Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
File:                     jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json)
Hash identifier:          QropjblxxG3dSTSrScECSj6mZ/6Dw81cHFmzvGivwHk=
Subject key identifier:   2C:06:20:36:5E:07:E0:CB:A1:3C:BB:EC:8B:D3:39:59:3A:5C:80:0E
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Certificate issuer:       /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial:       01962F745D31E75CD15FAD4B2BA8BB234A91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:17 +0000
Files and hashes:         1: 2yAjk7p-dI9kSCjYCsJZz8pos8c.roa (hash: fOiEsiSjcE44S/scd+A8XElk8QWI1IgEkT2nPRQh9k0=)
                          2: WgQVJKeVLT_kgntaKcqG82tQ5Ac.roa (hash: 51Ibz0/tlPs1DjPAcM3P0vri4IWZhMdelX47aEpOyXk=)
                          3: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: sAcce2TmNj3o6/rkOUyzsW22gfy5FV+OQgOqnpPdRp8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5d:31:e7:5c:d1:5f:ad:4b:2b:a8:bb:23:4a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
        Validity
            Not Before: Apr 13 14:01:17 2025 GMT
            Not After : Apr 14 14:01:17 2025 GMT
        Subject: CN=2c0620365e07e0cba13cbbec8bd339593a5c800e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6b:fb:37:2b:c1:30:9a:fd:f6:1f:c4:f1:b7:
                    c9:d3:14:16:84:e1:5a:ad:f8:5f:16:09:7d:63:46:
                    37:73:0a:a3:f8:09:51:ff:fe:dc:0d:9b:d9:f7:31:
                    cf:41:8f:d8:24:12:a4:88:8a:1e:39:ec:b4:86:ab:
                    7a:b4:91:97:07:68:46:43:9e:8b:3d:23:6b:0f:3b:
                    a8:c0:61:bd:29:bd:cb:8a:78:96:22:21:02:aa:10:
                    e5:ca:10:db:04:39:41:b0:d4:a1:87:7e:e3:b5:44:
                    55:03:fa:1d:ab:14:c6:bd:eb:f6:0c:91:88:5a:58:
                    06:db:24:7c:af:f5:7d:46:5e:25:6f:7d:b8:36:73:
                    4d:82:9a:1e:58:36:0e:fc:35:1c:df:1b:a8:ca:d4:
                    79:fd:8b:43:8f:00:35:15:3f:18:51:8a:23:b4:09:
                    6f:6e:2d:1f:d7:65:7b:2a:dd:5a:59:a0:17:ab:96:
                    69:a5:3b:f9:ef:e2:9b:c7:c7:81:74:7e:01:c7:5e:
                    7f:00:3b:11:f0:6c:fd:1f:72:92:ee:cb:df:62:ad:
                    be:57:26:a9:8f:b5:a1:b6:3a:9a:cc:af:a8:09:c8:
                    0c:6f:30:12:f7:de:d9:52:ec:ae:13:0c:ce:ac:d6:
                    73:86:37:c0:db:6b:11:22:3f:60:27:5d:3a:3c:db:
                    73:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:06:20:36:5E:07:E0:CB:A1:3C:BB:EC:8B:D3:39:59:3A:5C:80:0E
            X509v3 Authority Key Identifier:
                keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f6:e8:f3:0c:0c:00:da:aa:94:e2:b7:4d:e2:0e:ad:26:55:2a:
         c8:8f:7f:21:0d:41:59:e0:d7:48:48:bb:51:62:64:2a:76:31:
         d8:d3:4b:58:a1:4b:90:0f:81:4b:6c:05:1e:14:5e:7b:c1:12:
         3d:57:ec:cb:fb:41:43:68:7c:7e:10:19:fa:47:90:e0:dd:fa:
         46:e0:f1:38:64:1a:13:66:2c:7d:ea:0d:a9:55:da:13:ae:97:
         3a:ff:7c:83:9a:fd:20:5d:d4:31:e1:71:c3:ba:f4:41:34:2b:
         a3:17:ce:11:69:43:97:a9:2e:56:c7:45:9e:1c:e6:33:b6:5e:
         01:5e:a8:c1:44:c7:8f:44:92:88:53:a4:5e:26:03:bf:57:20:
         9d:26:1b:fc:8f:6d:d6:dd:c4:7e:27:ae:c3:98:dd:b2:d2:b4:
         97:a8:f4:67:40:81:96:14:fe:8c:11:78:3d:77:db:a3:29:b9:
         eb:64:ea:d4:72:14:44:fb:a5:b0:e4:ea:9d:a6:bf:c6:38:5d:
         2e:5f:7c:ba:15:e2:34:89:2b:ca:fa:06:7a:ce:53:65:b3:69:
         b2:af:f9:23:1a:b9:0e:77:9f:eb:60:ff:25:73:03:ae:b7:32:
         15:bc:77:00:96:76:aa:c1:19:85:f8:0a:8c:88:06:74:47:91:
         14:8d:5b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----