Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
File:                     jOc1Ep93eiW_hHJyBr-XjZodsgA.mft (raw, json)
Hash identifier:          blM8kjW1rXoZEuET1VHTLAc17/5tIjIZgPmPzprd+Pk=
Subject key identifier:   D9:CC:31:AC:43:CA:91:D4:18:78:9E:76:07:7E:0E:4F:2D:ED:5F:6A
Authority key identifier: 8C:E7:35:12:9F:77:7A:25:BF:84:72:72:06:BF:97:8D:9A:1D:B2:00
Certificate issuer:       /CN=8ce735129f777a25bf84727206bf978d9a1db200
Certificate serial:       01962ECFA3B1B6065EE682E96B169A001F33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
Manifest number:          0AC2
Signing time:             Sun 13 Apr 2025 11:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:21 +0000
Files and hashes:         1: 7nFNN3l5GD-t-2xZtD0Zf8RWyQ4.roa (hash: vqDVEIya4bFoWJhti8KO9chSYpm+4SzzmfR2K9/w2/k=)
                          2: czoe1RLJsx9dA2fYE94xeHxNmO4.roa (hash: BpNazVz7pSpyIXBvYFGh8xCscfLMGwTUrkPmKZ9aKwA=)
                          3: jOc1Ep93eiW_hHJyBr-XjZodsgA.crl (hash: mQKOZe8tMYuEnnhvLNyZ2hrQekom4DKx8nHh6hm1eW4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a3:b1:b6:06:5e:e6:82:e9:6b:16:9a:00:1f:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ce735129f777a25bf84727206bf978d9a1db200
        Validity
            Not Before: Apr 13 11:01:21 2025 GMT
            Not After : Apr 14 11:01:21 2025 GMT
        Subject: CN=d9cc31ac43ca91d418789e76077e0e4f2ded5f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:54:e9:53:83:80:23:b3:2e:1f:d4:a5:09:ff:
                    d5:ec:b1:22:42:24:59:b5:42:50:cb:a8:e2:bd:81:
                    b5:10:73:33:2d:b8:f1:b9:48:a9:30:60:ec:f8:69:
                    cc:cd:91:be:97:cd:a0:9b:f0:a7:81:9d:f3:65:f4:
                    c9:94:82:6b:33:a6:3e:67:41:c4:f4:81:c3:0d:96:
                    df:8f:5b:b6:39:4f:92:33:89:1b:11:01:2d:c0:cc:
                    b4:d1:17:5f:79:74:3b:ad:64:1f:b4:db:fc:2d:3e:
                    0c:12:6e:88:87:ff:4e:a8:e1:0f:e1:19:08:a3:b5:
                    9d:14:93:28:f4:74:d6:7b:47:23:8c:08:ff:2e:57:
                    07:a7:7b:21:fd:3d:aa:9d:eb:35:73:c5:d3:be:9f:
                    23:3a:7d:61:42:bc:10:25:84:4f:85:32:4b:3f:54:
                    62:2d:6f:5c:78:c5:5b:eb:d2:d5:88:d1:55:57:15:
                    29:ff:8f:df:f5:d2:04:ca:ed:13:b3:8a:84:02:01:
                    6e:e0:af:18:63:07:62:d0:2e:87:46:99:29:e1:11:
                    4f:85:24:7c:23:93:ac:b5:78:82:1a:dd:50:8e:51:
                    f8:94:2a:54:32:24:c8:32:36:df:a3:45:7e:91:d8:
                    0c:fa:87:a3:8b:61:4a:c0:fa:24:a3:40:ab:ff:b7:
                    86:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CC:31:AC:43:CA:91:D4:18:78:9E:76:07:7E:0E:4F:2D:ED:5F:6A
            X509v3 Authority Key Identifier:
                keyid:8C:E7:35:12:9F:77:7A:25:BF:84:72:72:06:BF:97:8D:9A:1D:B2:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d8:30:df:c4:2b:64:d4:53:68:6f:3b:57:20:b6:b1:04:c0:
         50:d1:2f:c7:b2:d6:52:dd:11:28:a1:01:1d:08:c1:0c:e1:e2:
         d5:39:90:47:4e:04:04:a9:02:12:2a:03:f6:51:53:47:de:da:
         93:70:03:ff:e3:7a:69:37:88:82:5c:e6:9d:79:68:a5:05:14:
         1a:02:44:6b:cb:c1:d7:aa:ac:2f:b9:56:ef:6f:c5:56:af:bb:
         80:d3:21:90:59:2c:86:1c:b3:eb:a2:8a:c8:5b:9b:b3:34:18:
         88:07:fa:16:a2:5e:0d:3d:3e:97:7c:fa:13:26:97:60:55:0e:
         9f:7a:d7:64:f8:0d:5a:bf:bd:50:41:09:4f:f3:8b:ca:85:a3:
         5f:90:b3:4d:a1:a8:ca:62:9c:51:e1:de:4e:ff:0b:e7:dd:cd:
         2b:04:27:34:91:c3:b9:d9:84:48:68:1f:8c:90:50:8a:0b:ea:
         8d:98:c9:8c:95:10:1f:3e:01:cc:29:69:a8:8d:0f:3f:7c:f4:
         b4:9d:8d:33:c5:bd:ef:b2:24:99:08:c3:46:26:1a:e2:89:40:
         ae:be:b0:e3:0e:74:e1:74:37:7b:06:49:64:f8:2f:59:b8:c1:
         9f:39:3f:26:26:46:31:ed:97:bd:08:7a:28:e7:e1:6d:09:03:
         f8:3d:7f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----