Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
File:                     0j8EewbItyce4Qya9dFEPwE5wSc.mft (raw, json)
Hash identifier:          BL5bdG4g3DNQZS9ByK0c1q1tZDqmv4gFgl8ofO4957Q=
Subject key identifier:   C1:4A:90:09:63:09:30:11:35:5D:6B:80:0B:B6:10:9A:C8:45:1F:37
Authority key identifier: D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
Certificate issuer:       /CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Certificate serial:       01962E61C401C872DAB16F374F1D5951A1B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:21 +0000
Files and hashes:         1: 0j8EewbItyce4Qya9dFEPwE5wSc.crl (hash: 4IfRTdlwdomOT0Vd4ceIJBKoLgDC/WAjZK/z1UCbMNg=)
                          2: J_WwZWRwUeRaMtDotR_iY7Q6fWw.roa (hash: jAGifMZyJSQbsPFRP+S78wMNisVnQ/cWhKpvEThjZOI=)
                          3: K6nmXLryL1T-tWqAokSMk69cu-4.roa (hash: WBKa7aT4uLMRBq7574LflAMd1wdXVfKmsx/BV6lZJyM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c4:01:c8:72:da:b1:6f:37:4f:1d:59:51:a1:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
        Validity
            Not Before: Apr 13 09:01:21 2025 GMT
            Not After : Apr 14 09:01:21 2025 GMT
        Subject: CN=c14a900963093011355d6b800bb6109ac8451f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f9:27:dd:f8:6a:fd:77:82:71:e2:18:87:2b:
                    2e:a6:7f:9c:7c:8e:26:82:8f:10:70:1d:90:55:db:
                    2e:5b:c5:e8:d4:9f:d0:03:c3:9d:ca:0e:ee:8d:1c:
                    f3:6a:ee:db:b6:b6:9c:de:27:a6:db:95:9b:50:be:
                    96:4f:96:65:c4:68:b4:2e:bc:d6:13:bf:c3:af:f3:
                    3d:d8:5d:f9:58:52:2b:2f:10:a7:92:2c:ab:db:e4:
                    2a:11:5d:68:7e:5e:d2:0d:b8:9a:50:c5:4a:53:32:
                    50:d6:84:ef:d9:8a:fd:02:4a:fd:79:82:b2:53:55:
                    15:53:05:b7:2c:33:be:1b:2f:b9:9e:3f:3b:ed:32:
                    c7:e9:70:6a:2e:c1:8f:d3:d8:4e:04:5c:bd:aa:32:
                    cd:64:96:52:d0:62:ea:f9:a9:64:29:f7:6d:1a:32:
                    cf:2b:5b:1d:09:4c:1f:8f:75:17:2a:fe:68:58:6a:
                    ea:6f:08:e1:af:41:79:7e:82:b0:4e:18:d6:51:27:
                    1b:58:f0:29:bf:e7:a1:6d:4b:7e:03:02:99:49:1d:
                    fc:4d:dc:13:e5:f7:02:b0:ed:56:ec:a4:3d:5a:df:
                    59:62:76:6d:dc:4d:2d:81:d2:81:6a:19:f0:8e:81:
                    e7:25:26:a4:8f:90:a7:01:78:8f:34:66:a2:ed:e4:
                    38:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4A:90:09:63:09:30:11:35:5D:6B:80:0B:B6:10:9A:C8:45:1F:37
            X509v3 Authority Key Identifier:
                keyid:D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:7a:95:f8:82:eb:7d:9b:35:24:8a:42:f4:6a:b6:c6:a3:28:
         67:b7:94:68:45:00:9b:ee:a9:de:48:8a:57:21:ad:16:c2:75:
         88:e6:3e:61:38:77:4d:bb:f3:a7:f2:4e:15:ea:37:89:f1:14:
         b5:a6:75:1c:8f:e5:19:6a:d7:db:db:9f:1b:f6:6e:ad:f7:37:
         d6:a5:48:6e:8a:05:b8:af:1d:f6:9b:6f:35:0a:98:27:44:09:
         04:57:c8:f0:28:7f:7c:56:d5:4c:e0:cf:29:88:5f:80:ce:42:
         e4:0f:0e:ee:6b:e1:6c:a2:3a:4c:d6:95:6d:74:c3:42:57:ea:
         16:f3:a7:d5:91:13:31:d1:9f:b6:95:41:06:da:61:f1:ce:24:
         58:54:ee:87:78:ed:dd:31:ec:5c:a9:28:af:53:a8:fa:01:01:
         c4:e7:43:0f:4a:9f:24:b6:a8:29:cb:30:32:84:66:b1:e8:b5:
         18:32:f8:72:55:26:68:b6:10:10:f6:31:60:d6:8b:66:24:7c:
         5f:88:a7:d7:5f:c3:e5:60:1f:f1:66:30:28:b2:c9:fa:d7:24:
         e6:be:21:d8:29:a3:8d:21:ad:94:d0:ce:eb:d9:08:2e:97:73:
         9a:3c:26:c2:f9:b4:2c:a4:86:9e:7e:a9:03:41:d0:a9:d6:fe:
         21:d0:c4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----