Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft
File:                     j6c6fMHk0392QDaHfEKB2osAkH8.mft (raw, json)
Hash identifier:          5rtvbYa3oSGqKbRfwn/dXKOQSGzXXhb+m8W31IrXFhE=
Subject key identifier:   E8:E5:C2:0F:3E:D2:14:62:08:FD:97:AB:B1:99:D1:87:93:21:DA:CA
Authority key identifier: 8F:A7:3A:7C:C1:E4:D3:7F:76:40:36:87:7C:42:81:DA:8B:00:90:7F
Certificate issuer:       /CN=8fa73a7cc1e4d37f764036877c4281da8b00907f
Certificate serial:       01962F073259A0BBC7EEC49C9D9C019409EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft
Manifest number:          09CA
Signing time:             Sun 13 Apr 2025 12:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:02 +0000
Files and hashes:         1: j6c6fMHk0392QDaHfEKB2osAkH8.crl (hash: FnxRL+Ku5iOB6kDRcGmFsFEhIzoLFeihGviscNOcHXs=)
                          2: olor_tHkoN8k1oKb8ve7r7Hwc2c.roa (hash: tMtLnjRmuVNk2beOyn14AwFTbvwBpk2hW+VYjVtGIZc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:32:59:a0:bb:c7:ee:c4:9c:9d:9c:01:94:09:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fa73a7cc1e4d37f764036877c4281da8b00907f
        Validity
            Not Before: Apr 13 12:02:02 2025 GMT
            Not After : Apr 14 12:02:02 2025 GMT
        Subject: CN=e8e5c20f3ed2146208fd97abb199d1879321daca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c3:71:9c:40:ea:e5:aa:69:13:1d:76:55:17:
                    1a:ed:6c:0d:22:bf:e2:70:ce:73:95:53:16:f2:94:
                    ea:dc:17:32:81:39:5a:d6:46:4f:84:0e:d3:3a:47:
                    76:a9:24:26:ff:4a:11:ab:1b:c8:d0:74:9c:ed:3b:
                    6d:36:08:74:3f:f9:ae:23:c1:64:c4:d5:20:b3:4b:
                    a3:28:ab:ae:03:24:c7:89:82:f7:bb:1a:ec:ec:6f:
                    ae:dd:54:45:58:a1:24:e1:af:b5:6a:2f:63:dd:81:
                    0d:c8:3b:c1:88:f7:09:f3:c9:74:40:2e:03:07:9f:
                    8b:d0:8c:26:c9:db:78:54:c8:fd:db:69:12:3d:a3:
                    c3:dc:b2:e9:53:5d:26:95:c6:67:8a:b2:1c:b9:0f:
                    dc:5c:69:44:01:6d:21:f4:3f:40:f6:98:8d:81:a0:
                    d8:e6:71:1c:16:55:6f:f8:77:79:d2:bf:66:fd:cd:
                    86:94:17:c7:62:a1:e2:b1:7c:20:48:be:e1:1a:7f:
                    db:8c:af:f7:18:d2:e7:14:61:f3:fa:66:19:8b:eb:
                    1a:99:0e:de:5b:96:d8:89:0c:e3:22:f3:59:2f:82:
                    3b:25:4d:b2:3f:a7:5d:8d:f7:d3:49:9d:e3:25:f7:
                    58:e5:e0:2c:fe:62:98:40:67:b1:f6:ae:68:25:06:
                    fe:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E5:C2:0F:3E:D2:14:62:08:FD:97:AB:B1:99:D1:87:93:21:DA:CA
            X509v3 Authority Key Identifier:
                keyid:8F:A7:3A:7C:C1:E4:D3:7F:76:40:36:87:7C:42:81:DA:8B:00:90:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:86:08:ef:5a:0e:79:af:13:4d:40:4c:dc:95:94:0f:2f:2d:
         0e:af:57:c7:58:30:cb:66:6e:26:99:72:ef:4e:25:ac:2c:0b:
         dd:ca:ef:61:51:f3:dc:b0:db:fa:ae:cd:6f:da:e7:0f:8a:bf:
         74:e2:92:5e:77:d1:42:50:66:eb:99:c1:13:15:81:e4:1e:13:
         6c:99:ed:8a:7d:23:27:75:7e:c5:e1:55:59:00:30:0a:b4:78:
         9f:e0:6d:46:7d:26:be:c3:d9:a0:49:f8:56:02:70:89:31:23:
         28:d8:1b:90:2c:f2:5b:6a:9f:7a:55:c9:41:fd:97:68:5c:47:
         45:37:bf:4f:c9:ef:c5:6d:f9:e0:a1:b5:a4:a5:c8:c1:09:1a:
         dd:0a:af:7d:95:77:17:47:a1:ba:56:6e:6c:a4:ef:30:ad:84:
         ea:3c:a0:8a:6c:ef:3f:6c:0b:25:dd:3f:fa:02:ad:51:9e:6b:
         2e:a9:54:19:b2:59:d4:5e:1f:80:77:ee:74:15:d6:11:ef:e6:
         67:b8:e5:ae:57:69:32:23:64:9a:eb:75:7e:82:b2:85:ce:81:
         8e:05:74:5b:b0:23:7c:a1:e9:de:26:af:9c:09:1f:81:75:bc:
         95:f8:09:f3:73:d2:36:3e:35:14:88:5f:46:94:0a:f3:af:dd:
         2e:58:c9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----