Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
File:                     jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft (raw, json)
Hash identifier:          p7JKW7Q1PR9UM9jnQbDBoJ7pA+bxUeVXsT2MPYhjtUM=
Subject key identifier:   C3:51:A6:DB:5B:35:73:1F:86:FC:11:3D:6F:F0:18:F7:65:AF:50:C4
Authority key identifier: 8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
Certificate issuer:       /CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Certificate serial:       01962F74935D15C6B3353B314333FBD6DB5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
Manifest number:          14F9
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: J6Kzm9-BHVrTMueLm85flmGpBuc.roa (hash: 9/2ACokdd6WeH0EpVJ7k0Vq4xCNM0q7ZPA1hEeNbMHI=)
                          2: bijRliPCnbFotmMqItnp-5jqXj4.roa (hash: uM/kaOsx/CgALc1h4UDZdPe4HF4oyeAzB65mv4DJvkA=)
                          3: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl (hash: 2gPG/RgNojsaKAveo9soAi0DvdB996e4aqBPeshcgq8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:93:5d:15:c6:b3:35:3b:31:43:33:fb:d6:db:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=c351a6db5b35731f86fc113d6ff018f765af50c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f6:03:5a:83:d8:db:b5:9f:5c:07:c0:b4:32:
                    bb:f3:55:d6:2a:95:01:01:3b:a4:8a:96:18:95:9d:
                    fb:76:26:0a:aa:0b:94:b8:5d:da:37:40:ac:3f:9b:
                    cc:6c:2c:55:81:67:a3:7a:e6:3b:92:5d:c5:76:1f:
                    04:10:58:2c:c2:c6:78:c3:5e:34:b2:97:ad:de:0d:
                    7b:55:35:d4:2a:20:df:65:e6:af:8d:3f:58:30:f4:
                    b5:be:d9:6d:b3:ba:0b:83:2d:2b:5b:43:09:9c:73:
                    10:03:05:e3:63:0a:b7:9d:ae:25:47:ba:eb:bd:4b:
                    70:c4:ce:16:5e:db:ee:50:de:b6:3d:99:b0:1a:c9:
                    f2:f7:37:e7:38:79:cf:1e:51:4c:bb:a3:6d:93:ee:
                    8d:9c:58:60:f4:84:37:f8:f8:15:c5:e0:45:90:b2:
                    18:c8:5c:01:f4:ab:51:4d:2e:92:6a:96:af:0d:42:
                    c8:7a:e2:56:70:fe:cb:d9:7c:06:a6:b0:8a:89:58:
                    f1:ee:7b:55:31:a8:29:44:25:c1:59:8b:20:f3:a8:
                    7c:03:a3:2d:5a:48:c7:53:d3:7e:f4:4a:58:89:bb:
                    1d:ae:b9:78:52:f4:dd:cc:81:52:82:1d:c2:cf:fa:
                    0f:73:b8:b9:f1:79:65:17:c3:e7:a7:67:ac:2e:6c:
                    95:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:51:A6:DB:5B:35:73:1F:86:FC:11:3D:6F:F0:18:F7:65:AF:50:C4
            X509v3 Authority Key Identifier:
                keyid:8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:29:ea:4e:a6:c4:c8:32:48:69:6d:6f:cc:fd:85:3c:44:b6:
         ea:04:0b:4c:60:10:36:e7:1d:e2:ad:a7:1f:e2:d1:23:ad:65:
         5d:af:b5:7e:84:07:fe:4a:03:75:e9:3e:54:f4:90:84:d7:f5:
         86:c7:0d:d8:bd:0c:df:f9:c1:f7:d9:02:a8:5b:20:0c:ca:60:
         9e:60:1a:8e:4d:be:e1:7f:06:01:a4:c7:09:9c:4d:4d:bc:6d:
         de:71:3a:bb:db:8f:9e:ed:28:1a:f8:7e:1b:3c:85:66:df:38:
         ef:08:d3:40:80:83:ac:eb:ac:90:4a:75:c7:bf:7b:0b:8e:70:
         70:59:54:ae:10:a8:46:18:30:b1:44:cf:16:8d:5a:11:6f:e1:
         f8:6b:15:8a:c0:63:ac:75:41:03:79:b6:44:ac:95:4c:76:b2:
         ff:a1:a1:a1:85:c8:c4:e2:26:a5:d0:87:19:82:ec:32:ae:63:
         f2:41:e7:66:09:6a:69:2f:21:6d:5c:8c:79:9f:28:40:b3:be:
         b1:49:60:bb:41:a4:b2:55:68:f0:5a:56:4f:63:28:d2:32:00:
         ca:f7:98:4f:92:8f:5d:31:41:ae:f4:ee:17:91:b7:3f:27:dc:
         44:d0:59:6a:85:46:40:57:16:33:d7:d2:ea:bd:a2:28:b5:03:
         c3:b5:71:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----