c:5b:77:c7:e9:ce:4f:bd:8d:44:
                    61:b3:09:6b:68:c4:07:5c:3b:33:64:47:f0:88:fb:
                    81:1b:dc:f0:6d:2f:89:6c:5d:96:0b:ed:5e:2d:1f:
                    0f:50:10:3c:7e:c1:cd:d6:79:dd:28:c7:d7:81:a8:
                    dc:c9:9f:5b:58:de:e8:d9:88:35:71:c7:e9:e7:7a:
                    79:16:e6:26:26:3e:79:f5:a3:5c:80:ab:79:1e:87:
                    5a:2a:e3:cc:04:4d:20:38:6c:3d:2a:b4:a2:be:c3:
                    8b:68:03:45:56:35:79:e3:d1:c1:83:85:58:44:f7:
                    50:66:19:76:cf:8a:be:4d:7e:b6:20:8b:09:e6:df:
                    ea:01:8f:ea:7c:04:87:ea:c7:9c:e6:6d:a5:d8:f7:
                    c1:74:8d:22:2a:51:4a:48:c6:14:98:65:e5:48:4d:
                    2e:63:8d:82:5d:92:51:96:19:8f:ce:72:3b:dd:f7:
                    9b:f1:b1:51:57:fb:3e:79:da:22:99:54:56:3a:86:
                    f9:e5:90:4d:b6:ac:59:14:f5:67:4b:c0:ea:36:73:
                    90:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:53:01:79:27:B9:06:78:9B:95:5E:E0:62:3D:CC:6B:77:F3:95:14
            X509v3 Authority Key Identifier:
                keyid:8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:eb:b5:e4:3f:a3:8e:28:75:64:db:f9:73:3a:34:e7:f2:2f:
         a6:d7:aa:6b:70:62:99:0c:15:00:18:7a:69:ac:5c:3e:4c:c3:
         e7:ae:9f:32:c9:9c:df:01:ef:55:4d:da:68:04:d6:b1:84:98:
         58:0d:5e:3e:ce:eb:da:3b:83:aa:f5:30:e4:a4:97:e4:ab:d9:
         9a:7a:e6:6e:64:06:2a:02:a6:bd:24:97:4f:db:1c:96:6d:da:
         6a:43:de:75:1f:f6:6d:31:39:45:a9:82:61:b6:5a:49:9b:99:
         83:8a:1c:36:94:f2:39:45:4e:64:7f:0c:05:dc:ba:94:70:bb:
         ad:ae:b5:f0:d5:60:e3:bb:3c:7c:21:f8:76:47:a0:0b:09:e0:
         a0:18:be:07:1b:8d:bc:ea:c7:7c:b4:38:ff:86:48:cf:03:bf:
         c0:14:19:5d:53:97:2c:6b:75:eb:ec:be:5e:bf:66:37:28:4a:
         85:8c:64:2c:b1:cc:6a:0f:f7:21:a8:2b:45:7a:52:59:4f:fb:
         13:57:77:e8:93:42:17:51:ef:c1:79:92:05:d4:33:26:ae:ec:
         37:5b:83:10:80:99:f1:ae:da:02:a1:80:77:85:1d:65:59:67:
         63:5e:d6:21:38:c1:13:47:6b:2c:bc:3c:44:d3:f4:aa:7e:09:
         d4:36:39:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----