Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
File:                     jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft (raw, json)
Hash identifier:          kG6AlQN7NauVnSOKGz+HzniBr2SU1XALRHyvBzxCGec=
Subject key identifier:   6C:9E:A2:E0:F4:5A:50:9E:A5:21:0A:5C:A3:64:8F:6C:37:DE:56:00
Authority key identifier: 8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
Certificate issuer:       /CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Certificate serial:       01962E98A804ECDC8EF2B5B6FEFE598C33B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
Manifest number:          0494
Signing time:             Sun 13 Apr 2025 10:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:18 +0000
Files and hashes:         1: jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl (hash: d8ENgxTxSsVRS/Ft9KXG0FekqZv3x6QeULlsNPU3xbM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a8:04:ec:dc:8e:f2:b5:b6:fe:fe:59:8c:33:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
        Validity
            Not Before: Apr 13 10:01:18 2025 GMT
            Not After : Apr 14 10:01:18 2025 GMT
        Subject: CN=6c9ea2e0f45a509ea5210a5ca3648f6c37de5600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e2:c2:ed:84:08:80:2f:16:ce:09:67:d2:fa:
                    b9:b9:72:0c:c1:21:0e:e4:39:e8:dd:19:42:5c:20:
                    0e:09:dc:be:1a:21:88:ca:f0:c0:84:66:dc:66:20:
                    08:7f:eb:69:28:06:05:14:7f:a8:9e:f6:2a:22:6a:
                    f0:00:9c:c4:9e:2a:55:41:68:bc:14:d3:f3:5e:cf:
                    f5:47:25:5f:62:bd:67:3d:5c:d5:ce:aa:c0:69:5e:
                    9f:92:a1:98:c3:04:94:f5:17:bf:88:99:a4:4b:3e:
                    8b:87:13:6e:e0:5e:3a:da:a4:46:8f:7a:3b:59:8a:
                    c9:62:fe:87:dc:47:a6:e1:55:cd:17:7c:1a:87:a5:
                    94:88:c7:d3:5b:3c:b5:c8:9c:6f:6d:13:59:ae:97:
                    f2:5e:25:fa:4c:87:cc:75:ac:bb:90:da:f5:4a:09:
                    f1:fb:4b:a4:8e:06:d8:b8:f5:6d:4d:19:36:64:40:
                    1f:62:28:1f:8d:e9:cf:3d:65:be:04:7c:16:96:6a:
                    dc:84:71:61:f9:1f:33:51:0e:9c:2a:d9:7c:79:4e:
                    3e:fc:b5:9e:7c:02:9e:b2:8d:19:f2:0c:38:49:87:
                    c9:b6:3f:2f:04:72:9d:0f:da:2e:aa:80:15:6e:be:
                    a7:70:7a:9c:28:be:9a:2f:d4:56:67:c3:6a:cd:83:
                    2c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9E:A2:E0:F4:5A:50:9E:A5:21:0A:5C:A3:64:8F:6C:37:DE:56:00
            X509v3 Authority Key Identifier:
                keyid:8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:72:dd:da:3f:51:2e:e3:af:8a:29:5b:51:8c:5e:16:7d:f7:
         61:61:a2:90:2a:b0:89:0d:98:13:23:d0:e9:de:86:34:ed:29:
         a0:83:ff:cd:c1:e4:24:31:9f:36:fc:e7:a7:e4:5f:8a:dc:42:
         4c:7f:ce:b5:3d:9e:67:b9:06:e7:0b:2c:f5:4b:f6:2e:fe:62:
         21:46:62:27:f1:53:13:ef:cb:82:80:97:b0:e3:35:a1:1e:9e:
         53:85:96:a8:40:55:32:d7:20:4b:c8:69:22:68:2f:e2:c9:06:
         90:36:7e:35:73:b1:96:e7:16:72:1b:c3:03:e6:85:36:a1:1d:
         95:f4:84:c8:a7:69:14:84:ed:3c:ca:7a:9d:68:bf:28:7f:b7:
         9e:45:86:af:6b:42:5e:00:7f:df:e1:ec:db:b4:6e:53:c8:ec:
         73:de:60:9a:b7:bd:d6:e9:b6:82:a7:89:cb:8a:08:8f:35:06:
         ad:f1:46:ce:3b:f6:9d:3b:e1:fb:68:b8:4a:0a:6c:0c:86:fe:
         08:35:74:ca:bc:a1:6f:09:5b:89:fb:c2:e2:f6:64:bc:1b:99:
         b4:f7:9e:8e:45:05:47:95:0e:7a:12:80:04:d1:8f:4b:b1:69:
         fe:19:ff:7c:f9:7a:b6:3c:11:6b:37:85:25:58:59:c6:fc:97:
         2a:5d:75:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----