Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
File:                     jq1F4xclfhcKIDDnmw9fdEBqeEI.mft (raw, json)
Hash identifier:          XsRt/g4K8CCBkrERpaKS8i4gjzt+V2JGreGOVUAggTc=
Subject key identifier:   07:8E:BD:C1:C6:C6:C6:F4:A6:6E:5D:D3:6D:47:DC:3C:0C:8F:78:1C
Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
Certificate issuer:       /CN=8ead45e317257e170a2030e79b0f5f74406a7842
Certificate serial:       01962F74608AF48CEEF1ED609A7FA80BF5C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
Manifest number:          10CF
Signing time:             Sun 13 Apr 2025 14:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:18 +0000
Files and hashes:         1: U32_Sc22WvD7Fv16LTG7iyrHJKk.roa (hash: HDMDgZcXReJr66n8qO4cBkBwOaGGNGz+zcAfJfe/HW0=)
                          2: jq1F4xclfhcKIDDnmw9fdEBqeEI.crl (hash: NhjqXOFFrf8rFc8I3pi9GkPT953w+vV2yehjAHVxIN8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:60:8a:f4:8c:ee:f1:ed:60:9a:7f:a8:0b:f5:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842
        Validity
            Not Before: Apr 13 14:01:18 2025 GMT
            Not After : Apr 14 14:01:18 2025 GMT
        Subject: CN=078ebdc1c6c6c6f4a66e5dd36d47dc3c0c8f781c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:36:9c:31:7c:34:1f:41:be:9e:e6:d0:bc:bc:
                    f6:de:7a:a1:9f:64:63:5f:60:13:b6:57:5b:4c:ad:
                    d3:a4:b4:24:a0:35:6f:fd:51:4b:b6:0f:0e:ec:3a:
                    66:10:29:da:a9:78:8c:ef:22:52:2e:8f:ce:33:5a:
                    e2:cb:07:16:fd:06:2c:89:b6:90:3c:30:19:20:9d:
                    c8:b0:96:be:5d:5d:ba:99:49:57:87:f0:93:3d:39:
                    15:8d:3e:3a:8b:33:f6:19:d5:ca:21:e4:17:4b:b0:
                    0c:83:4d:3e:25:ab:b2:72:4f:c3:c8:bc:25:b1:51:
                    a7:96:2c:6a:09:00:7a:cb:d4:46:6d:df:11:99:c3:
                    11:18:3c:0a:9a:ee:7d:52:3a:88:0b:af:72:73:52:
                    9b:a1:fa:24:85:bb:0a:7d:4c:0e:32:8f:20:b0:80:
                    3d:4e:c3:98:81:05:3f:c2:df:e9:d1:84:4a:07:80:
                    eb:e2:e5:ca:17:d0:ef:d1:ae:8c:38:2d:56:12:1f:
                    1d:6a:c9:3d:5f:70:4c:52:b9:29:57:9e:a2:7f:46:
                    94:02:49:9f:cb:d2:d1:d0:9d:fa:a1:25:fe:d4:06:
                    89:aa:95:b1:8b:6b:77:8e:1a:ac:e4:21:32:69:8b:
                    84:c2:53:53:66:a2:8d:57:54:e5:45:10:b6:dd:2e:
                    6b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8E:BD:C1:C6:C6:C6:F4:A6:6E:5D:D3:6D:47:DC:3C:0C:8F:78:1C
            X509v3 Authority Key Identifier:
                keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:95:31:2e:0d:34:58:7c:68:91:75:2b:ce:79:ef:20:0a:1a:
         4a:98:db:e2:da:de:fd:75:9f:36:d7:77:17:d1:8a:ba:6f:17:
         71:3b:74:e0:51:7e:72:e9:34:27:12:2f:19:f6:8f:d7:87:6c:
         94:b4:3a:99:88:ed:8d:25:52:dc:dd:88:01:4a:53:4c:db:8f:
         ea:e9:94:1b:b8:57:61:1d:a4:b0:22:1f:3f:82:21:d5:21:3e:
         38:fd:d9:5b:fd:b2:ed:39:b7:56:80:a2:4b:cc:a4:c0:63:9d:
         72:75:5c:49:62:3c:a8:2d:be:e0:b7:45:0c:dd:70:c8:4d:ac:
         d1:82:f7:d4:7c:f6:bd:ae:f3:86:eb:2f:8e:52:fb:33:ac:c6:
         df:12:1d:50:55:4a:c3:de:de:cf:e0:76:62:e9:2e:88:f2:81:
         53:f2:00:33:d5:4f:60:14:52:51:1e:59:f2:8b:76:eb:6f:a9:
         7a:7f:49:8d:ad:e1:84:2e:97:8e:2f:57:ca:07:d2:e9:2b:76:
         cb:6c:f0:8b:a1:48:13:4d:ba:8a:05:22:17:a9:eb:7f:bb:97:
         ca:d1:26:a1:58:e7:fe:06:3b:47:1a:33:3a:6c:20:74:6d:f5:
         04:aa:bc:0a:3e:bf:23:fe:8e:11:68:16:ba:67:d2:08:b6:cc:
         8f:66:fe:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----