Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
File:                     z8bMSnQYoJQhupgF52Tu80Lvjzg.mft (raw, json)
Hash identifier:          rsaQNgvg9F2PvoIkxuJUN+UntqDBtJiy48JhJ7CkdRE=
Subject key identifier:   78:8B:3E:6F:50:0B:4B:19:97:FE:D0:2A:56:76:F3:8C:52:CA:6F:DC
Authority key identifier: CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
Certificate issuer:       /CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Certificate serial:       01962ECFE21C61D778017D843163E179B93B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
Manifest number:          0617
Signing time:             Sun 13 Apr 2025 11:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:37 +0000
Files and hashes:         1: Sm3lswcII0bf-ALKj_DDpzZvLMc.roa (hash: /Kb0jwUQMRGuhoCXPSsBRGNhGMzqhfM4ypAYr8K7OsM=)
                          2: z8bMSnQYoJQhupgF52Tu80Lvjzg.crl (hash: auNZc+mXLWw5ev0OZxdHmZNc8S+wmq1hDOhvkMecC9Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e2:1c:61:d7:78:01:7d:84:31:63:e1:79:b9:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
        Validity
            Not Before: Apr 13 11:01:37 2025 GMT
            Not After : Apr 14 11:01:37 2025 GMT
        Subject: CN=788b3e6f500b4b1997fed02a5676f38c52ca6fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7c:fd:6d:ca:cf:88:cc:a0:c4:c3:45:40:61:
                    53:ec:bd:b0:f6:8b:96:bb:59:c3:2e:39:22:65:50:
                    ed:0f:6a:4a:ca:fe:48:97:2e:e4:ac:88:82:20:74:
                    5e:bb:5b:12:8c:27:c7:f0:ad:29:73:92:8d:c5:1f:
                    3e:4d:84:b4:04:ad:86:8f:f4:c3:c6:4f:01:eb:21:
                    27:02:9c:36:0e:cd:31:d7:a1:91:7f:6b:f1:0d:62:
                    dc:11:ef:bf:e4:76:04:56:a7:16:b8:fd:ec:8d:f3:
                    b9:23:0c:94:a5:d0:78:05:09:81:2f:f3:2e:82:5e:
                    3c:90:06:0f:cb:b5:1b:66:19:2c:67:4e:8a:1a:8a:
                    b6:b9:c6:2f:bf:7b:0c:e4:32:91:7a:97:be:66:b7:
                    08:d9:34:9c:05:d6:3e:d7:bc:5c:4b:13:b7:ef:a3:
                    ae:fb:07:97:b8:0c:d9:dd:31:f8:ce:ef:a0:81:3d:
                    1e:24:10:39:79:97:8c:4d:27:27:b0:8f:96:5d:56:
                    f4:3c:61:b0:f4:02:73:96:7c:dc:3a:09:37:3e:8f:
                    e7:b7:9b:2d:98:88:25:f0:0b:f6:ac:49:b2:e0:06:
                    c6:f5:ec:7c:4f:1f:ba:ba:ed:16:b4:4d:3d:89:f5:
                    5e:b4:f2:9b:19:80:1b:6b:35:83:c6:c7:60:b8:6b:
                    9c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8B:3E:6F:50:0B:4B:19:97:FE:D0:2A:56:76:F3:8C:52:CA:6F:DC
            X509v3 Authority Key Identifier:
                keyid:CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:69:e5:f0:75:f9:be:68:d6:14:17:04:ee:59:34:69:42:ae:
         bd:ae:b4:e2:a4:cf:04:60:94:38:27:d7:19:45:45:28:4f:27:
         02:23:e4:d5:04:87:cd:45:fb:17:26:80:72:01:8e:70:cf:9f:
         d2:2b:d1:f4:d0:9e:df:34:38:6c:42:5e:76:39:90:50:a1:8d:
         9e:ff:eb:1d:c8:e4:2f:86:fa:1d:a3:17:f0:51:b7:a3:db:b3:
         bf:80:b6:ed:df:16:45:d9:97:b7:93:7c:3e:3e:32:15:ec:46:
         e4:e2:80:f1:6c:58:e7:c4:15:04:1b:14:da:1a:f8:a1:7f:3a:
         0e:7a:a9:0c:b4:d2:47:63:d2:48:4e:85:74:6a:b9:2b:9a:a0:
         11:0e:d9:02:6b:72:26:33:26:a8:65:42:5e:1e:d8:c3:cc:f7:
         48:92:a7:da:b2:aa:5f:ae:a3:69:ab:ed:17:08:a7:0a:a8:e4:
         6b:b9:44:2c:e1:5e:20:2c:db:b2:05:23:1b:ac:68:5e:91:df:
         3d:3f:de:29:df:f0:de:6e:3f:57:84:56:af:fc:2c:93:23:d7:
         7b:91:ed:42:50:d1:c9:c5:d5:37:23:1e:df:f1:10:3c:76:33:
         38:34:75:18:2f:39:a0:93:22:35:b4:e0:40:25:f7:c0:5f:c0:
         85:ad:e8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----