Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
File:                     jTDnckXCFacL5O9X0DvR2NTbWJg.mft (raw, json)
Hash identifier:          KB7Zd85cQWbNbvYmd2BG9zKVmHTIk0enGy0op91BC5o=
Subject key identifier:   B0:01:6C:D2:96:97:14:6A:07:01:5D:2F:FB:2D:15:40:6C:81:CB:DB
Authority key identifier: 8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
Certificate issuer:       /CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Certificate serial:       01962F747710D33ED93CBBAB112D5E8D999C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
Manifest number:          0A
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: eLQvZXPU_77wrIDfdDfIdsIHFlE.roa (hash: Dn8Gnar3CSZGrhitajHivb75okRn8yMh58M9uLTkwsk=)
                          2: jTDnckXCFacL5O9X0DvR2NTbWJg.crl (hash: tT2GLdhLIleF8C6y0hLA4KeK0V8JZt24i+LOa5pvtb4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:77:10:d3:3e:d9:3c:bb:ab:11:2d:5e:8d:99:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=b0016cd29697146a07015d2ffb2d15406c81cbdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2c:d6:e2:c4:06:d7:74:74:0d:e6:e5:82:62:
                    4d:eb:5a:8d:08:d3:60:15:4e:3d:9e:39:6e:c4:6e:
                    4b:0b:b8:ce:77:0b:c5:7c:1b:ca:dd:35:91:d6:dc:
                    7e:c0:30:24:8c:ec:27:45:f9:c4:42:25:1e:34:dc:
                    92:82:fe:87:ab:46:7e:20:21:40:cc:a7:2c:3b:34:
                    c1:6f:6b:36:b8:9a:e4:53:a6:bb:7e:09:1b:96:ec:
                    98:96:70:3f:75:97:af:59:56:bb:29:c2:79:c0:bf:
                    a6:b3:9b:e7:59:19:d0:e8:e3:2d:d6:2a:45:3f:ab:
                    35:85:2b:7d:98:14:89:70:02:2e:a5:1e:db:d0:d9:
                    cc:55:99:eb:db:45:ca:79:94:35:c1:1e:07:8f:a4:
                    aa:ef:94:30:ac:f5:43:8d:8d:05:26:35:61:a9:39:
                    91:54:56:fd:e4:76:bc:02:7b:b9:70:12:53:ce:a7:
                    da:98:b3:23:1f:bf:08:56:20:5d:48:a9:f9:23:24:
                    52:b8:74:28:ce:66:79:3b:33:4c:f3:b9:75:27:32:
                    83:26:16:55:4a:a3:9d:f6:d0:da:8d:14:c4:93:09:
                    ef:72:be:65:ee:10:44:86:59:3b:ec:f5:57:fc:45:
                    08:e9:fb:7a:16:b3:bb:a3:9a:fb:88:c7:ea:00:c4:
                    ef:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:01:6C:D2:96:97:14:6A:07:01:5D:2F:FB:2D:15:40:6C:81:CB:DB
            X509v3 Authority Key Identifier:
                keyid:8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c5:5d:8c:6a:e4:73:ba:7a:d4:d3:97:9f:6b:fd:1f:28:81:
         b3:ab:6b:b9:a0:7b:5e:c0:f9:aa:d7:36:04:34:db:fd:b0:37:
         84:bc:30:83:f9:32:74:aa:99:3b:a7:f5:7a:82:0e:6d:33:68:
         b1:a1:64:30:16:79:e5:29:8e:db:50:bd:13:0d:8c:0f:82:60:
         51:b6:05:f5:a4:a3:86:21:ae:e7:c2:97:32:92:3a:f8:14:47:
         38:b4:f8:9a:2d:3e:b0:d0:8d:9a:d5:70:e3:6a:1c:3a:89:29:
         be:ed:83:07:9a:38:e8:68:2d:86:da:7d:33:09:2d:3a:88:63:
         8f:da:42:71:2c:42:b3:fc:d0:5b:25:1b:39:75:04:41:56:ba:
         2f:47:cc:21:69:0a:11:4b:30:b6:00:ec:9d:12:c7:16:00:b3:
         1d:95:7e:fe:5f:d8:83:4b:2d:5b:5e:ee:c1:6e:2f:71:73:46:
         b9:61:16:45:d7:53:6b:b1:e2:08:07:8a:38:8b:ca:ce:a4:f4:
         e9:00:37:d1:e5:24:3c:84:a6:69:20:bb:65:e4:02:4f:07:5f:
         fe:51:ff:94:dd:0f:09:ca:c3:9c:c3:f9:12:a3:1d:e1:9e:82:
         ce:79:55:78:a5:5e:d7:9a:21:32:20:e5:0f:ae:62:b7:24:f2:
         7e:cd:99:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----