Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
File:                     j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft (raw, json)
Hash identifier:          5VrVCR7OU65zuMaSwAmK1JUoBV17YiJpVVVyAaF7+sc=
Subject key identifier:   47:18:0E:7F:02:BA:EB:4D:DC:27:A6:EB:ED:BF:E9:C4:78:B2:1B:F7
Authority key identifier: 8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
Certificate issuer:       /CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Certificate serial:       01962F07466348316F30A70A97F199C784D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
Manifest number:          0D1F
Signing time:             Sun 13 Apr 2025 12:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:08 +0000
Files and hashes:         1: 0hR_0c7RQJiSWec5GOXGTkJBB-o.roa (hash: 6B95v6L3QKq5sJN6SrWqfMlBSuwCIbwLv0Gvp6AwXSs=)
                          2: HWJyqOYgKmYyzjid7IInVzpFlwA.roa (hash: 3+ag2Dw5tuJ29n6cQ1euqcvO0rPVdHqsSUSY7z8He/0=)
                          3: SA-KGCApQAk5dV-uBcL4crTpK78.roa (hash: U4+vxtQUb5bot1HWyDwYpTjdt9NcKSDTCzFzv9zH3l8=)
                          4: j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl (hash: JQVvIe8NTcwSLWpwp+bPmbBmJ+W3kUfBCA/O+ODdpcs=)
                          5: l_EpL9DerXvkoi9mgtKAqNomA8k.roa (hash: NYPx355N2XC2PNV7lGv0qgOFwLrFg0uF6l0cLL8mgHo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:46:63:48:31:6f:30:a7:0a:97:f1:99:c7:84:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
        Validity
            Not Before: Apr 13 12:02:08 2025 GMT
            Not After : Apr 14 12:02:08 2025 GMT
        Subject: CN=47180e7f02baeb4ddc27a6ebedbfe9c478b21bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:30:ed:21:8f:33:a5:10:df:70:0a:b7:e5:78:
                    5f:56:b9:f3:2c:fe:1b:a6:bb:a0:06:f4:a7:85:30:
                    fc:6e:d0:3e:fb:7a:d3:e5:16:c7:3a:a5:2f:06:be:
                    ce:68:8e:69:83:7f:f8:1f:51:04:55:55:b3:92:f8:
                    10:8e:42:b4:d9:13:07:81:de:ad:1d:09:58:6d:ac:
                    5c:1e:c5:7a:42:e3:c4:03:55:a6:ef:92:78:08:7e:
                    f9:b6:4a:a0:86:38:da:67:92:aa:d0:aa:ec:f4:3d:
                    01:53:7c:d6:f2:9f:b9:b6:cf:6f:12:09:18:19:c2:
                    01:52:f4:06:7a:9e:d4:00:4f:60:7d:d5:ec:45:a8:
                    4a:ab:43:7b:1b:54:68:ff:9f:e7:d2:a8:49:47:c0:
                    5d:9e:08:45:8c:4a:de:a7:23:ca:0d:16:2d:ba:dd:
                    0d:ab:53:76:22:55:34:a9:85:60:47:29:ad:ad:e6:
                    c9:95:75:5a:f7:66:14:fb:6e:14:80:c5:d0:a4:00:
                    09:00:b7:26:c5:a9:5d:e1:d4:13:c7:da:cb:d6:0a:
                    48:7a:90:6c:8e:43:eb:a7:6b:ed:d3:a8:08:7b:e3:
                    1f:cf:af:fe:e6:9b:8e:41:ba:87:98:98:65:df:1c:
                    ae:fb:12:f2:7a:17:66:03:48:63:ed:c0:d2:d1:78:
                    f4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:18:0E:7F:02:BA:EB:4D:DC:27:A6:EB:ED:BF:E9:C4:78:B2:1B:F7
            X509v3 Authority Key Identifier:
                keyid:8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:69:ea:9f:79:af:15:12:57:5c:b2:6f:53:45:c1:2a:27:2b:
         b9:c2:71:04:18:26:cf:e4:ec:5f:81:31:19:51:23:16:fd:c1:
         84:7a:e7:ad:9e:75:5b:a2:aa:af:ea:79:bb:9f:11:7e:32:20:
         60:1b:37:88:f3:29:c7:6c:e8:3d:78:0c:6d:ea:7a:d3:a7:ac:
         64:ba:d7:fc:ed:bb:59:04:34:ac:8c:ff:a2:41:23:28:ca:0c:
         85:d6:5c:23:ad:e2:42:ab:62:cf:a9:42:87:f9:d6:44:3f:e5:
         1f:bd:97:67:8f:5a:ca:c5:29:ba:ad:74:e8:e5:00:16:9f:d4:
         59:2c:1d:25:b8:b2:cf:3c:48:cd:9f:6d:81:39:a7:7d:28:d8:
         5d:9b:27:dd:f1:da:82:00:ec:a1:01:66:9a:38:09:90:69:2e:
         9a:d6:2a:f8:f0:71:ab:ea:f7:38:ae:81:28:5a:27:d8:d2:66:
         e0:cf:b6:ac:82:17:88:3f:17:81:a9:59:f4:ea:a3:d8:75:d6:
         65:5b:c1:a3:70:9d:da:37:cd:b7:1b:78:bf:31:99:87:17:f4:
         b9:87:64:4c:e0:3a:b5:fd:e2:0d:1a:99:39:11:75:cd:18:9d:
         d0:80:d0:0b:39:2d:bc:78:7d:a5:99:84:26:d4:7a:0b:97:4b:
         b3:f8:3b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----