Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
File:                     JtOCk_Zp20i20L0QNq3972vT03U.mft (raw, json)
Hash identifier:          fhpT5p6+I/fDe/vr8jIHe8m/skGvojKjMZWaQD/1OsQ=
Subject key identifier:   91:6F:5F:08:CD:8C:0C:62:9B:45:B5:09:0B:91:7E:71:B9:0D:13:64
Authority key identifier: 26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75
Certificate issuer:       /CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
Certificate serial:       01962F3D9381133B557A11CAB8F415F5634D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:26 +0000
Files and hashes:         1: B5YSYjeYr4Sz9pWORRaMRNqbLdo.roa (hash: fM1qwPfPzh4uHHiPxXWA1vmQEzz1cIIEo/UJMyl+wj4=)
                          2: JtOCk_Zp20i20L0QNq3972vT03U.crl (hash: +qO6XUmrS8yUh+KEPVFXwqBV1lsZMthQKi5XVmfYoh8=)
                          3: MKzlSHA5umAqwVeARbcnAeXl1jc.roa (hash: 4blSnw7gE5YpxzhFPmztaW8X3UNRRgK5gE8sJ2PE3n4=)
                          4: cChfPDptNzofN1E4iRkTKdK8OBE.roa (hash: nK1tdIlf/7RX3LJe2ABcu++XCwANrpLFYC4ADhoObCE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:93:81:13:3b:55:7a:11:ca:b8:f4:15:f5:63:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
        Validity
            Not Before: Apr 13 13:01:26 2025 GMT
            Not After : Apr 14 13:01:26 2025 GMT
        Subject: CN=916f5f08cd8c0c629b45b5090b917e71b90d1364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:12:f9:af:c8:55:fe:8e:40:3a:45:26:21:33:
                    1d:a2:42:c9:a3:14:76:c5:e2:a9:d9:87:cd:a6:52:
                    95:b8:58:6b:9b:7a:2a:72:e6:e5:95:77:ec:17:b0:
                    55:6c:7b:37:b0:44:a9:f3:1c:24:01:aa:94:14:7b:
                    27:26:7f:63:ea:1a:fa:75:3c:e8:83:43:71:c0:e9:
                    8a:96:ca:a6:3e:c9:ce:d9:47:7c:74:e6:3c:94:fd:
                    57:a8:05:df:67:d6:e2:e0:da:60:42:29:b2:9a:b6:
                    85:d2:99:b5:07:f6:0b:cd:15:72:2b:a2:a8:79:0b:
                    6c:f6:c8:5f:90:a0:1a:16:a7:30:32:47:22:96:42:
                    4e:ff:56:c9:90:e5:e2:fd:3d:7d:59:1d:11:0e:65:
                    b1:37:e8:19:b9:aa:c0:bd:59:00:ab:dc:64:bc:5b:
                    41:dd:1e:9b:5d:03:df:e4:f6:e0:c5:df:27:34:49:
                    3b:36:ed:da:f8:0e:52:42:cd:71:9d:e3:4b:98:01:
                    76:18:ec:89:ab:40:49:b3:81:2c:41:04:70:82:b4:
                    bf:b6:44:73:c1:02:90:52:eb:4f:ff:ea:14:af:fc:
                    64:59:a9:63:10:54:da:94:84:2e:92:8e:63:01:4c:
                    32:94:26:60:a9:6e:3b:e1:b6:1d:a0:7f:98:91:5a:
                    b7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6F:5F:08:CD:8C:0C:62:9B:45:B5:09:0B:91:7E:71:B9:0D:13:64
            X509v3 Authority Key Identifier:
                keyid:26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:31:93:f2:d3:55:3f:74:8a:6b:f3:92:cc:5c:c5:df:77:11:
         e1:aa:2d:88:6a:af:47:db:16:ef:0f:3f:99:49:0a:0e:35:58:
         26:49:bf:db:4e:ee:d4:54:19:24:52:c7:4d:67:96:ab:c4:06:
         12:de:1f:ea:8f:ed:1e:24:dc:db:60:ee:59:63:42:56:97:b3:
         d2:f9:00:99:7f:e7:aa:46:c2:30:d5:65:92:ce:55:b8:d9:b1:
         f7:d9:c7:72:6e:bd:93:8c:65:b1:92:01:f8:9e:12:57:84:1f:
         e8:2a:b5:ce:ee:79:7f:a1:29:b1:36:71:8f:10:42:af:fd:17:
         09:1d:0c:e8:d4:de:6d:c5:fb:fc:ea:78:bf:36:45:92:e0:31:
         42:0c:93:08:4e:09:5b:a0:9f:11:d4:c3:42:78:65:72:88:68:
         51:d8:3a:1d:29:bd:75:be:eb:51:d6:de:7b:69:9f:c2:ff:3a:
         22:f0:bd:09:65:24:7f:96:ae:61:b4:9f:15:6f:1b:66:35:72:
         03:aa:59:0c:4a:0f:bb:55:c7:72:cc:79:49:73:24:2b:10:ae:
         56:28:f3:38:82:dc:e2:e7:6a:f9:74:5a:82:78:94:c5:69:cf:
         b9:90:a8:6c:32:3d:1b:c9:3f:36:ea:2b:12:60:e5:12:59:ff:
         be:43:1a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----