Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
File:                     o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft (raw, json)
Hash identifier:          3/PUTSKDQsJYJGRPBQcjbIfM+Krg3Lg/4S2h/UEXMSk=
Subject key identifier:   6C:8A:2C:55:C3:5F:73:BF:0C:FA:E9:EB:B0:F2:C4:52:E9:CB:5E:FE
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Certificate issuer:       /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial:       01962F06EC195BCC49E52E3ADBE3C1E6451F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
Manifest number:          14FA
Signing time:             Sun 13 Apr 2025 12:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:44 +0000
Files and hashes:         1: VuINTwukw5gk-GpLk8S7BysJ2QQ.roa (hash: /kBRgqE3JbZP3MZS0KUDmcjo+++iqmd1/lk+a59O9c4=)
                          2: Vz4KDvni-pIG9pERT0AYceBbHa0.roa (hash: pYtbdwqDoFmUa9j2KOPzRaeu3zPU5WrvlE2/yiAXzDw=)
                          3: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl (hash: tt82FshqFyUbGO9El1KuPGcbP77s9bHY/7MRsqI02UY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ec:19:5b:cc:49:e5:2e:3a:db:e3:c1:e6:45:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
        Validity
            Not Before: Apr 13 12:01:44 2025 GMT
            Not After : Apr 14 12:01:44 2025 GMT
        Subject: CN=6c8a2c55c35f73bf0cfae9ebb0f2c452e9cb5efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:22:f3:76:a5:eb:58:00:39:11:bd:6b:71:95:
                    3f:2c:48:c3:fc:27:71:b2:e9:40:35:8a:f1:43:c4:
                    f1:60:e0:16:0a:60:37:02:13:5b:4e:4c:55:ba:fa:
                    fa:f6:99:0e:11:8a:22:a0:fd:4b:47:0e:43:1f:1e:
                    91:60:e0:e7:f5:fd:77:71:44:61:ad:3c:d8:8e:89:
                    61:f9:aa:34:86:50:27:74:07:eb:7e:c9:02:91:0e:
                    5d:84:72:04:f2:ab:ce:fa:eb:ea:bf:0c:ae:53:12:
                    4c:6b:9b:42:c0:7b:80:6c:f5:3b:c9:76:25:0d:85:
                    6d:f4:41:ed:6a:58:82:f2:63:b1:3e:d4:2c:c0:76:
                    01:e0:41:c1:11:10:d2:c0:11:eb:68:56:b8:a5:b6:
                    d2:3d:70:06:87:90:78:95:4a:1e:85:a6:29:9d:39:
                    ff:c9:d2:7a:e5:dd:e9:0e:76:6d:07:54:aa:0f:2d:
                    10:19:b3:df:1f:5a:7c:c8:01:40:a8:dd:b4:f3:40:
                    f2:b4:45:7f:e7:cf:db:bc:96:7c:21:2f:05:9a:46:
                    2a:c0:f5:ee:e0:e4:f3:97:a4:13:db:d2:b2:53:67:
                    5c:b2:69:50:70:25:df:b9:a7:70:5c:07:52:14:a1:
                    20:e5:b5:1b:3e:55:53:2a:47:20:97:d3:65:f3:b0:
                    b0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8A:2C:55:C3:5F:73:BF:0C:FA:E9:EB:B0:F2:C4:52:E9:CB:5E:FE
            X509v3 Authority Key Identifier:
                keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:8b:00:8e:79:ce:d4:ed:29:13:60:c8:04:76:a8:4b:98:5f:
         b8:6e:b8:37:4b:b5:bb:de:15:45:cd:97:67:6c:c4:24:77:de:
         01:8a:ce:3d:ea:a8:7d:08:f7:ec:0e:95:ac:41:aa:f7:9d:31:
         ec:cd:04:4f:4d:12:54:cd:ff:36:16:e4:1a:52:52:89:85:5d:
         64:ce:b5:28:43:b6:28:27:cc:30:c0:3b:bc:a0:c6:61:0c:df:
         a8:23:72:d8:c6:14:11:0e:bf:48:a9:d7:4a:a2:12:79:c8:1a:
         a4:6b:63:e8:7e:b4:90:96:90:50:ad:6c:09:7b:c1:cb:20:38:
         6c:fe:e7:5b:af:8e:91:85:81:7f:42:24:74:81:82:09:8b:ee:
         85:98:93:bd:81:e5:52:43:69:27:6b:9e:38:21:4a:d5:34:7b:
         bc:1e:76:12:6a:e3:49:00:e6:8a:61:b6:a8:8c:3e:32:f0:1d:
         d1:c5:0a:52:a0:a7:6c:e7:1a:ec:6e:37:aa:c3:ce:5a:9f:96:
         37:d4:3f:8b:61:79:d7:40:5f:04:cd:5d:45:c8:2a:aa:ad:15:
         e7:d8:56:19:04:88:17:58:13:50:7c:81:7b:b9:52:c0:be:6a:
         7d:33:52:7b:93:83:10:41:1c:e3:4f:a5:36:09:f1:27:4c:4f:
         b4:b6:15:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----