Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
File:                     jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft (raw, json)
Hash identifier:          nDtSITWPeCR3d6dIA1M/qSLEBp8I/mJnU8Nzmo25NyI=
Subject key identifier:   61:A0:29:B2:E9:73:70:43:36:4E:7B:31:5B:E1:5A:BC:CE:B2:6E:1D
Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
Certificate issuer:       /CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Certificate serial:       0194BC3C29708F98651BD8C641BAA53C7805
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
Manifest number:          1014
Signing time:             Fri 31 Jan 2025 12:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:46 +0000
Files and hashes:         1: 54maDBwwKTxHdkusWjL9_Ovz-qw.roa (hash: K+6mHC5B4TYfPyOtC0Ws3X1xogH31t6cVYvGSG2+010=)
                          2: GpJsbUU7ynXwevk6zegWgWclf9Y.roa (hash: Gj5/c+xCgDWNgWsyAfXPaCh0mgF3UrEUlCabtiae4lk=)
                          3: baMjsDY94eZSoK-AIzqEOHNRACk.roa (hash: SLAiqx14sHLSHfAF2Lauw4go5jjzGTP4a1xj8l/WroY=)
                          4: jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl (hash: Hau/hsqeoiNH/Zldul9IWKXD7kWVcL3HoC14Y1v7E2s=)
                          5: nbxUHEZP7nLPsSWUzZlv-6zoI8E.roa (hash: b2RlxLzrg3Jt5vsvNFiprNhu9Bg/P/h2jB1aLvcyUR4=)
                          6: prOxBQFXKQHVMxFfWuCKBN6cC28.roa (hash: KQkvvBw6H6mLNvuqMCwSPUrSIm6c/c/LV/GGLcSdkGQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:29:70:8f:98:65:1b:d8:c6:41:ba:a5:3c:78:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3
        Validity
            Not Before: Jan 31 12:00:46 2025 GMT
            Not After : Feb  1 12:00:46 2025 GMT
        Subject: CN=61a029b2e9737043364e7b315be15abcceb26e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f6:22:62:24:e8:4d:d8:55:c3:31:84:4c:e1:
                    de:da:2c:81:cd:cf:82:2b:86:65:03:d2:c2:88:b6:
                    3e:38:66:cc:76:95:ff:55:fe:15:69:68:5e:2e:5e:
                    58:66:15:bd:4c:ef:e2:69:d0:ba:dd:71:71:93:84:
                    6a:34:93:5e:14:f3:bc:f4:d9:63:3d:3a:dc:4a:35:
                    bb:c5:80:e1:6a:55:ad:1a:21:c1:0b:0e:b6:18:6f:
                    f5:d5:f6:22:10:c6:72:f8:96:5a:e3:19:8a:ce:88:
                    26:4f:ca:e7:13:d0:4b:6a:6b:cb:f2:1d:c5:1e:c7:
                    71:66:6e:74:fe:ea:1b:e3:c6:20:9a:0f:5d:2c:a2:
                    82:b5:37:0a:80:c0:42:1b:42:84:e7:8d:28:02:65:
                    a6:eb:cb:e6:d0:ee:55:6a:2d:04:50:f4:6f:fd:eb:
                    a1:28:73:d3:83:bc:b6:a4:c6:8c:a5:5b:06:4d:d5:
                    1d:b2:7f:34:26:ce:d3:4a:fc:b0:0a:b2:39:6d:b3:
                    75:4b:c7:19:5e:e8:84:92:5b:a7:b9:a6:0a:7b:3d:
                    ac:0f:9d:02:3b:4d:75:39:93:3c:61:5b:f9:9b:a0:
                    77:c7:07:d0:37:71:47:bf:45:ac:a4:68:03:9b:28:
                    02:7d:23:74:4d:db:ae:7d:ee:2e:9f:79:96:48:1a:
                    45:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A0:29:B2:E9:73:70:43:36:4E:7B:31:5B:E1:5A:BC:CE:B2:6E:1D
            X509v3 Authority Key Identifier:
                keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:3d:7b:f6:4d:36:2d:cc:d6:68:0e:60:fd:aa:05:d0:05:12:
         10:d9:8c:22:6e:56:ef:3b:3e:ae:45:3b:40:8c:ec:50:2f:d8:
         8e:f5:40:41:bf:07:07:d2:d4:cc:7c:4e:59:4c:a7:d0:cb:35:
         f9:d8:74:27:a1:b6:fd:23:92:8d:36:df:3b:34:79:47:9b:d3:
         a2:50:a8:c3:77:eb:41:96:5b:2e:27:6b:a0:5e:55:9c:5d:71:
         f0:52:d5:e7:aa:aa:8c:df:6f:d8:51:a0:77:aa:6e:f5:e8:f2:
         d9:68:fc:d1:0d:1d:5c:ae:0f:a0:95:1f:f4:e9:5d:07:3f:38:
         d2:42:98:da:6d:f8:19:7e:a6:b0:ff:0c:d0:1f:b9:75:48:b9:
         3e:b5:98:4d:8e:db:f7:87:85:21:93:1d:42:ea:1b:12:37:75:
         00:15:4a:b5:3b:36:b9:b8:cc:8f:f1:46:c4:68:eb:19:c9:57:
         43:cf:2b:ad:81:d8:16:ff:0a:ab:20:4a:6d:dd:24:72:2c:80:
         cd:d7:58:d9:6e:10:5e:7e:a3:78:1f:5a:80:d2:25:75:b3:61:
         fc:52:7c:67:b2:48:0c:cc:4d:bf:08:c0:72:71:45:a8:09:d3:
         f8:c1:a6:22:ed:ca:ed:88:2f:67:aa:b4:dc:39:34:17:fa:eb:
         5b:8e:51:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----