Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
File:                     jrRB2tu-y2ll1OofBGzFyOKIF_w.mft (raw, json)
Hash identifier:          RTZE/DgIy0zPj0jgx6f2ckQzW5l0u54gi/LCDSignYs=
Subject key identifier:   2C:70:54:F1:FB:2E:51:D5:8E:F8:57:91:7E:E2:D1:00:D5:D8:33:B3
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Certificate issuer:       /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial:       01962F74CB4CFE728B44C65582F4A2D6114B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
Manifest number:          0886
Signing time:             Sun 13 Apr 2025 14:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:45 +0000
Files and hashes:         1: 4EZAXXjg-wdq7F5nmE22LQpMjC0.roa (hash: kcJ5zcoJ0uYbLEoOLz0za2EfJtjkENsqcX3HW2ukm9E=)
                          2: 8eOXfqAkJqXP3wXDUaIxraOki3I.roa (hash: R7bxKwNtqC/oTBwL83XqaIAv5I/52rZnoW3WSovbBso=)
                          3: AXHQCfctIE8qm3CfgJv5m741MvA.roa (hash: lH4T05hC4Vf3bniB6mDX0OL+0fbAvH0yQpklYBKbyMI=)
                          4: D39tyqkHzUar743HSOtaz_PbEVw.roa (hash: 3v479Ukt7ALaWZSOqE7SXtI+6RElyE29evHrm/wKO5s=)
                          5: FZ30BS7c99CQqzoVNy_qf_6mJzg.roa (hash: +/HEuopMgXs1AcyNXLuf5qhJ2S6YVu77GGZUrjSbO5s=)
                          6: MLfn1YOL41jf_jxhYVmNtYMo6UI.roa (hash: Rc+RrvU5X1JONVLCHy+aTfK3D2oQUU5dYj6tePTJUyE=)
                          7: Mk19CM13YMFH7WXY4rkQd2VVD9M.roa (hash: ocRMjh+08/tYyEQx7PGNN6c6//DGSHJpqiQu69+SvEU=)
                          8: PBJjwWm3FNYmKDKlr11pHLlOrGk.roa (hash: /EDjQB/ySBsTi6pfh4zRjgsPbhtNFWDlr8va/X/KOwc=)
                          9: PQysa0gStaLJL9Thu5PyuDIF7kE.roa (hash: Mwu851ywkPXxaKp83LB3gVtyZ5Xct3QCemCLlVfmoYk=)
                          10: Wwx0ymxnwTUNgGtoQ6bmuG8xi8I.roa (hash: Duif3Xsm8vx9BAQ1DEEh/dpjs1UJXZja4M1PuzJXkHE=)
                          11: XJQW6cjujhEORDl3asfzceRsQq8.roa (hash: YLe1WKPBAxaQWWhGaDY3bNQMSMuaVm8vzXhx0IIMUzM=)
                          12: b6Nmax07-I7tddxfBlPtNVrrpoA.roa (hash: 882i5LCYTS8Ako1ajCDIZ6BePqu9LMB0nNQt34alqTY=)
                          13: eKnO05dB5vIDo5g5lEqriGppj5Q.roa (hash: Pg/wHgKw59kIgeWzKbHYp0qEn0pGvDQCAyOOST+PDe4=)
                          14: ey5hfbdWQgMGlLLRhHk4lxjHzcs.roa (hash: 5pgkYJemSZ81sP39WKzYABVimxvElpEgqAb4FFIhI2k=)
                          15: jrRB2tu-y2ll1OofBGzFyOKIF_w.crl (hash: EQpAW/uR5spwG0hC7IVeJf2APns0SKhv4znSkTrQfcc=)
                          16: lXFx9ALxZQorihL48BvDF3NJkOc.roa (hash: XO0/325FUJcPPA5WPlVW2WrXVo9UePYr9iPMeGFfH+o=)
                          17: pJgeOKkaI2IaIkWKQLfbLk35a4w.roa (hash: Coq6w5jiaEk77XJ1mE7tTSL+fJ0vuxmv1bAzLJXfEwY=)
                          18: pc5QkYWJRHSIUT4-aISn1B0ETL0.roa (hash: bGUIoNzoUj7sJpYGAF2W/rabzS0jqmoXnaDeHRq18Tc=)
                          19: roxXwaFrf3KkjRm0sygAv7oGPuc.roa (hash: +XL9L+dok2bHXelVksLQxh9+U/cP9zrebc0SlrcIfKY=)
