Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
File:                     2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json)
Hash identifier:          AtJBKBLU454Bif0PYD1+2GGwa4Uxot7jrrLvJKlakr4=
Subject key identifier:   77:A6:D2:25:5C:8C:62:CC:69:52:D9:E0:8F:25:E3:55:73:73:AE:E9
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Certificate issuer:       /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial:       01962FAB4F981FB76D3E0DFDAE9908B47EC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
Manifest number:          07C6
Signing time:             Sun 13 Apr 2025 15:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:18 +0000
Files and hashes:         1: 0uOd6pkbVcZjPk-Kbr-5tFBqZCU.roa (hash: xqBleUY4Z9zq7UyMqOMWy7ryf9KoBj1PjfY1uJWx7sk=)
                          2: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: 2BLt4ocg+5YYZXKN1x07iqbwkdozJOB6S8CLk1S13Ec=)
                          3: 6fo87MmGE1UjtxclnRa9qrk6UGM.roa (hash: pci8N0GbpCHAxgqqnFxgDiIt1lIp8+ssI2b4Yf5Rg+E=)
                          4: KRSjlLP_LGaVl43CnNfHf_qcv0Y.roa (hash: T6wpRaMQShfnxACSwpJMZJO4nNVJDFOyvCxB/2y9lh0=)
                          5: KvD4Pa3lfXKcjfgVEMsuUlxyqpQ.roa (hash: BVkdPRLTcswZV+vMxoNSYxQYWyflcpgaedXCE6/uDRk=)
                          6: RR9CZyYi6n9Q08SG7w4DsIQSJqE.roa (hash: N5pZ5HpdV+sU2XpEoXlts+Mklu638CuRARvFwE/FmiI=)
                          7: Zqbkpwb9FEC8JI8l2BSIQZw2gNU.roa (hash: llK9gBnY2tMLV3DDPcLyEXjo4pojFi3+MnQmjAC9rBg=)
                          8: _E1cwjzeFiFIH7VeHBgq1a_Cpxw.roa (hash: aAipIQ263NI9Nm3A47DXuzEpDsCQg6yANknUA1m80WY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4f:98:1f:b7:6d:3e:0d:fd:ae:99:08:b4:7e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
        Validity
            Not Before: Apr 13 15:01:18 2025 GMT
            Not After : Apr 14 15:01:18 2025 GMT
        Subject: CN=77a6d2255c8c62cc6952d9e08f25e3557373aee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:40:94:c0:b3:da:cd:18:2a:b0:45:84:a0:ec:
                    dc:d0:ed:ee:42:45:39:03:7e:ba:13:01:90:90:c0:
                    d0:18:14:a2:f7:36:2a:66:a6:94:dc:b2:ba:ce:03:
                    38:43:ad:ab:66:6f:13:3f:d8:a3:e5:5c:6b:ef:f8:
                    1f:bb:7c:ca:3b:37:c5:0a:04:45:bc:67:54:dc:1d:
                    f5:25:14:77:b3:98:85:bd:24:b0:41:81:88:22:57:
                    b1:de:30:5b:ec:e3:20:18:29:b6:fb:25:12:36:97:
                    93:8b:a8:d2:37:b0:5c:81:03:6e:74:63:ec:86:3d:
                    f5:09:87:10:f1:84:68:f1:a5:14:06:aa:1e:d3:14:
                    b9:18:2c:78:da:c0:f2:15:3e:77:e9:65:83:70:8a:
                    78:de:b7:9f:a6:74:e1:82:0e:94:36:43:89:e5:dd:
                    31:6b:18:ef:4c:c2:0f:b6:ab:e0:9f:ad:bf:35:3c:
                    8e:67:bd:d0:9a:8d:c0:f9:50:97:31:6a:80:88:25:
                    47:8a:db:2b:a4:08:77:25:75:71:c3:bc:67:82:a1:
                    4b:a3:ae:bc:4c:4a:65:88:c6:41:7f:ef:9a:11:33:
                    8d:fe:93:97:e0:61:c2:b6:35:25:fe:78:9c:10:a7:
                    18:19:69:3e:ce:d0:f7:3f:32:60:3e:0f:af:41:12:
                    2c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A6:D2:25:5C:8C:62:CC:69:52:D9:E0:8F:25:E3:55:73:73:AE:E9
            X509v3 Authority Key Identifier:
                keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:7b:fc:3d:d1:0e:ab:2c:6e:6d:52:89:2f:de:3f:ff:3a:d7:
         16:3b:25:73:f2:d3:a4:6f:c6:d5:8d:81:74:2c:bd:f7:05:58:
         e1:a2:ef:79:e5:de:27:f7:a1:83:06:b2:b8:c9:ad:b0:06:9d:
         44:8f:13:7c:77:9a:d3:ec:f8:69:80:ea:57:8d:f8:ae:f5:d4:
         3b:f0:da:57:a6:df:d1:ae:c8:72:1a:88:39:86:a7:c2:80:b4:
         d1:ea:ef:5b:ff:bd:b2:1c:7e:00:08:2a:52:01:a5:1b:c1:d8:
         74:9c:67:1b:d4:6e:2a:ee:e7:bf:a4:d0:15:4a:76:15:b4:97:
         ca:57:e1:1d:df:22:59:4d:27:55:3c:c8:34:c9:cd:59:bd:0b:
         b4:48:1f:60:60:a9:bd:7b:58:3c:53:2e:82:b5:b3:cb:e8:4c:
         c4:29:bf:fd:d6:e2:a7:96:66:93:d3:59:22:3e:d4:6e:a5:70:
         d3:48:7d:ba:39:a3:bd:27:95:e4:d3:75:65:52:5e:a7:b8:4a:
         b0:4a:e7:1e:c7:a1:e2:91:c9:de:c2:f9:0d:cc:9e:23:23:85:
         3e:b3:e1:e3:3d:d1:c9:8e:46:14:28:82:c6:c8:7e:5a:71:d3:
         71:ff:dc:20:02:02:4a:73:59:6f:47:ab:2e:95:dd:32:54:76:
         32:c9:77:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----