Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
File:                     jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft (raw, json)
Hash identifier:          R94G1xKzdwafEUEWud+/Y0MCAtfIFehBvtDRO6zKnXE=
Subject key identifier:   14:7C:69:FF:5D:30:9A:F7:B6:84:5D:AA:74:E5:69:5C:6A:1D:7B:68
Authority key identifier: 8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA
Certificate issuer:       /CN=8d843b57d0afcc112fe389668bf675d80d8223da
Certificate serial:       01962F749956F12A1CAC070F53DE8F0750B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
Manifest number:          060E
Signing time:             Sun 13 Apr 2025 14:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:32 +0000
Files and hashes:         1: iKKb1X29tTU2k_RZJyC1P6S0W1I.roa (hash: JYbd5SDgMPm4EIN7ny/Mr7yif1cItUNdM4vZHpLmqsU=)
                          2: jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl (hash: 6cgK8b6GoWk1AmmvJYCLKimVbdhw5qLRh2g+ncoJ4KA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:99:56:f1:2a:1c:ac:07:0f:53:de:8f:07:50:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d843b57d0afcc112fe389668bf675d80d8223da
        Validity
            Not Before: Apr 13 14:01:32 2025 GMT
            Not After : Apr 14 14:01:32 2025 GMT
        Subject: CN=147c69ff5d309af7b6845daa74e5695c6a1d7b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7e:17:20:d2:17:bd:f8:56:6c:fe:f8:4a:37:
                    2d:81:62:f9:8a:cd:4f:ec:90:4a:16:1d:14:e2:d0:
                    d0:02:49:5b:f8:55:71:d1:40:b7:a1:0b:69:cf:0b:
                    6a:19:fb:75:3f:bd:ef:fa:a2:95:09:25:40:f7:63:
                    30:cb:93:1d:d0:f3:90:1f:52:d1:9f:5e:66:9c:13:
                    25:b6:30:60:7e:e9:b8:75:47:7c:b3:6d:d5:35:75:
                    fb:c3:24:b1:e0:dc:ec:71:b2:5f:5e:98:da:1b:db:
                    b5:5d:3c:55:a7:93:bc:c7:35:0b:4f:af:f7:a3:98:
                    12:b5:a1:24:56:70:cb:92:3c:e5:a0:49:34:b4:75:
                    fe:e7:ff:af:4b:40:92:bc:bb:77:a5:29:28:4d:2f:
                    49:3e:d8:6f:91:1b:29:43:bd:9f:4a:50:2c:35:e1:
                    83:46:e5:ea:1c:c9:c0:d1:0f:81:66:fe:f9:d6:01:
                    cf:d9:cc:66:3b:17:22:ce:90:af:68:7a:b1:db:76:
                    5c:46:f9:f5:c0:aa:18:3e:80:96:f6:38:55:40:a0:
                    3f:65:4c:3f:36:bf:e5:d7:c3:07:6b:df:ac:fa:fa:
                    ca:e4:77:a4:f8:70:86:de:30:88:19:40:a8:b0:16:
                    44:14:5f:70:7a:fb:89:db:16:f4:a8:29:ac:ec:46:
                    16:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7C:69:FF:5D:30:9A:F7:B6:84:5D:AA:74:E5:69:5C:6A:1D:7B:68
            X509v3 Authority Key Identifier:
                keyid:8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:52:0d:f2:fa:24:d9:25:09:b4:ad:63:11:17:4b:b7:13:7a:
         81:93:72:98:88:2f:be:e4:bc:50:9f:88:91:f0:65:bd:36:f5:
         35:53:03:a2:59:8d:cd:bf:47:a2:0b:bb:c3:88:68:5b:6a:27:
         80:71:1f:94:81:07:68:0c:11:67:5d:f9:b0:89:e3:8e:73:4a:
         63:cc:44:ff:28:28:25:a1:45:ef:8b:8e:c4:d3:b3:26:07:61:
         d3:10:05:39:fb:69:ac:24:79:76:c3:da:e9:7f:14:be:59:1a:
         52:c2:cd:1c:1d:47:d9:f7:93:e8:ed:c7:a9:7e:d7:24:97:1c:
         e4:aa:97:bc:36:d4:9a:3c:23:c1:43:22:4a:f1:9b:c6:86:35:
         cf:b5:81:b2:ee:74:64:f3:7d:38:a0:18:9b:f1:1d:f0:86:33:
         24:ff:e8:57:37:e2:b3:2d:cf:e7:c9:03:f3:20:3f:68:1c:82:
         11:7b:e2:2b:c7:ea:9a:b7:8d:57:5d:4a:bc:53:8d:b5:fc:02:
         f4:19:89:0e:26:56:be:8e:0a:95:c4:87:96:e5:b7:61:7d:43:
         2d:e3:bc:ab:6f:3e:40:ab:f1:64:e8:3d:40:42:54:33:b8:8d:
         69:bb:74:ef:ac:10:8e:73:d5:b4:ad:4a:05:a3:a8:6a:91:f5:
         19:d4:fd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----