                          20: wMyjLOgWza8MLMZCt_GDmRvtb-g.roa (hash: dLOXSzRovdIImBdeUt2cN/TfriVM7Y6eHA/JyGJylMA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:cb:4c:fe:72:8b:44:c6:55:82:f4:a2:d6:11:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
        Validity
            Not Before: Apr 13 14:01:45 2025 GMT
            Not After : Apr 14 14:01:45 2025 GMT
        Subject: CN=2c7054f1fb2e51d58ef857917ee2d100d5d833b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b5:2f:5c:13:84:22:0e:6c:76:c2:c9:f4:eb:
                    02:c3:76:2a:5e:02:24:58:7f:e5:d8:f3:a5:f9:bc:
                    34:55:23:d7:05:29:ab:e5:94:57:25:7f:ae:b1:b9:
                    e3:f2:fa:24:f1:ae:1c:cc:69:b7:81:3e:59:67:13:
                    31:09:d5:2e:31:a8:bc:4f:52:e4:75:06:9c:91:1a:
                    94:ab:7f:18:ae:c4:2c:b2:44:0a:6c:de:d4:40:5e:
                    91:f2:ce:18:93:38:28:22:d9:7c:54:13:61:82:b7:
                    68:9d:06:1b:fc:8c:d5:e5:ce:72:94:a7:14:42:6f:
                    4e:e6:96:c6:d1:6c:64:3c:09:c3:de:aa:7b:ba:4c:
                    47:37:0b:6b:ed:b9:69:ec:17:b9:19:3e:0b:6e:0f:
                    66:48:74:71:4e:16:60:36:8d:e8:90:6b:50:8f:8f:
                    dd:1a:cc:54:00:11:78:37:79:65:b3:9c:60:92:af:
                    20:cb:7e:1d:d3:00:d4:ae:41:58:6d:16:75:34:f5:
                    99:19:9e:b3:1d:a4:44:10:2b:b9:87:f2:86:2a:a0:
                    cb:22:92:99:a7:a9:c9:44:2a:c3:bb:a5:76:79:20:
                    98:c5:c5:53:e5:93:5a:e6:ae:45:ae:96:83:d9:41:
                    f9:ca:57:32:b3:47:13:44:af:64:46:18:4e:2d:2e:
                    7a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:70:54:F1:FB:2E:51:D5:8E:F8:57:91:7E:E2:D1:00:D5:D8:33:B3
            X509v3 Authority Key Identifier:
                keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:98:e5:91:2a:a8:b6:12:eb:f7:b3:0b:df:0a:3a:b9:8a:db:
         aa:ee:8f:b8:55:b0:8a:35:a0:d2:8a:23:d6:1f:de:2e:91:49:
         8b:1e:a8:35:f6:92:77:57:75:5d:c3:dc:84:4c:4e:10:1c:97:
         77:9d:6e:87:f9:75:cd:db:84:f1:02:85:91:17:54:58:f6:a7:
         be:e2:37:e2:08:20:a6:e6:7d:56:a7:91:57:36:64:9a:03:df:
         a1:a4:cd:63:9e:9c:ab:fb:05:f0:cc:ad:f7:6a:a2:bd:28:08:
         d5:f3:01:ed:b0:4a:a1:40:08:11:19:c8:0a:b9:74:ff:1a:03:
         ba:48:18:44:d6:bd:e6:ec:24:38:b7:9a:4c:21:9b:5e:25:a8:
         8c:8b:98:42:c6:9b:56:a3:4d:e8:53:64:dc:bd:53:68:7c:ce:
         18:75:70:ae:dc:30:e9:1b:ad:be:d4:2b:15:fb:3a:70:33:45:
         5a:c9:ac:3d:4a:b9:8b:69:d1:78:d3:46:0d:eb:d3:aa:6d:dd:
         dc:65:9f:0b:2c:11:b3:74:74:ac:83:0f:41:50:86:07:0b:e0:
         e1:a6:0e:3d:75:63:e6:d6:f0:d2:23:02:68:0e:13:39:5d:d9:
         38:68:3f:c6:cb:c5:47:bf:10:c4:8a:4d:2f:68:ef:32:e5:3d:
         e2:cd:b9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----