Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
File:                     m8c4G4L5davxnX1QGo2QvNxDnwY.mft (raw, json)
Hash identifier:          1nSUWoQ+vUI7IBzBk8rTBXXjathzLYdVygWbrOgKsVs=
Subject key identifier:   0C:A3:86:08:62:80:38:E7:30:FC:28:7D:44:FD:7D:C4:EB:DF:A2:8D
Authority key identifier: 9B:C7:38:1B:82:F9:75:AB:F1:9D:7D:50:1A:8D:90:BC:DC:43:9F:06
Certificate issuer:       /CN=9bc7381b82f975abf19d7d501a8d90bcdc439f06
Certificate serial:       01962ECF69A1755658DF163C41D05D29660B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
Manifest number:          084A
Signing time:             Sun 13 Apr 2025 11:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:07 +0000
Files and hashes:         1: 4AyeZ6UgoSX9es2BbU_DizGhUdY.roa (hash: VWKfnEijREHtHZ2eztHBUGUXBqi65LO9HiloDpo6nX4=)
                          2: m8c4G4L5davxnX1QGo2QvNxDnwY.crl (hash: VxgWN+Ur7Gdrtful6ncgxHEsXTva6LntWAzUgyD2Hw4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:69:a1:75:56:58:df:16:3c:41:d0:5d:29:66:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc7381b82f975abf19d7d501a8d90bcdc439f06
        Validity
            Not Before: Apr 13 11:01:07 2025 GMT
            Not After : Apr 14 11:01:07 2025 GMT
        Subject: CN=0ca38608628038e730fc287d44fd7dc4ebdfa28d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:23:93:31:b1:82:4f:2a:13:b2:6d:1c:b6:07:
                    e9:f7:de:b9:cd:a9:b1:a6:48:8a:80:83:c8:e7:21:
                    06:16:7b:9e:f3:c3:59:1d:d5:37:e1:62:70:1c:d0:
                    db:7f:06:c0:1e:cd:92:9f:cc:42:b4:ed:60:1a:a3:
                    5e:65:dd:2f:91:7f:77:9f:c5:4b:68:49:45:2f:44:
                    04:b6:fe:30:30:ab:e0:e8:0f:98:62:42:d6:25:57:
                    96:c8:45:28:5f:23:7d:11:2c:39:0e:43:b2:2e:bd:
                    40:34:01:aa:6a:3c:3b:c2:a4:15:98:fb:9e:0d:ca:
                    16:3a:1c:23:a1:53:24:ad:d6:b3:a7:19:e4:41:25:
                    30:80:f8:44:70:e7:4c:88:dc:69:d9:4c:a4:de:72:
                    3f:85:07:c4:61:36:14:0c:22:78:26:dc:b5:e3:2b:
                    0b:f2:03:d3:8d:ab:4d:86:02:02:e2:3a:4d:e2:0a:
                    13:34:dc:71:11:c8:77:30:13:75:4e:e3:e5:f1:d8:
                    db:70:76:ec:4f:41:73:d2:54:bc:d0:11:67:eb:f5:
                    79:ce:47:f5:d6:d9:e6:5b:14:bd:71:01:3a:df:3f:
                    f7:16:49:48:35:0d:79:86:2b:83:0a:31:dc:61:b9:
                    f2:b8:2e:c5:46:4d:b4:1e:6f:3f:b3:ff:43:a1:0d:
                    0b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A3:86:08:62:80:38:E7:30:FC:28:7D:44:FD:7D:C4:EB:DF:A2:8D
            X509v3 Authority Key Identifier:
                keyid:9B:C7:38:1B:82:F9:75:AB:F1:9D:7D:50:1A:8D:90:BC:DC:43:9F:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:07:8a:aa:c2:b7:2f:b5:c5:64:35:05:e1:d8:fa:70:fd:de:
         55:6b:bb:e4:96:0d:2a:7d:a1:f3:9e:50:21:72:df:fd:96:40:
         c6:c6:91:b6:2a:07:28:31:2e:46:0d:df:18:dc:da:c4:ae:9d:
         35:06:d0:f7:6f:8c:d5:4a:7a:70:f5:44:5e:df:7b:4f:35:4b:
         ed:e9:5c:5b:df:1b:57:2c:cc:03:02:5c:42:f9:fd:c1:57:b6:
         e6:1f:af:31:8b:83:16:08:e7:7b:c7:ab:8b:87:fb:07:2a:ba:
         d1:0b:c7:29:33:03:91:9c:63:f1:3d:69:c2:2b:3f:53:09:c7:
         c9:9f:e2:f0:13:44:fc:49:8f:b5:db:3f:0c:3f:2d:7b:b2:3e:
         69:1b:c5:96:0c:04:98:a6:24:34:94:ef:47:7b:65:91:01:23:
         30:d4:7f:13:c0:2d:4b:4f:42:41:a5:09:48:a6:59:b4:cd:11:
         00:61:22:d4:78:03:32:04:89:50:90:e1:d8:ee:7a:fb:14:7c:
         d4:2e:3a:6a:de:22:aa:94:11:33:9c:cc:87:d4:9d:ae:d2:1c:
         fb:cf:01:58:d8:07:9a:7d:95:8b:8e:4b:d8:fc:a2:bf:56:98:
         02:f5:87:de:1d:48:9b:bd:84:86:7b:09:fe:8f:cb:2c:40:67:
         b6:4d:2e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----