Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
File:                     jAYAQO86CCOqlz8NBZKx3agI94I.mft (raw, json)
Hash identifier:          oob3eXrsfGddtL8CbtJOu05ZmL+pyB7yw3/WjRuxnGg=
Subject key identifier:   AF:20:10:E7:25:A7:11:E0:F0:12:F0:F1:0C:31:74:14:C2:B2:61:8E
Authority key identifier: 8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
Certificate issuer:       /CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Certificate serial:       01962E98E934B7F9592687DD9B0B10C87A7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: 8ZbyflawwFLPqDg3BZZLbHwGOLc.roa (hash: VykbJevpFsrAKqlNdZuPgmxNQNlKZ+4+VF7D/J1CQCs=)
                          2: H_TLsPIgEGDD_RE_XHqJUvlqj8E.roa (hash: jVZCYNBVF7woByDpZwClsmu07rKLPUQko61SrEyrK1s=)
                          3: WyA56EA2oxi30uAjF6x_QQYyE00.roa (hash: 4ql8mO5EaYeFUKdK/VU8GBpEW0nvJwvaHkKL+MQY0zE=)
                          4: eJe54pJQD4j2JDWbWUTuFe4Zw4k.roa (hash: RfLVPz0RIAcdPGVp8RcU7sTd+HqCq3IoZWz5cYzagaI=)
                          5: jAYAQO86CCOqlz8NBZKx3agI94I.crl (hash: ixhX+ViQh7c53Og1bqMSWIw5X/ETNlJe58xzUJ1xyJI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e9:34:b7:f9:59:26:87:dd:9b:0b:10:c8:7a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c060040ef3a0823aa973f0d0592b1dda808f782
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=af2010e725a711e0f012f0f10c317414c2b2618e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:04:f7:4e:9d:1c:88:27:30:fc:23:f0:d9:e4:
                    1c:9c:6b:7f:7c:2c:4b:ff:84:2b:38:0b:42:2e:48:
                    4b:4d:52:ef:be:2d:1c:8f:e1:b1:eb:35:e4:86:35:
                    dc:58:e0:84:21:50:ae:b4:87:9c:37:3d:b6:25:cb:
                    73:b3:b8:8f:66:21:5e:e9:ea:10:73:e0:aa:10:2c:
                    db:f9:15:60:6b:33:b5:8f:7a:a7:91:ab:5c:e8:93:
                    dd:ac:c7:1e:35:f0:ba:5b:ef:24:39:19:ee:dd:8f:
                    af:99:31:52:bc:d1:3c:60:2a:25:be:d2:47:3a:9d:
                    7b:53:57:c9:8d:88:6d:18:81:ab:e2:44:02:92:9a:
                    1f:c0:89:55:ae:64:12:c6:a2:6e:dc:4c:52:11:e6:
                    bc:81:6c:e6:34:0f:82:03:bf:e6:dd:a2:4a:c0:71:
                    be:bd:7c:5e:44:ec:17:0d:49:a5:69:83:92:28:76:
                    f6:86:a3:59:37:75:c0:0d:63:02:6a:77:9e:f2:39:
                    7f:cc:fc:fb:41:07:17:e2:b0:55:99:07:a4:97:ba:
                    69:81:8d:46:d4:c2:df:c3:24:9c:76:8e:5b:65:a0:
                    e7:50:04:62:df:89:a8:7c:80:f7:c8:29:82:40:b0:
                    37:b6:ae:90:f4:15:ae:7c:5e:9d:71:a7:5e:01:ef:
                    0c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:20:10:E7:25:A7:11:E0:F0:12:F0:F1:0C:31:74:14:C2:B2:61:8E
            X509v3 Authority Key Identifier:
                keyid:8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:c3:c2:bc:93:ce:bb:29:c3:2a:3e:fe:96:1b:99:4c:84:ee:
         3d:f8:9a:a2:9e:1a:53:cf:de:5f:2a:4c:aa:c4:6a:27:7a:ce:
         a5:8c:fc:c8:d6:39:f5:ac:6a:b6:f9:c9:8b:86:d2:3f:a8:17:
         a9:c7:16:3d:97:9d:cb:a6:8c:46:bb:54:c9:6d:37:56:91:fd:
         36:f9:21:7d:e3:63:49:4a:8c:ee:43:52:12:22:08:f7:35:77:
         2d:72:bb:7b:43:db:ae:f9:fe:7c:fc:76:a7:1e:99:86:46:55:
         3d:08:6a:93:04:33:21:9f:40:87:09:e3:d1:c7:49:c6:2c:65:
         85:81:43:fe:52:fb:38:fb:6a:75:96:a3:30:06:3c:a3:40:e5:
         7b:cb:da:60:96:46:88:ec:ed:14:30:6d:c8:d7:c6:68:46:1b:
         91:f2:43:ec:22:f3:98:05:5f:8a:9e:d3:d9:61:c7:44:c4:64:
         cb:ed:4d:c6:29:a4:6d:1e:3d:83:19:74:21:68:cf:4c:fd:7c:
         a2:97:1b:90:6a:8e:b4:26:d9:44:dc:e7:2e:c2:ec:76:69:2c:
         27:8f:8c:79:f9:11:1d:04:5e:85:58:1c:3f:4c:dc:6d:12:2c:
         c9:85:4f:cf:46:5f:db:54:29:1d:49:29:69:f7:21:7c:36:3b:
         00:17:73:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----