Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
File:                     jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft (raw, json)
Hash identifier:          TdvysdMFL0cT/fThrIiX+K9bFM4kuBZtRN1kBtMdmAo=
Subject key identifier:   00:B4:38:EA:F0:5E:B9:3E:91:D3:C2:45:38:D8:4A:85:60:52:D7:17
Authority key identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
Certificate issuer:       /CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Certificate serial:       01962F3D86D909EBE19467C6397A9A729921
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 13:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:23 +0000
Files and hashes:         1: RqtwSOLfZXCtT6i-iXJPBXlS-Tw.roa (hash: x++OoIBpOVlhu2bDSyq/BzG7LV3g3RGN/EJ/KyFGWbM=)
                          2: XKepb_otZzL7k3ZMkl3G2IMgCSU.roa (hash: W9mkN91xRU3+fkW8j4EQwJJwcHraAc/r3I+DAJzdLtk=)
                          3: f_hutObJVKzz6DlV5Z0Llo7x9Mo.roa (hash: EtfvCVNkvIMaBjs3btihMYeczz7+WNuxXv7JAgL/tcs=)
                          4: iaU8sQHpBoTYxwRTPRlwZtUJd5I.roa (hash: IaAKm54QKxYLazRG6lIcABBh26piQgK4yLfNw8crUL0=)
                          5: jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl (hash: eMOdO5EFqKTsPfsgKy3As0BeiB88Sg6h/GCOPU45kcs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:86:d9:09:eb:e1:94:67:c6:39:7a:9a:72:99:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
        Validity
            Not Before: Apr 13 13:01:23 2025 GMT
            Not After : Apr 14 13:01:23 2025 GMT
        Subject: CN=00b438eaf05eb93e91d3c24538d84a856052d717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:30:b8:4b:95:94:d1:5f:51:95:b0:84:13:f9:
                    6b:25:2e:70:f9:de:ab:1a:88:a6:16:5a:e8:a0:5a:
                    fa:ca:c4:9b:b8:f9:27:c9:bc:66:9d:aa:c2:7e:56:
                    93:42:13:0d:6b:6f:a6:12:21:f8:03:d3:36:ca:b0:
                    50:c0:cc:6b:01:1d:09:ca:6b:31:c9:40:20:24:8d:
                    ee:56:bb:5a:8a:59:df:c9:d3:49:21:e7:fd:25:24:
                    b4:2c:85:cb:2e:be:42:8b:2f:fe:dc:1c:61:3e:f1:
                    35:b3:97:db:b9:d3:c2:25:c6:8e:a7:76:8f:67:e9:
                    19:d4:16:dc:41:84:b4:2c:a0:86:b6:ea:9c:91:41:
                    64:55:ad:ff:56:47:4e:28:6a:48:96:25:0d:27:f1:
                    c0:6b:5f:2a:17:b0:4f:da:f0:b2:ce:4b:68:9f:1a:
                    e2:2a:2d:1d:f1:f0:db:93:7f:e0:65:f2:60:5f:25:
                    6e:14:2d:4d:f4:da:2e:2c:3e:0c:47:4c:eb:c2:de:
                    65:bc:5c:02:4d:b7:4c:88:e7:95:74:e3:09:7c:42:
                    7c:79:31:92:ab:6f:27:36:67:c6:6b:3f:52:d4:01:
                    0e:4f:91:ce:fc:0d:c3:28:67:4e:f6:d7:f8:aa:c6:
                    6d:5e:74:11:67:0d:fc:35:23:c9:e4:ff:62:02:85:
                    a1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B4:38:EA:F0:5E:B9:3E:91:D3:C2:45:38:D8:4A:85:60:52:D7:17
            X509v3 Authority Key Identifier:
                keyid:8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:eb:18:ac:37:98:11:63:6a:68:72:05:00:6f:47:b9:b0:ba:
         32:67:90:af:7d:89:3e:8c:c1:41:9d:7d:a2:2c:ea:6c:a9:6b:
         fd:f4:56:90:92:2c:c4:67:79:62:e7:a3:0e:90:a8:7b:fa:57:
         04:59:78:a3:6c:b2:4e:f8:91:5e:06:eb:19:f6:50:f6:dd:5d:
         41:2a:f0:27:6e:81:18:93:14:a7:fa:74:71:37:0b:fb:eb:a7:
         7a:72:75:49:aa:0a:da:dd:db:81:e6:b0:08:49:41:73:be:c9:
         86:df:c8:e6:71:d4:b1:f1:7c:02:6f:8d:04:64:94:46:54:0a:
         cd:b4:bd:2c:51:4f:54:d6:85:74:f5:0f:ab:47:c3:94:c3:d7:
         c5:52:bb:29:37:45:be:bc:c0:fc:5e:92:c4:3f:ef:10:c9:ab:
         35:06:0e:74:21:cf:b5:b8:e5:63:cb:be:e7:8b:73:2c:64:73:
         24:9d:16:f1:aa:b4:69:9c:c1:81:09:9f:e1:a9:31:19:1d:de:
         72:70:36:06:81:a0:35:7e:81:d7:d3:44:cd:73:92:a2:14:35:
         fb:18:72:a2:1e:8d:75:34:e6:31:f3:7c:d6:52:ba:86:b5:ad:
         34:1b:ae:1c:62:73:17:1c:c2:68:49:8d:9e:fe:14:88:4a:0c:
         d6:30:50:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----