Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
File:                     bN7Hsun4ZurDa8McpMT_YtU90WY.mft (raw, json)
Hash identifier:          ul2OoKTTnZ2Uc5T4Ad+ua2YylXWreEvdHOgckIZdlTI=
Subject key identifier:   8E:0C:0E:1F:C4:C5:B3:4B:AD:1E:00:A1:19:F9:A5:93:D6:A1:18:5A
Authority key identifier: 6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66
Certificate issuer:       /CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166
Certificate serial:       01962E2AC1FE937CFE22DBA0EE7E92A85F45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:16 +0000
Files and hashes:         1: Z4ohMPF1WbOgY7NPLu3yhyFt6Mc.roa (hash: wjvtvacmB4OpgR5kZvFLo2El4XLARx+8D9159reAQW4=)
                          2: bN7Hsun4ZurDa8McpMT_YtU90WY.crl (hash: F6sDjTZGUeOdnoOLpvwmwp1muXi9yLBi1nUFXvMRWnE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c1:fe:93:7c:fe:22:db:a0:ee:7e:92:a8:5f:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166
        Validity
            Not Before: Apr 13 08:01:16 2025 GMT
            Not After : Apr 14 08:01:16 2025 GMT
        Subject: CN=8e0c0e1fc4c5b34bad1e00a119f9a593d6a1185a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bf:23:f4:a9:94:e7:37:4c:c9:3d:7f:be:ff:
                    b2:5c:42:73:ef:2e:bb:b1:c6:13:b5:62:33:6e:a2:
                    cf:10:c0:92:8b:a2:81:8d:c7:79:63:10:78:5d:ae:
                    a2:c1:6c:37:b1:bf:ed:db:97:d1:8c:67:32:a3:f5:
                    25:65:e3:1d:f0:e3:59:71:b6:39:ad:c8:1f:37:2f:
                    cb:fb:77:a0:ec:25:d7:10:c4:85:cf:8c:2e:06:38:
                    95:ad:c4:c6:d8:9b:ae:23:eb:9d:bf:38:67:a8:6b:
                    fe:60:92:ae:4b:dd:ba:ee:ce:35:a9:ca:6a:cd:5f:
                    36:c2:fb:fd:3f:e7:24:d9:fa:44:f2:b9:9f:c4:f5:
                    d9:b0:9f:ef:15:f4:cf:e5:7e:cc:7e:aa:14:e3:78:
                    31:a0:7d:e1:3c:df:18:aa:ab:8d:4d:9f:56:db:5c:
                    1c:88:50:62:b8:ab:e4:5d:60:bd:1e:14:62:17:3f:
                    08:41:7f:0f:12:a3:40:07:f9:72:b1:47:9c:0d:f9:
                    7e:de:a2:d4:6e:7e:7d:cb:c0:89:09:ad:08:f0:ec:
                    56:6a:6e:5c:7b:80:f2:56:8a:3d:6a:45:f9:8f:51:
                    3e:75:cf:dc:35:6b:bf:46:1e:df:b3:f3:71:0b:ae:
                    4d:9b:4d:61:d8:eb:2c:c4:9e:90:57:db:45:8b:5d:
                    6c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0C:0E:1F:C4:C5:B3:4B:AD:1E:00:A1:19:F9:A5:93:D6:A1:18:5A
            X509v3 Authority Key Identifier:
                keyid:6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:a2:60:01:0a:5b:e9:f5:72:b3:a7:0e:0a:19:12:01:c1:d4:
         71:27:5d:d1:84:c7:73:08:93:6c:29:0a:90:25:c5:db:10:52:
         c6:75:59:55:01:02:3e:ce:bc:c5:fa:b9:93:3f:7e:91:f4:e7:
         6c:99:d3:69:f5:59:5f:a4:c6:0b:31:a3:a8:63:df:87:bf:25:
         7c:82:64:9a:ff:91:e7:0f:27:dc:a5:a7:d6:1e:7b:62:f0:04:
         84:c7:ff:af:04:ec:b9:f6:7e:da:a6:bb:19:84:1a:a2:76:80:
         9f:d8:90:26:fc:b4:e0:f9:86:1d:0a:77:ca:db:39:92:57:6a:
         ca:1a:bc:2b:b0:4c:ec:80:83:3c:a6:68:ca:b3:22:57:b8:75:
         84:3e:ce:26:be:09:96:a3:0b:49:67:e9:cf:2d:62:f2:ec:29:
         1b:9f:ce:50:cf:d8:54:c7:71:ab:b1:ff:70:26:c3:b9:a0:a9:
         47:84:91:1d:8d:48:d0:54:0b:fc:56:3a:90:61:2e:a0:12:80:
         d2:b2:20:4c:b4:3d:95:2c:38:30:d8:0c:a3:31:f5:02:58:db:
         f6:b8:0e:b0:0f:51:31:77:8f:6e:ab:e0:26:fc:f4:d6:57:e9:
         8b:03:2a:bf:39:8b:1f:2d:d9:b4:10:5a:18:89:b7:c4:f9:d3:
         c5:cd:2c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----