Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
File:                     jmvT1UXusL5A8oOJnSGM9IaOlJA.mft (raw, json)
Hash identifier:          u9SLkaG9NiDTkhdZzM82UCf9qiScNfQqnasY9+Uwx58=
Subject key identifier:   88:45:1B:C8:04:13:7E:4C:F5:B2:D3:8C:78:AC:91:F3:D8:C0:BB:C5
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Certificate issuer:       /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial:       01962E2B4D6098B0A4F289A1B03ED2C2A524
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
Manifest number:          1231
Signing time:             Sun 13 Apr 2025 08:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:51 +0000
Files and hashes:         1: jmvT1UXusL5A8oOJnSGM9IaOlJA.crl (hash: bi/cgmV6qso2c5/HzMcbuAh5Z0dKbcUsF1+qJrzShNQ=)
                          2: vrnSzJ3-FK5XpOn1vPG5WY7ZAxw.roa (hash: mmQc628tPl3bs34ALUnwk7MYS2YDfpoBWJfmEYCNwMg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:4d:60:98:b0:a4:f2:89:a1:b0:3e:d2:c2:a5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
        Validity
            Not Before: Apr 13 08:01:51 2025 GMT
            Not After : Apr 14 08:01:51 2025 GMT
        Subject: CN=88451bc804137e4cf5b2d38c78ac91f3d8c0bbc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:43:35:3d:f1:47:28:03:41:21:6e:6d:63:5d:
                    43:cf:06:97:be:1f:8c:55:a7:6d:fb:aa:74:f7:87:
                    09:83:59:f0:3d:e3:26:77:5a:11:c2:a3:e2:e5:63:
                    3b:34:9a:89:8d:fb:a9:71:0c:c6:e9:27:0c:2d:c3:
                    11:96:69:a8:e3:d6:42:13:90:9d:c5:3b:29:ad:af:
                    25:47:42:16:6c:51:ef:81:e0:9b:53:2e:69:21:eb:
                    ec:72:94:b4:2a:ca:f4:11:02:58:1a:b1:2e:62:04:
                    08:b5:59:b9:4e:8c:b1:b9:c7:44:25:2d:ca:83:4a:
                    57:a4:9f:05:95:48:13:ed:fd:02:6b:1e:4c:25:d3:
                    fa:87:49:ef:a8:7a:cf:5e:e7:b3:d8:91:5e:d8:6a:
                    ed:4e:07:db:dd:a4:35:cc:b2:28:11:ae:50:89:54:
                    7d:94:9a:54:6f:58:82:dc:15:49:07:81:77:d3:fc:
                    2b:f0:b7:c3:41:39:65:f0:bc:08:6b:2a:1c:84:1c:
                    a3:cc:67:ab:e9:28:5d:38:04:6b:ac:46:68:b0:f9:
                    a8:43:73:47:0b:af:58:b4:bd:77:d0:f5:08:06:a1:
                    b8:4c:b6:9a:8e:3b:77:6c:bb:b6:c0:49:1e:11:44:
                    f8:ed:1b:84:f4:52:b7:56:12:ba:ec:5e:86:29:34:
                    f2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:45:1B:C8:04:13:7E:4C:F5:B2:D3:8C:78:AC:91:F3:D8:C0:BB:C5
            X509v3 Authority Key Identifier:
                keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:94:95:16:bd:c0:84:e0:32:b1:f3:7f:6d:75:1d:04:d9:2d:
         cd:d6:8f:95:b6:e9:15:ec:e4:14:4a:79:8d:93:91:ad:b6:dd:
         05:0f:99:93:9c:f4:b8:5d:fb:85:66:ce:01:ed:d3:c8:91:b9:
         4b:d4:61:f3:43:52:57:a5:d8:74:92:d0:76:a2:ab:8d:d3:d4:
         bf:2e:c0:f3:5f:8b:4a:82:44:79:98:c6:10:6e:0b:bb:fc:30:
         c4:9a:37:99:63:ba:f4:54:7f:08:e2:0f:92:09:41:72:c1:2b:
         ba:51:e6:1c:77:9d:2b:ef:d0:ea:81:0f:3e:0c:da:f6:12:ca:
         f8:f7:ac:88:3c:97:8c:56:08:b4:ea:24:e0:4b:50:b0:df:46:
         79:35:26:36:28:e7:b8:ba:89:45:b5:10:53:ef:95:ca:35:bb:
         6d:13:b1:7b:a6:29:dd:c0:85:8a:e7:eb:4f:05:ca:c6:fa:1d:
         5e:2b:1c:85:63:c9:91:e2:7b:bf:fd:71:46:3d:0d:e5:82:99:
         5b:0b:6a:eb:5e:03:03:3a:29:d2:e2:46:d1:61:27:0e:af:b8:
         2f:1f:a7:45:1c:aa:b0:7a:ba:52:67:5f:cc:26:9c:96:65:1c:
         03:f5:16:de:3c:14:e3:9f:77:af:7b:c3:d1:c2:12:7a:f4:6d:
         8c:00:cc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----