Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
File:                     jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft (raw, json)
Hash identifier:          UxSBfs/J+x6LkRoyLcBVIPIomhM/8UNiyf+k2IPQd5Y=
Subject key identifier:   5D:2C:05:A6:E3:94:21:38:BA:2E:7A:24:6D:A1:B1:5F:70:AD:A8:72
Authority key identifier: 8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
Certificate issuer:       /CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Certificate serial:       01962E61D250404D99DD6B71F94AE4962987
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
Manifest number:          13B5
Signing time:             Sun 13 Apr 2025 09:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:24 +0000
Files and hashes:         1: HK8tZZEnH3XebSxA7uU7eXL76hY.roa (hash: A9qzXbhJ+D8oACcswpJV6B2AKA++OqnaZLnW9gQTaUM=)
                          2: iV0pnh_JQIBr_RdQB2xJYX8tQRw.roa (hash: YaxAkBWvS50g4TE9KDjWuEy+sBe25yzJdsukBPT8zpw=)
                          3: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl (hash: XcsBN/OZwn3vaKMNGlXkGpoPpJOovlSIN6L/oewj+b4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d2:50:40:4d:99:dd:6b:71:f9:4a:e4:96:29:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
        Validity
            Not Before: Apr 13 09:01:24 2025 GMT
            Not After : Apr 14 09:01:24 2025 GMT
        Subject: CN=5d2c05a6e3942138ba2e7a246da1b15f70ada872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3c:a1:98:a7:e5:2f:e6:87:9a:a4:eb:6a:9b:
                    7b:df:94:de:c1:17:9c:75:e6:44:3c:51:0c:68:be:
                    3a:1a:6d:fb:36:be:0c:41:8b:af:8c:7e:45:7b:ee:
                    7f:8d:e9:55:af:5d:ab:0c:8e:dc:a4:b3:00:bb:3d:
                    b9:7f:57:aa:a9:b8:79:f5:f3:1c:ef:26:d1:be:6f:
                    2e:30:e1:2e:06:b1:8b:4c:bc:1f:ab:cb:6a:47:f4:
                    9b:3d:7e:de:17:05:16:ae:7e:50:0d:32:2e:ab:26:
                    bd:ba:b9:68:d7:a2:77:87:24:0e:3e:5c:b5:51:f1:
                    4c:7f:9d:f0:61:d7:24:d8:d8:6c:99:61:58:c3:e3:
                    7c:a6:a3:cf:34:ed:51:83:07:b9:70:2c:bb:4d:e6:
                    40:37:01:38:78:65:2b:89:db:47:62:ed:bc:ac:58:
                    84:4b:b9:c4:65:ed:8b:b8:e2:6e:1f:dd:ad:bf:af:
                    5f:e6:89:a3:d5:8c:57:bb:5f:cb:52:85:ea:77:74:
                    23:ea:c2:20:4f:cf:eb:78:73:a1:40:b5:a1:5f:0c:
                    93:a7:85:22:e3:1d:4a:f9:1c:e9:70:27:4a:38:31:
                    60:c9:c1:62:10:84:3d:77:c7:66:e0:55:f1:17:91:
                    5d:0a:da:b7:81:73:12:9c:95:6b:fd:18:1b:70:37:
                    bc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2C:05:A6:E3:94:21:38:BA:2E:7A:24:6D:A1:B1:5F:70:AD:A8:72
            X509v3 Authority Key Identifier:
                keyid:8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:75:ec:b7:b2:9f:4c:17:d4:25:62:28:04:04:ce:04:05:5c:
         8b:98:0f:a1:da:0d:b8:f7:32:0d:3d:e3:94:2a:cf:39:3f:97:
         10:a9:fd:92:72:19:32:64:0c:8b:53:ef:d8:11:26:14:b2:cf:
         ba:ee:bf:a8:c1:28:e4:de:c6:dc:0d:13:6e:42:63:7c:38:c3:
         0e:a7:77:13:db:64:bb:1f:92:ef:90:19:fa:a1:ff:2c:f1:73:
         2c:fc:7c:8d:6d:a4:01:40:5c:dd:53:96:b3:44:a1:4d:5f:4f:
         2c:dc:49:f9:a8:8c:2f:c8:a5:b1:9a:70:00:50:38:df:dd:82:
         6a:8d:db:b1:7b:67:48:37:f4:d9:b4:77:86:da:eb:d2:3c:e0:
         24:2c:f1:61:58:44:bd:36:fa:0c:36:e6:43:2d:67:fb:61:83:
         25:0b:0c:8e:e8:fc:dd:9a:11:ae:fa:a1:8f:52:9b:e5:aa:49:
         9a:10:8d:b1:a7:d0:00:5d:4e:e4:45:24:76:3b:99:66:9b:53:
         5f:bc:3e:50:40:c3:4c:10:49:f3:03:5f:3f:3a:dc:f9:7e:7a:
         1f:63:af:f3:70:20:89:9f:53:c9:bd:08:95:e0:dc:d1:73:95:
         16:d3:e8:36:91:8a:1a:76:a9:fb:ff:1d:cf:99:d5:4d:7a:51:
         91:11:f4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----