Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c8521a-9497-4ed2-8ea2-8ed11e9e341b/1/Jbc-hv1Jbt-qOy_qcVq2gywlDGk.mft
File:                     Jbc-hv1Jbt-qOy_qcVq2gywlDGk.mft (raw, json)
Hash identifier:          vVXy5MiScQ1y0RTyA5sAx5pAiLTsIHfHY/UMygQMBt8=
Subject key identifier:   6B:62:8F:2D:A6:6F:2F:CA:1B:DE:5E:91:4D:D5:7A:17:59:96:CA:22
Authority key identifier: 25:B7:3E:86:FD:49:6E:DF:AA:3B:2F:EA:71:5A:B6:83:2C:25:0C:69
Certificate issuer:       /CN=25b73e86fd496edfaa3b2fea715ab6832c250c69
Certificate serial:       0716DE40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jbc-hv1Jbt-qOy_qcVq2gywlDGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/c8521a-9497-4ed2-8ea2-8ed11e9e341b/1/Jbc-hv1Jbt-qOy_qcVq2gywlDGk.mft
Manifest number:          091E
Signing time:             Fri 29 Apr 2022 05:31:00 +0000
Manifest this update:     Fri 29 Apr 2022 05:31:00 +0000
Manifest next update:     Sat 30 Apr 2022 05:31:00 +0000
Files and hashes:         1: Jbc-hv1Jbt-qOy_qcVq2gywlDGk.crl (hash: I4GrGJv47YcskyNBniFZl11+R8pW4CM+7ukt59Te2Zc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118939200 (0x716de40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25b73e86fd496edfaa3b2fea715ab6832c250c69
        Validity
            Not Before: Apr 29 05:31:00 2022 GMT
            Not After : Apr 30 05:31:00 2022 GMT
        Subject: CN=6b628f2da66f2fca1bde5e914dd57a175996ca22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a9:e1:4f:b6:32:e8:62:80:dc:da:17:e1:07:
                    60:84:5b:b4:57:d1:50:a0:1d:10:0d:42:e0:b8:37:
                    b2:88:b8:10:0d:a2:6b:b5:ce:8e:42:3a:ae:cd:ba:
                    f6:01:c3:05:5a:88:48:28:66:40:49:66:ea:7a:0d:
                    db:34:ae:8d:57:60:fb:b0:c2:f5:e3:e0:cc:15:2a:
                    da:2f:ef:4b:4a:26:55:24:cc:92:80:ec:c0:a4:03:
                    7a:4e:d8:0b:6c:dd:5e:db:ae:75:7c:a6:ea:31:5d:
                    7e:20:d9:a7:b6:e0:82:9e:34:26:2b:f3:5c:ec:01:
                    cd:69:2b:2c:7b:0d:5b:03:f0:45:de:23:7d:46:d2:
                    34:46:a3:7e:c9:6f:e2:8d:60:f7:1b:ec:1f:d5:4a:
                    7a:1b:00:3f:71:08:f8:43:ca:c6:8d:ed:31:60:1a:
                    23:15:c2:7a:b8:6d:e9:7b:1d:96:be:5f:7c:d6:fa:
                    02:4a:58:d0:01:1c:23:2f:a9:e0:8d:9c:a2:d4:80:
                    84:52:87:8f:16:54:11:ac:74:65:0b:dc:05:25:ac:
                    62:0b:b5:c8:ea:f7:12:e4:3c:77:fa:ed:09:07:3b:
                    ea:f2:18:00:29:53:35:96:4a:41:d2:63:00:b0:3e:
                    73:ca:16:10:f4:e6:0c:bf:60:ef:d4:f6:88:3c:6e:
                    f2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:62:8F:2D:A6:6F:2F:CA:1B:DE:5E:91:4D:D5:7A:17:59:96:CA:22
            X509v3 Authority Key Identifier:
                keyid:25:B7:3E:86:FD:49:6E:DF:AA:3B:2F:EA:71:5A:B6:83:2C:25:0C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jbc-hv1Jbt-qOy_qcVq2gywlDGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c8521a-9497-4ed2-8ea2-8ed11e9e341b/1/Jbc-hv1Jbt-qOy_qcVq2gywlDGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c8521a-9497-4ed2-8ea2-8ed11e9e341b/1/Jbc-hv1Jbt-qOy_qcVq2gywlDGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:24:98:7b:45:65:d7:b5:25:c6:f6:e1:df:17:15:80:a3:06:
         a4:6e:0a:90:28:a5:5a:be:4e:0d:b1:26:0a:b4:89:3f:48:d2:
         20:97:61:55:a6:40:2d:07:56:dd:8d:21:bf:c4:88:0b:04:a5:
         97:1b:7a:b9:30:c3:ec:b3:96:74:51:94:b4:70:af:40:d9:da:
         c6:1a:e4:85:4f:5e:27:46:cf:a9:62:2f:06:39:e5:90:17:29:
         1f:f2:81:89:fa:58:59:73:1f:ff:1a:27:11:eb:6a:57:c6:79:
         7b:1e:fa:b8:6d:b4:55:0d:40:08:ae:8d:cc:91:0e:97:36:20:
         c7:4f:53:c8:ac:2d:d6:af:20:96:3e:a7:04:57:d3:60:7d:ae:
         90:45:ba:99:ef:97:16:c5:3b:a2:1a:f0:e9:97:f2:8b:78:a6:
         22:d3:b8:11:bb:d2:3d:84:f3:ea:2c:e5:08:63:ac:71:82:90:
         6b:74:6b:17:eb:5d:c0:46:a8:51:26:b8:74:59:69:00:ea:24:
         1d:da:10:4f:86:a5:d3:e2:6c:b9:0b:41:c9:0d:fc:b7:21:ef:
         a0:34:f4:ef:9e:5d:21:b1:5f:a8:e9:ef:a9:e0:96:45:e3:bc:
         40:52:c4:ed:32:e6:25:c0:bb:7b:d2:92:80:f4:04:cf:ad:c0:
         37:35:2c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----