Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
File:                     aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft (raw, json)
Hash identifier:          u6k5glKCVA0XZOYvsk8eWqOdmwae/1zDKss9VMK2lbk=
Subject key identifier:   E9:03:90:B6:D5:C2:5E:15:D5:02:2F:E2:37:B4:13:34:1A:3A:84:5E
Authority key identifier: 68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17
Certificate issuer:       /CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
Certificate serial:       01962E61966435CA711999F8E12284077501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:09 +0000
Files and hashes:         1: 1-POC2nfhxokaO34U4IxxrQdEyHg.roa (hash: HGa5ESI5zwwldA7SOJhQSh4vTo8C4LN7Ht6oX1cZupU=)
                          2: aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl (hash: 5Kbh2Hy8Gf8W803XHxe0dPTv6HAuPQSzrfsb17mAJoY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:96:64:35:ca:71:19:99:f8:e1:22:84:07:75:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
        Validity
            Not Before: Apr 13 09:01:09 2025 GMT
            Not After : Apr 14 09:01:09 2025 GMT
        Subject: CN=e90390b6d5c25e15d5022fe237b413341a3a845e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ff:9c:a0:a4:5b:2c:b9:5c:e8:ac:17:28:cc:
                    84:0a:16:43:92:b9:d0:8b:cc:91:9f:62:a2:cd:8e:
                    2b:69:2d:78:05:3f:70:83:fa:2a:ed:71:97:64:7e:
                    f0:a6:26:51:87:25:02:58:e9:e1:b5:99:eb:42:2e:
                    8e:bc:81:9b:a2:df:e9:92:94:9d:4f:58:48:78:20:
                    fe:f8:c2:01:dd:6b:56:da:50:30:6f:80:f9:7e:2d:
                    43:85:b6:63:c7:aa:db:d4:92:72:94:53:45:70:c5:
                    74:53:3e:d2:87:c3:10:a5:5d:52:78:e4:cd:1d:10:
                    90:c2:a4:fb:3b:3d:53:06:eb:12:aa:c1:9b:0a:8e:
                    73:b9:85:83:a8:66:17:75:61:34:29:66:a5:3b:cd:
                    02:08:22:fa:c3:b0:1f:c6:14:12:d3:35:b6:ac:f4:
                    e1:54:d8:8d:8e:82:f9:8d:3b:40:1f:68:76:29:78:
                    cb:cb:cb:2b:a0:80:31:fe:36:95:05:3e:e1:6f:bd:
                    85:9c:9d:2d:a8:72:19:ef:b5:2e:0a:26:04:3c:0a:
                    9c:7f:38:0e:26:7a:88:54:24:d1:8f:d9:e3:37:75:
                    da:e8:cf:29:87:9c:85:7d:21:86:d6:44:9f:5f:bc:
                    ad:c9:66:e4:07:0b:e4:f3:e8:1e:83:03:1e:ef:a3:
                    b1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:03:90:B6:D5:C2:5E:15:D5:02:2F:E2:37:B4:13:34:1A:3A:84:5E
            X509v3 Authority Key Identifier:
                keyid:68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:db:64:ca:8b:17:41:b9:95:d4:22:0c:d0:57:91:7c:e4:db:
         0c:d9:b5:d0:78:14:a0:43:cf:c8:23:45:d2:4e:94:6e:12:4d:
         5c:d1:45:79:9d:48:20:52:b5:6d:03:4e:a1:46:81:55:a5:d6:
         f6:00:6a:4b:d6:b1:a6:09:17:ff:d3:23:6e:be:c3:37:14:5c:
         c6:bb:25:7a:90:8e:76:a4:79:7d:51:c6:c3:34:fa:43:73:05:
         9c:a3:19:bd:26:45:71:fb:2d:77:bc:33:5b:19:d9:b3:13:07:
         b6:08:0d:79:25:34:85:ce:fb:41:e6:3b:26:be:9c:19:3e:fd:
         22:96:ff:cb:1a:5a:19:21:fd:0b:03:17:bc:2c:89:62:c2:92:
         9e:65:64:b8:dd:fc:cb:9d:4a:73:fa:b2:bf:cb:d2:17:da:40:
         d2:05:a0:3b:98:ba:4d:aa:95:4a:55:1a:77:dd:52:f8:c9:3b:
         b5:92:f5:e4:69:75:54:8b:42:4a:ae:88:ad:93:80:ab:8c:8b:
         7b:a6:a8:2d:20:82:92:76:df:6e:6c:82:10:79:c8:70:b0:ca:
         cc:3a:97:1f:36:15:91:b4:a8:b8:ab:1b:66:4f:ad:24:3b:ae:
         db:15:a1:19:51:b8:ed:b4:0b:ea:26:6d:e9:cd:96:5e:75:9b:
         dd:1f:81:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----