Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
File:                     j9V6dd1-lSvuKDk11t8pJdKCoHA.mft (raw, json)
Hash identifier:          /gZeJ+HVCSgnwOd1mB7Sf95C8ZcnM3WOtoApIMNk/Og=
Subject key identifier:   7E:37:DE:1E:D0:AF:F4:D8:F6:DB:85:13:6D:B4:6D:D9:8C:63:7E:64
Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
Certificate issuer:       /CN=8fd57a75dd7e952bee283935d6df2925d282a070
Certificate serial:       01962DF40DC88C0877FD3F47A5F518E9BA04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
Manifest number:          1471
Signing time:             Sun 13 Apr 2025 07:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:31 +0000
Files and hashes:         1: A5Jsn1QSnz-hxnUHcHxtoBZXHyo.roa (hash: klrrdXVAOvLHpaQGMknKIRZ8jovgw0eH+IforAZMakg=)
                          2: j9V6dd1-lSvuKDk11t8pJdKCoHA.crl (hash: 2lcOozVh7qRPaeLSiOEu5X0E2f+4Sk9gn93oyMItGp4=)
                          3: lbjTPVJ8kMvq3D8tJBgeH8kXbO8.roa (hash: BXtNNVlgkc0/uCoLqqdZlugtN8CvJ987BUdYlHkO6J4=)
                          4: rM1Y2sEPJhDAcT03hS-KCRgpepQ.roa (hash: wYDQoNr38fN2VMwFRW0HV9EWF7i5Q9UBwcXGGYjLePQ=)
                          5: xBnPmDluu8xPBNc3MvJ1JJ1Y5f8.roa (hash: Q9qE4BIap4CmlXdBGmmHzRr3Ld+715v9q//ZgmRDsjA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0d:c8:8c:08:77:fd:3f:47:a5:f5:18:e9:ba:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070
        Validity
            Not Before: Apr 13 07:01:31 2025 GMT
            Not After : Apr 14 07:01:31 2025 GMT
        Subject: CN=7e37de1ed0aff4d8f6db85136db46dd98c637e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3e:e2:12:bb:ba:02:09:95:09:dd:fd:2b:06:
                    8b:81:5c:cb:75:c7:1f:ea:11:8d:c9:79:b3:02:a6:
                    f2:4b:42:85:75:6e:e5:e1:9f:9f:9f:da:01:82:62:
                    92:36:80:c2:f6:f6:74:78:23:57:b7:7d:89:42:f8:
                    90:b9:55:20:b5:7e:ed:0c:07:43:b8:9a:1a:41:53:
                    bf:de:13:50:ba:47:82:e1:3b:dc:00:ad:6f:9e:f5:
                    cf:f9:48:02:4d:fc:a8:83:b7:17:7c:91:7e:fd:c8:
                    82:d4:e6:ed:aa:ab:b0:19:f9:36:fa:90:18:a4:05:
                    01:3b:20:19:c1:fe:2b:53:9b:85:c5:3a:ee:b2:78:
                    92:68:99:4d:ed:ac:67:c4:4d:29:38:9a:cd:4e:ef:
                    75:0a:2b:69:e7:77:eb:c0:a7:cb:8d:7c:11:cd:54:
                    d0:38:91:3c:0e:bf:2d:40:9b:38:69:7f:aa:7e:35:
                    14:11:d6:d8:da:91:80:e7:33:00:71:8f:1a:3b:5d:
                    bd:6a:6a:ce:3d:54:46:b7:c2:c9:e4:93:9f:5f:f5:
                    09:c5:28:9c:e1:01:f8:ae:5e:11:c0:e7:49:0e:14:
                    c3:a8:42:bb:4d:ef:9f:ce:d4:34:1a:a9:5c:53:69:
                    30:35:59:d9:ac:99:c1:df:23:74:68:ce:ab:4d:a8:
                    7f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:37:DE:1E:D0:AF:F4:D8:F6:DB:85:13:6D:B4:6D:D9:8C:63:7E:64
            X509v3 Authority Key Identifier:
                keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:23:a4:8b:c5:ff:86:ce:0b:2e:5f:d1:98:00:d0:c1:6c:29:
         7a:08:c6:44:a7:fa:75:ec:8a:bd:23:39:1a:4e:0f:f7:cd:cb:
         57:83:35:7b:46:f7:9e:f7:7a:0a:39:f9:3c:34:df:93:39:9c:
         10:dd:3e:d6:ef:1f:3b:67:8c:8c:46:f6:95:3b:0d:c1:96:7d:
         01:bb:3f:df:75:c2:d4:77:74:26:a2:ae:b1:02:2f:f6:e1:aa:
         47:80:88:c3:82:16:9a:da:49:11:73:34:58:56:0d:96:c6:3d:
         97:f1:d6:07:53:c2:3b:4f:03:10:c2:d8:dd:f5:43:1c:ce:0f:
         de:82:bd:e6:90:bf:b2:6c:4f:a2:80:55:b3:9c:33:3f:06:ad:
         16:54:6a:56:65:7e:85:4b:f6:31:a7:d1:cc:a8:8b:e4:b9:81:
         e9:5d:4d:c4:1d:4d:95:03:bf:2e:00:d6:03:a9:10:d8:df:a7:
         7a:86:6c:24:4c:54:5c:55:39:6f:9a:ae:0f:57:ac:dd:ac:ae:
         c2:5a:0f:79:72:2f:c5:f9:08:17:c1:9c:5d:12:48:3f:26:7e:
         4d:a2:44:4d:9c:d5:8c:b1:a5:22:f9:f3:9d:60:bd:41:44:c0:
         6e:a9:bf:e1:98:c6:f9:c2:bf:5f:3c:c4:6d:6c:14:6a:8f:0b:
         84:10:2a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----