Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
File:                     jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft (raw, json)
Hash identifier:          N8HuEwnpTF/lSWb/AecpdS+L/qdEU4+wfaW19TSRDpI=
Subject key identifier:   2C:F9:87:E5:F4:F9:FA:28:12:EE:67:B4:30:B9:B2:76:C6:0F:8C:3C
Authority key identifier: 8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
Certificate issuer:       /CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Certificate serial:       01962DF447988D8BC6F042AE9E6A500521DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
Manifest number:          0992
Signing time:             Sun 13 Apr 2025 07:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:45 +0000
Files and hashes:         1: SGMdDeiUFAfk2xwIdXVeKa_LLHk.roa (hash: ZKIHPynyXeoLlT2qw3+kEeOK0uvKuoHZvZmp3cJSFCw=)
                          2: jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl (hash: IBJLOQBuQkw29HV0qg/QpGXZaLxn2N2cCt4/cEezYto=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:47:98:8d:8b:c6:f0:42:ae:9e:6a:50:05:21:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
        Validity
            Not Before: Apr 13 07:01:45 2025 GMT
            Not After : Apr 14 07:01:45 2025 GMT
        Subject: CN=2cf987e5f4f9fa2812ee67b430b9b276c60f8c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4d:62:07:41:0a:39:a8:a4:a3:a3:bd:e4:1a:
                    b7:11:74:4c:6b:08:0a:50:5d:30:cb:ed:7e:65:fb:
                    17:1a:b9:e3:75:16:14:55:e4:9e:e5:42:37:d4:71:
                    80:d5:3f:73:a8:96:ed:45:1f:90:c2:65:ae:07:0d:
                    de:ca:47:b7:23:80:4d:dc:c5:f6:02:74:22:7a:f1:
                    de:f5:99:63:03:89:5d:14:1d:11:6e:90:bb:76:d1:
                    d7:c5:f1:43:5b:37:f5:18:53:2e:f1:87:66:6f:0d:
                    81:c9:1e:66:ee:a4:ea:6a:fc:82:f1:e1:fa:24:c7:
                    31:14:c4:24:6f:87:25:25:0e:d4:38:6d:ca:48:27:
                    cc:b5:c2:97:f0:29:d5:11:38:f8:a0:0e:15:e1:8e:
                    ff:66:4e:c3:bb:b9:15:67:38:3a:23:ef:96:b5:ec:
                    ff:ba:1b:5e:01:67:38:47:4b:ff:04:0e:57:99:27:
                    7b:c2:9e:d0:c8:99:80:db:44:61:be:bf:57:d9:75:
                    f6:ad:1d:e2:c9:6d:0b:09:8f:9a:5f:10:5d:be:a8:
                    43:61:11:96:0a:04:1b:12:93:e9:bc:6b:ff:74:f8:
                    c8:c4:ae:76:92:c9:1a:bd:8e:bb:51:97:70:ff:9a:
                    53:15:36:35:71:fa:1b:7c:2c:13:8b:d6:a7:0a:07:
                    4b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F9:87:E5:F4:F9:FA:28:12:EE:67:B4:30:B9:B2:76:C6:0F:8C:3C
            X509v3 Authority Key Identifier:
                keyid:8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:09:be:d5:5f:fc:b0:a6:cc:76:fc:4f:60:a3:f0:69:8c:11:
         69:48:2b:89:fd:6d:ca:96:8b:a1:7e:e2:ab:ad:ee:46:0f:bf:
         a8:91:78:c0:a8:41:62:0e:a5:29:ac:b0:45:ad:2c:1e:cf:89:
         3c:19:52:5e:00:b5:3d:62:de:5f:09:24:6c:92:71:8a:02:cf:
         be:ad:83:af:4c:e4:53:b4:19:c3:4b:00:63:b6:1b:7d:80:3a:
         3b:38:01:5e:ba:46:8c:a8:18:23:cb:ed:92:e9:d5:47:88:ac:
         b5:0f:ac:77:17:61:0c:f4:e7:bd:24:92:92:a4:ce:23:ae:38:
         05:da:a6:e8:7b:52:bc:79:da:5d:f9:e9:44:0a:93:b3:a0:76:
         35:eb:f9:c1:ab:b0:64:48:28:2e:7c:6d:c4:3a:3d:4d:5b:c5:
         34:a4:86:54:a5:4f:97:58:8c:4f:2e:cf:f5:6f:8d:70:c8:69:
         39:4e:f3:27:0e:e2:a3:d1:0e:ac:7f:f2:04:60:2b:bd:2e:bb:
         d3:49:ac:a6:dc:57:a9:88:0c:0e:b4:c6:03:93:c7:a0:99:41:
         86:98:1f:5f:f9:22:14:06:71:2d:ee:89:51:5d:a5:18:e3:4d:
         a6:a7:85:5d:88:a8:67:6e:a4:d8:ba:9a:75:c4:f1:37:44:8e:
         ed:fe:e7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----