Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
File:                     jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft (raw, json)
Hash identifier:          q3+UgTF8Glr/s9+RH0BZ2SxxkEWh7FWt05PZmlTpPCM=
Subject key identifier:   FC:25:5E:FE:49:BA:A8:78:52:D7:D6:13:BE:A4:B4:5F:DD:56:6D:27
Authority key identifier: 8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
Certificate issuer:       /CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Certificate serial:       01962F067554ECBA3F6A9FDF314B1AA73D32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:14 +0000
Files and hashes:         1: 7jEmnnvVVJelmr8qrjn50rWFOcw.roa (hash: EchIPXfoij0iDBazd31BWfFW6DqbRboeZNJcaicEn4E=)
                          2: aRZdBae0vWh1J6sn44sYIdyVlG8.roa (hash: w9fqOKBIoaM9G2/C9dOdVNyy6b2w4OHx2wQuYWhSANs=)
                          3: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl (hash: 609lmSRA3vZpBU50z1+eGEHKIDr+I+o0ri3d9jCa/n8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:75:54:ec:ba:3f:6a:9f:df:31:4b:1a:a7:3d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
        Validity
            Not Before: Apr 13 12:01:14 2025 GMT
            Not After : Apr 14 12:01:14 2025 GMT
        Subject: CN=fc255efe49baa87852d7d613bea4b45fdd566d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3e:bc:1f:a8:b8:fd:cc:9e:dc:25:0d:53:35:
                    0e:12:d8:27:c2:d0:0e:33:46:7c:d1:79:a1:59:52:
                    a0:1f:46:19:1b:8f:06:fa:44:60:56:95:45:ae:ee:
                    51:b7:5b:e6:b3:8a:ed:4f:a0:34:69:14:12:fe:92:
                    5a:79:09:1c:2a:a4:1f:cf:9e:01:49:1e:39:b3:54:
                    5c:d9:87:12:5e:1a:27:7f:1a:93:07:0d:89:9e:2d:
                    92:e6:db:22:c7:ef:c8:f6:34:6d:b4:11:c3:cb:c8:
                    95:be:1a:cb:3d:7f:b9:1f:0a:ca:cd:34:ff:b8:f4:
                    99:c9:e1:fe:6b:ad:da:dc:12:0a:80:ad:fd:0a:49:
                    77:32:8b:9b:38:3b:1e:5a:76:25:e1:43:28:ca:54:
                    64:58:42:af:77:41:92:4d:04:67:57:78:cc:08:06:
                    7d:33:b1:db:52:b7:0d:dd:48:be:21:c5:63:83:98:
                    a5:f2:a1:b2:48:4f:20:e3:eb:fa:61:7d:94:01:46:
                    40:91:2f:b1:2c:40:38:45:cb:1b:ce:85:d6:02:37:
                    bd:c4:51:da:ca:ac:a0:e7:05:88:2b:19:0c:fa:f8:
                    9b:b3:ab:3e:35:13:28:86:0d:3d:ac:22:9c:0f:47:
                    a6:5e:25:6b:ba:2e:aa:cb:94:c3:98:04:fe:fd:af:
                    2f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:25:5E:FE:49:BA:A8:78:52:D7:D6:13:BE:A4:B4:5F:DD:56:6D:27
            X509v3 Authority Key Identifier:
                keyid:8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:38:ab:a8:b4:f7:92:48:c8:0a:62:54:d1:9e:6f:12:14:19:
         14:87:b3:1f:5a:fb:e7:30:8f:c6:7c:d2:98:52:e1:57:a4:7c:
         13:bb:b1:a2:2b:a1:bf:09:80:5e:ff:76:57:4c:4e:55:8f:b6:
         e8:98:75:1c:27:77:5b:0a:e0:6d:b1:8d:f2:01:4a:cb:0f:69:
         fa:9d:65:32:f5:71:13:14:a2:be:1a:b3:2d:e5:de:79:40:bb:
         3c:18:54:ec:6b:44:5a:68:ab:7c:e8:25:ed:d9:d3:d5:af:44:
         8c:27:06:36:1d:66:ff:2b:4f:21:2c:6c:4c:52:a3:b2:2b:52:
         17:6f:b6:0f:b7:90:fc:04:fa:57:a2:04:ac:5a:44:2f:48:0c:
         af:4d:0d:77:37:41:70:31:1e:ad:9a:ef:39:da:7a:2c:0b:9a:
         d7:f2:02:c5:2d:c3:6d:ef:93:96:7a:b1:9d:01:95:20:d5:77:
         db:e4:09:b0:21:aa:3a:18:0b:cd:8e:2a:47:9a:9a:66:db:89:
         bf:17:a9:57:5b:ed:ec:9d:71:ce:67:3f:12:0b:b6:63:14:d3:
         4f:c0:82:d9:bc:1d:a2:63:6c:1a:62:86:90:73:d2:3e:ac:c1:
         c8:ee:d6:87:b4:58:ce:fa:d5:4c:22:6a:89:a5:43:05:cc:fd:
         4d:39:8a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----