Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
File:                     Dm2P132t49P5bLSZMZSMJymtoN4.mft (raw, json)
Hash identifier:          abxPzlg2TiV7L5Y54gtZelbmL2/D09DSblGd4TrHYw0=
Subject key identifier:   3A:FB:EA:8D:18:20:F0:9B:E5:3E:A3:00:F9:2E:9B:7F:49:1B:2E:0A
Authority key identifier: 0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
Certificate issuer:       /CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Certificate serial:       01962E995BFE8AF979D0216E628899677312
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: 7agd0xXHCJCEBXtCCNxD5ubRKuY.roa (hash: oQw/mKm0E4AJl8kl0WckRZJlnbPoPgaZD+9rJpy3frY=)
                          2: Dm2P132t49P5bLSZMZSMJymtoN4.crl (hash: man6Y9vdCDU8PL5eV2XzGj2TQjmm9Lb0nbrJ/wtQROA=)
                          3: LT-9VM8v74LKR6mHQpnPgQmq0Pc.roa (hash: DjF9+jZlXLi3uEoLKBvDZoW0dJ/H/LAI1EAde2tMt5g=)
                          4: wKqbNOLsqrVFYWVrfyYGqu1Sues.roa (hash: /xyx+mYRyXQ5PVlQrZvBX8K5l17ZBxWHv6YVrNpVAuU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5b:fe:8a:f9:79:d0:21:6e:62:88:99:67:73:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=3afbea8d1820f09be53ea300f92e9b7f491b2e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:4e:44:5a:d1:27:7a:e4:fb:b1:07:4d:f6:
                    db:03:cf:c4:39:bb:9b:33:41:a9:e7:2c:22:2b:0d:
                    dc:dd:f1:90:d3:5f:32:5e:e0:d9:d7:21:c3:57:63:
                    6b:41:12:e0:01:20:e2:1d:ff:8d:00:00:48:23:c9:
                    a4:d0:b7:af:0d:67:32:ef:2b:b1:d6:8b:6a:a1:6f:
                    7d:25:c2:50:7d:ed:e0:a3:8c:b1:2e:6e:b7:2c:e8:
                    09:af:f6:86:f0:38:00:4d:8a:e5:73:70:02:f0:bf:
                    ba:4f:89:99:03:77:62:b3:c0:85:5f:cf:af:e3:18:
                    5d:08:c6:9e:17:18:58:c7:24:5e:a5:95:bd:91:d4:
                    0e:36:58:cf:19:ad:f2:56:92:fe:f7:3a:af:25:ac:
                    50:d6:16:81:a5:68:2e:4c:c8:64:b0:70:e3:36:e8:
                    92:08:b7:3d:35:bd:54:6a:55:1d:51:6f:99:8d:6b:
                    75:95:e2:53:c1:86:e7:99:3c:fe:d1:15:0a:d2:15:
                    9c:ec:d3:84:2d:41:a3:85:b5:ac:0e:e0:09:81:7a:
                    0d:1d:7b:e2:06:3a:39:64:69:0d:59:73:08:49:8c:
                    9c:91:67:e1:30:a9:0c:2e:5f:72:1f:48:a9:e8:cc:
                    f3:4a:44:f8:a3:f8:26:01:89:1c:2e:9a:78:2b:a4:
                    aa:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FB:EA:8D:18:20:F0:9B:E5:3E:A3:00:F9:2E:9B:7F:49:1B:2E:0A
            X509v3 Authority Key Identifier:
                keyid:0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:89:c0:39:57:cf:f9:13:e0:9b:cf:74:1e:ad:ce:03:bb:ce:
         ba:bc:53:2a:54:90:c9:b3:2c:96:c7:96:15:da:78:70:e1:54:
         3c:44:38:1f:65:80:cc:ae:c6:2f:d3:c4:15:76:52:2f:3a:f0:
         b6:f2:b0:e1:04:c7:a5:8d:bb:b7:70:ca:4e:eb:1b:02:81:0b:
         27:be:8d:ef:94:dd:ce:e5:65:33:b0:9b:15:7f:69:2f:d9:55:
         98:42:ae:6d:79:43:35:3d:01:62:31:46:75:bb:70:ad:63:f8:
         32:2f:69:56:f9:f1:36:24:f0:b8:48:e9:21:81:16:32:79:5d:
         0c:83:7f:cd:55:1c:4e:70:54:9f:2e:ea:79:d5:6f:e3:75:a8:
         d7:87:cc:2f:45:80:63:48:44:c9:e6:ce:21:d7:f3:61:a9:1d:
         9e:69:48:d0:94:34:82:aa:8c:50:1e:bf:f1:60:a6:77:a5:2b:
         61:cc:dd:ec:c0:80:18:08:23:f1:1e:9f:a0:b9:f7:2e:8d:e8:
         ad:bf:41:38:46:be:b0:fb:3e:99:33:bf:0c:e5:af:6a:d3:10:
         d0:a4:94:c4:91:8e:2b:1c:77:48:13:30:5d:3a:85:c7:bb:e3:
         9f:5d:96:63:09:38:e7:71:db:dc:61:c6:41:a3:8c:cb:7c:70:
         68:34:5c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----