Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
File:                     jTrSodmrXJtPu05eAlIe4FK4nV8.mft (raw, json)
Hash identifier:          RMt+znOTD9wx35YEhng+kJrhyDPbGlx1BCzTn3EzZRM=
Subject key identifier:   DB:59:80:C3:AF:7B:81:B3:89:10:81:9D:F3:A6:43:A8:92:76:F6:83
Authority key identifier: 8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
Certificate issuer:       /CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Certificate serial:       01962F3DD61BC651E6E97A8D637E639B384C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:43 +0000
Files and hashes:         1: gUp9W6gdzA4HeeDeBLYOgieiGro.roa (hash: lrN/LUw9qbgMyjQd+6zHffB/Q9YQH49/9bc6+74QbTo=)
                          2: jTrSodmrXJtPu05eAlIe4FK4nV8.crl (hash: zIgXzcZrmOLg5ELVZt5NkgckQH7k3dFPvQiPBl84Tes=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d6:1b:c6:51:e6:e9:7a:8d:63:7e:63:9b:38:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
        Validity
            Not Before: Apr 13 13:01:43 2025 GMT
            Not After : Apr 14 13:01:43 2025 GMT
        Subject: CN=db5980c3af7b81b38910819df3a643a89276f683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:34:11:8f:7f:6d:33:99:be:ab:60:a9:2c:59:
                    78:b3:bb:95:a8:31:fe:21:e2:ad:79:87:d0:70:b4:
                    e6:e1:36:7e:09:0c:6d:b9:f5:88:1f:4d:46:56:11:
                    5b:41:4f:28:14:88:3f:0e:30:4a:61:33:4d:97:76:
                    6b:10:9e:17:c4:a8:70:ae:4f:5a:6e:a7:8d:f1:1a:
                    3d:72:db:35:25:3a:30:9c:1f:0b:71:dc:d0:0e:e9:
                    26:c9:60:da:09:c5:7d:4f:30:e6:7c:ef:a7:99:95:
                    69:32:c0:6d:c1:7f:dc:62:8b:10:98:d7:50:24:eb:
                    ad:75:ed:3e:c8:89:e5:e4:8b:16:0d:bb:f1:ac:dd:
                    07:2a:d2:16:62:0e:a5:0f:cc:45:99:02:df:05:53:
                    46:b3:1f:d1:57:96:d9:fa:5d:8f:67:62:27:32:cd:
                    08:aa:8f:d0:9d:a7:96:6e:a8:be:6d:cc:33:43:7c:
                    fb:70:6e:45:a8:08:18:7e:b6:f8:26:cb:09:ab:04:
                    a6:4d:e3:a2:6a:35:bf:dc:67:f6:34:95:32:ca:b4:
                    80:07:ea:2f:c9:5b:17:78:30:7f:cc:1f:dd:07:f2:
                    99:a5:a5:02:41:87:96:3c:6f:64:b0:fe:35:01:c6:
                    f0:46:e0:e2:a1:11:bf:25:d2:17:53:95:13:16:d6:
                    8b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:59:80:C3:AF:7B:81:B3:89:10:81:9D:F3:A6:43:A8:92:76:F6:83
            X509v3 Authority Key Identifier:
                keyid:8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:45:2b:6a:38:76:88:c0:11:77:7f:9f:e8:9d:fa:84:ee:d8:
         c3:d7:50:1e:b2:68:ee:6a:b3:6c:ce:68:0a:10:fd:75:aa:0e:
         c5:28:7d:8b:bb:46:42:29:60:74:61:bc:7b:16:09:aa:ac:fd:
         d5:57:cf:42:57:81:14:eb:01:e4:aa:6e:be:07:f2:7d:76:12:
         b8:ee:12:18:3d:99:da:53:29:21:34:33:74:59:ce:f3:e2:51:
         aa:62:1b:e6:1c:5d:98:48:34:6e:c0:4e:47:6e:44:fa:d7:7b:
         30:f0:96:d4:5e:97:ad:af:7c:24:ef:04:12:8a:f4:3f:b4:1e:
         52:53:f5:9e:a8:53:1f:27:a7:58:0e:5d:56:fb:7e:e9:d4:4f:
         8a:6e:d9:2a:4f:fc:70:02:56:6b:3d:62:f1:d7:e8:f6:de:6b:
         f4:18:ae:cf:c5:7c:7a:c1:21:11:e7:2f:35:42:ae:1e:46:d2:
         9e:87:19:64:10:8c:4f:e2:99:f5:02:9b:93:7a:fd:36:a3:e3:
         b7:fa:53:28:6a:77:2e:4d:59:16:5c:f6:c3:bf:ab:3f:fe:77:
         05:eb:ae:71:1c:f7:a8:50:b7:aa:6d:54:4e:82:15:8a:17:8d:
         ac:7a:80:4c:65:c1:83:d5:5e:36:8d:05:9d:e5:82:2b:2a:c4:
         84:cb:b5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----