Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft
File:                     JmOMLLe4YM02lnnE0F1Q9wXgRik.mft (raw, json)
Hash identifier:          a9lawngN3vFEL2da+8ROlfPD93LxnJTAKDTk4/MNPOw=
Subject key identifier:   FF:DF:C8:3F:67:35:A9:D2:36:6D:28:2F:08:84:ED:68:7B:75:3A:61
Authority key identifier: 26:63:8C:2C:B7:B8:60:CD:36:96:79:C4:D0:5D:50:F7:05:E0:46:29
Certificate issuer:       /CN=26638c2cb7b860cd369679c4d05d50f705e04629
Certificate serial:       0195DFD9406A2DDEA13D34E06B8900F3863C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft
Manifest number:          0D30
Signing time:             Sat 29 Mar 2025 03:01:51 +0000
Manifest this update:     Sat 29 Mar 2025 03:01:51 +0000
Manifest next update:     Sun 30 Mar 2025 03:01:51 +0000
Files and hashes:         1: HRbR_khGq9xBOHLyUMt_H0_ZMOg.roa (hash: sAAGeZp9KGc0mAVbloa7q59m7jUPjTaroGNIZ50YXxw=)
                          2: JmOMLLe4YM02lnnE0F1Q9wXgRik.crl (hash: CjDsR9pV+qq97cXnLruvPRTX+TTCyDPuxxPiy/Ro+9M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:d9:40:6a:2d:de:a1:3d:34:e0:6b:89:00:f3:86:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26638c2cb7b860cd369679c4d05d50f705e04629
        Validity
            Not Before: Mar 29 03:01:51 2025 GMT
            Not After : Mar 30 03:01:51 2025 GMT
        Subject: CN=ffdfc83f6735a9d2366d282f0884ed687b753a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2c:51:e0:dc:94:b9:86:04:9f:b0:60:b9:9a:
                    70:af:d3:8a:bb:cb:19:5c:22:6f:ef:e2:8c:27:fc:
                    26:e6:c6:dd:01:4c:50:23:5c:a8:9f:90:9e:a1:8a:
                    1e:da:40:15:9e:73:6d:2b:e1:eb:33:26:21:f7:d2:
                    22:9c:01:d2:92:9a:76:52:31:a2:7c:05:53:1d:b4:
                    e6:03:6f:ab:01:75:85:0a:23:11:28:b0:d3:4c:e5:
                    55:93:92:f5:13:ee:6b:13:1c:a4:c3:9f:38:2b:c8:
                    54:2f:33:e3:60:d8:03:51:52:23:f4:e8:52:5c:a6:
                    58:7a:68:52:9b:30:bf:4b:be:91:0c:f3:27:b6:f6:
                    86:ec:43:5d:a3:2f:c3:17:e2:d4:64:a7:e7:1b:2e:
                    c6:05:e7:15:4a:b6:1c:e9:97:f0:b1:f0:40:31:ea:
                    ed:4f:58:82:46:d4:4b:de:cd:70:ed:8b:ed:01:ac:
                    81:42:fa:0a:58:e6:18:93:88:5c:a4:da:f5:7c:8e:
                    80:f9:6d:d5:9c:eb:29:6e:84:ad:32:6b:aa:c0:93:
                    c1:4e:3e:a4:07:2e:71:3c:a1:eb:20:50:2e:7d:94:
                    33:27:14:fb:ac:3e:5a:cb:07:b3:34:1f:f9:36:d5:
                    31:d7:b0:95:9f:73:b4:cc:fa:bf:f0:66:b4:a5:d7:
                    10:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DF:C8:3F:67:35:A9:D2:36:6D:28:2F:08:84:ED:68:7B:75:3A:61
            X509v3 Authority Key Identifier:
                keyid:26:63:8C:2C:B7:B8:60:CD:36:96:79:C4:D0:5D:50:F7:05:E0:46:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:93:2d:31:48:be:23:95:22:38:4b:9c:75:ad:11:0f:60:78:
         1c:94:5f:62:a0:3c:24:34:48:1b:c1:d9:bf:01:75:7d:27:cf:
         40:36:75:fd:c5:85:e3:bc:62:63:22:5e:a0:7c:33:a3:c5:bc:
         af:48:a6:9f:88:23:d9:1c:7f:b9:38:71:31:4b:8c:85:3e:e9:
         9d:42:fa:c3:c2:13:23:11:67:f5:e6:83:1f:d1:c7:fc:13:34:
         c2:ed:c0:ce:54:ad:71:f2:5a:44:00:c7:a4:7c:f9:69:46:b4:
         50:51:08:66:e0:62:f8:ac:7f:85:4e:07:f9:05:ce:57:df:b0:
         f6:b2:b4:17:f7:59:bd:7f:e6:14:c6:69:76:8a:ca:49:c5:66:
         20:3b:73:f1:bc:72:c1:00:6c:18:fb:46:ae:f9:8d:43:7d:99:
         e9:28:f8:20:16:b7:c0:8c:e6:3a:40:2e:07:1a:c6:b2:21:94:
         af:8b:98:9d:04:ef:9e:78:6b:04:8c:74:a7:bd:4a:fb:5b:59:
         24:3e:31:37:db:54:2c:51:06:d8:92:1d:af:5e:12:a9:ca:e1:
         49:ad:bd:dc:7c:c7:40:e9:3f:86:5f:20:69:9c:03:40:f9:41:
         62:2a:a8:65:22:78:a9:42:c6:f9:16:3d:43:c9:69:2d:fd:bf:
         53:7e:35:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----