Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
File:                     jzHMNgWz78CbJohQgGO2_UhVYd0.mft (raw, json)
Hash identifier:          RLtWsHT/0BT6NRnoN8iKyQVG7UEXGbly7A3h5KKmbKw=
Subject key identifier:   B4:F0:19:54:FC:50:13:D7:E7:96:0B:88:52:4C:89:35:EF:C5:36:44
Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
Certificate issuer:       /CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Certificate serial:       01962FAB85E57DB68519BE4F0382923A273D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
Manifest number:          09CF
Signing time:             Sun 13 Apr 2025 15:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:32 +0000
Files and hashes:         1: KGShywXbD4wB1PLsBTNT01VDQKY.roa (hash: hBh9EiIl2TqddpHizY/LGkFYV3Ncy9Yws3g05SvVJTg=)
                          2: jzHMNgWz78CbJohQgGO2_UhVYd0.crl (hash: oJ/ZF135CdNl6A8jmnro21sM03DOizguVexY+R1AxfU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:85:e5:7d:b6:85:19:be:4f:03:82:92:3a:27:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd
        Validity
            Not Before: Apr 13 15:01:32 2025 GMT
            Not After : Apr 14 15:01:32 2025 GMT
        Subject: CN=b4f01954fc5013d7e7960b88524c8935efc53644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a1:fa:af:73:90:6f:d2:e5:1c:7f:03:f8:f7:
                    3c:d6:40:f9:a4:45:d6:81:2f:ac:d1:60:5e:b5:ed:
                    83:03:7e:fb:6f:2a:d4:77:59:3f:ca:b3:34:66:2e:
                    51:b0:c6:d3:42:2b:b4:46:d1:db:fc:f9:ea:e0:af:
                    9d:1e:11:bf:c5:93:d0:39:97:19:1d:43:73:0c:9f:
                    8c:e2:36:38:12:a8:68:27:04:fa:45:d0:5e:d7:88:
                    7a:6b:61:94:56:2a:b4:bf:4f:7b:03:91:3b:72:be:
                    79:ea:ab:1b:75:05:86:12:60:2e:25:d6:21:92:74:
                    c3:24:d1:34:fe:ae:6c:c8:03:49:a1:83:18:57:83:
                    46:0a:fb:6c:fe:87:be:b9:95:6f:fd:3c:a2:0a:20:
                    09:41:15:31:cf:84:bc:dc:c3:7d:16:02:2c:73:d3:
                    41:77:d3:ad:1f:9b:ea:fc:39:87:3f:ce:0f:ed:30:
                    73:21:64:97:6e:1f:e5:dd:25:83:40:f7:cd:2b:5b:
                    7e:fb:f4:04:80:06:94:1f:c7:f5:8b:f2:f8:47:b9:
                    55:39:8c:b6:b9:50:01:0b:83:13:f8:a9:5b:85:0d:
                    c7:b9:74:54:8a:bd:12:d5:bc:fa:7f:04:61:b3:24:
                    b7:4c:e8:49:a1:b0:ca:49:10:43:84:d6:6e:65:51:
                    2f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F0:19:54:FC:50:13:D7:E7:96:0B:88:52:4C:89:35:EF:C5:36:44
            X509v3 Authority Key Identifier:
                keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:21:e5:ef:35:fe:42:92:4a:4b:36:3b:7d:46:3a:b3:c3:7d:
         4a:9b:f8:4c:b8:d5:77:d4:37:33:3a:a4:2e:1c:5f:d4:3d:94:
         67:a5:23:fa:bf:85:99:cf:91:ae:54:16:1f:81:cb:f7:c5:4b:
         8c:ad:59:b2:bd:35:60:c5:c5:98:89:fa:8c:2f:6b:0a:cf:7d:
         9a:e9:d2:a9:35:17:79:04:35:83:ed:67:44:a4:5b:dd:aa:f4:
         ef:23:47:a1:5b:68:87:c9:a7:47:b2:c6:5f:1f:76:89:e0:86:
         a6:b4:8f:16:f6:e4:10:f7:1a:3b:2b:35:3d:6c:51:cf:9b:9b:
         45:8e:e6:c9:d0:af:7c:e5:09:c3:39:67:64:96:3b:f0:1f:8e:
         c4:56:8e:33:30:ef:1d:1f:0e:eb:b9:bc:98:dd:f7:fa:09:82:
         c7:2e:39:44:a3:db:e0:39:21:35:02:a6:98:16:cd:b0:06:1e:
         e2:20:e8:f1:7a:b0:cd:a8:8f:46:fb:72:63:48:99:1a:b4:2f:
         d4:fd:4e:db:42:08:27:42:0d:c2:73:79:b1:93:31:6e:47:e8:
         6d:a0:13:15:2a:d4:71:76:bf:50:15:16:b8:19:77:43:dc:94:
         83:01:62:26:30:0e:8c:b6:c2:15:c6:51:37:bb:b1:12:2b:f4:
         40:aa:1f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----