Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
File:                     qEOOrPTQZOh6drtGLTtLLMOFikw.mft (raw, json)
Hash identifier:          NioCijsVIUV5W4Zk+98UuYerMLTt9OoOEqLV1GINSrc=
Subject key identifier:   5C:CC:EA:44:F8:25:C3:F9:E4:C9:6E:C6:29:F9:D4:71:D2:3C:34:CE
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Certificate issuer:       /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial:       01962ECFC9FA544825948BDC44FA9BD99161
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
Manifest number:          0C65
Signing time:             Sun 13 Apr 2025 11:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:31 +0000
Files and hashes:         1: 1VL4lYJptkpi6ZtVoZgmoJ6ksn0.roa (hash: f1kBG9NlxREDPNdWOkJs8Cv0Ij2AV1IHOO/Hc9KsOpQ=)
                          2: eWIsK00nv-TBVtwDZCA3scOHg9s.roa (hash: y147gGaB8bkjz0BvOSbEDQ7Eu45dIgspzGe/6ZKyCR0=)
                          3: qEOOrPTQZOh6drtGLTtLLMOFikw.crl (hash: 1Z8dBtPsZpU1hW8pEr21Zp9GU6EFe2yfvZERaCadInM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c9:fa:54:48:25:94:8b:dc:44:fa:9b:d9:91:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
        Validity
            Not Before: Apr 13 11:01:31 2025 GMT
            Not After : Apr 14 11:01:31 2025 GMT
        Subject: CN=5cccea44f825c3f9e4c96ec629f9d471d23c34ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ea:50:fb:80:2f:dc:b3:df:e8:ee:98:4c:e8:
                    c6:03:f9:91:f1:ff:65:60:d3:b9:9c:c1:e8:89:dc:
                    3e:03:ea:56:d0:6e:3d:3e:bb:4c:eb:9f:04:44:f1:
                    50:c9:e0:bb:73:64:43:d3:11:bd:bc:1e:b3:2e:0f:
                    d1:23:28:64:43:a6:80:3a:f9:17:44:84:5f:0d:e0:
                    d5:77:aa:ab:b7:36:6d:5c:e0:4d:57:ab:cf:96:8e:
                    39:b5:e3:6e:51:9a:10:63:ad:67:d1:0a:df:c0:0c:
                    d0:be:b7:95:1c:d7:0d:50:60:c0:a7:6d:50:0b:ad:
                    f0:1f:17:14:f7:bc:9e:bc:70:d0:0f:cb:2b:2d:25:
                    b6:7e:11:e7:4d:12:9d:29:13:a7:f8:99:9d:d0:72:
                    69:62:31:95:10:6e:82:db:20:31:3b:7a:d7:dc:f6:
                    5c:38:93:fb:05:b5:b5:0d:b2:8a:61:88:77:4b:1a:
                    90:bb:35:18:db:29:e6:ee:0f:1c:3d:97:bb:03:42:
                    ad:09:28:87:10:6b:72:81:a1:8f:4e:c6:d8:1c:ce:
                    34:08:f9:30:ae:f5:a9:97:82:51:a7:f0:d2:ef:30:
                    88:e1:27:37:17:b0:5a:d9:c4:6e:75:a1:71:f5:84:
                    63:64:47:47:36:34:3b:fa:1c:23:b3:e5:12:90:d5:
                    00:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CC:EA:44:F8:25:C3:F9:E4:C9:6E:C6:29:F9:D4:71:D2:3C:34:CE
            X509v3 Authority Key Identifier:
                keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:85:96:e0:ba:74:37:5c:29:19:9c:8d:0d:7c:ad:22:5c:ba:
         34:c6:4e:e1:54:2e:af:9f:e6:02:47:b4:dd:ea:74:df:f5:0a:
         c1:84:cf:51:a8:17:ea:46:8e:63:af:72:11:db:e9:7c:dc:db:
         50:ae:57:f8:38:2e:4c:df:8f:2b:ad:04:75:4b:9f:a3:01:17:
         24:56:c5:31:91:fc:7d:7e:5a:bd:77:cf:f7:dd:45:82:d9:55:
         ab:c9:8e:ea:c7:2b:92:15:83:65:71:dc:4d:b5:de:eb:02:cc:
         3f:0b:f8:d1:ec:40:72:21:96:15:7d:81:7a:2b:2f:da:73:5c:
         3e:34:cd:60:38:0f:46:91:9d:44:34:6a:a4:8b:b4:76:a3:11:
         14:e8:b0:ca:24:e1:57:e0:a6:0e:f2:a1:e4:06:e7:33:d5:ee:
         b6:3f:f6:c3:93:14:03:21:ce:d3:2e:0e:eb:7a:88:23:d6:e4:
         f8:bb:96:60:db:07:ae:17:2d:6c:68:23:d0:62:8e:f7:bb:a1:
         1b:96:93:b1:5e:a9:5f:18:08:e1:b2:a4:44:ac:1a:4b:cf:87:
         bc:b4:9f:64:78:86:28:64:4f:17:3a:50:fc:55:fa:a6:30:54:
         8a:de:c4:83:03:c4:c8:06:b4:ee:5d:42:2e:9b:fc:44:ce:4c:
         0b:10:b3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----