Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
File:                     jL10xtEdY8pd48xjfOln7pdgTGc.mft (raw, json)
Hash identifier:          8R9w4F+nxTxhkTBSSmBGJDsafSVch5GcCp0zCTGJe2o=
Subject key identifier:   6C:E8:0C:7A:D4:B3:34:3F:64:4C:10:CC:E7:92:7F:5E:48:5D:ED:CA
Authority key identifier: 8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67
Certificate issuer:       /CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67
Certificate serial:       01962E99108A1DA2F662AF5343C3FE9961D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
Manifest number:          0C49
Signing time:             Sun 13 Apr 2025 10:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:45 +0000
Files and hashes:         1: F_jltXy2Uo4j3CnQ_o6LogVbZk4.roa (hash: t5awNCHpv5Z1K7KKzegDPRjyXJOt1/jwTbN2Cm1q5cw=)
                          2: jL10xtEdY8pd48xjfOln7pdgTGc.crl (hash: /ohqEhkq9bZ2Zi77GOVWZFPe6Lpx+B9O5Y9+DtR4z24=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:10:8a:1d:a2:f6:62:af:53:43:c3:fe:99:61:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67
        Validity
            Not Before: Apr 13 10:01:45 2025 GMT
            Not After : Apr 14 10:01:45 2025 GMT
        Subject: CN=6ce80c7ad4b3343f644c10cce7927f5e485dedca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4a:3b:4b:1f:52:e1:4f:a5:08:f8:ff:3a:b9:
                    fc:fd:8b:7e:0e:c4:90:46:62:49:ef:21:ec:de:34:
                    de:4e:60:4f:e5:e0:3e:4b:6e:1d:9d:51:70:ba:26:
                    55:63:2f:61:b7:f9:b2:d1:e0:f2:65:f2:05:a1:c0:
                    da:0f:67:56:d8:b7:80:ec:3c:00:82:13:c8:48:7d:
                    51:92:46:50:46:7f:b4:1e:d0:f0:37:f1:7a:eb:40:
                    68:91:12:2f:4c:22:e5:0e:ae:0d:81:3c:12:4d:85:
                    3d:e3:2e:06:b4:e0:d1:07:df:cf:ff:80:d9:4f:44:
                    0b:3f:24:79:55:44:85:55:8f:9e:99:be:82:23:0b:
                    e3:a4:99:99:e4:da:61:be:1b:b2:a1:c2:58:bc:08:
                    e2:fc:cb:aa:44:e2:a9:6a:09:ed:c8:bc:f9:80:07:
                    6f:a8:9d:80:57:c2:12:20:fa:16:94:15:ae:db:d2:
                    68:9f:c2:c1:64:06:7e:cf:8f:c7:a7:c9:85:92:43:
                    8d:b0:6b:39:08:61:24:c6:89:15:78:01:40:7f:84:
                    4c:bb:3e:f4:22:b4:92:14:84:bd:3a:f4:44:c3:5c:
                    73:87:f8:e6:cb:ec:04:6a:f1:ee:c9:94:d1:05:b6:
                    18:30:73:83:87:53:e8:0e:e6:c0:f5:c0:24:9d:5e:
                    12:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E8:0C:7A:D4:B3:34:3F:64:4C:10:CC:E7:92:7F:5E:48:5D:ED:CA
            X509v3 Authority Key Identifier:
                keyid:8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f3:3f:0b:2a:22:1e:69:fd:1d:7b:d1:2f:d1:3b:cf:ad:82:
         ea:07:68:ae:12:2c:36:0e:fe:4c:31:59:a4:8e:d8:21:13:e3:
         5f:15:1e:3f:d7:04:ed:13:c8:01:ba:75:aa:a8:2f:0a:71:b4:
         e8:cb:c7:bf:39:7b:c7:d9:ba:50:44:9e:75:cd:78:eb:c9:0d:
         b7:46:20:42:e9:fe:9d:e0:d7:6a:c2:e5:a1:90:fa:b8:67:24:
         da:6a:44:22:ca:7b:57:96:d3:a1:e2:55:c0:b6:ea:ab:da:2a:
         82:e8:e1:40:1d:f3:9c:14:78:dc:49:7c:a4:f4:59:a3:e6:cc:
         a7:a2:e7:72:42:22:4d:68:be:62:0b:e8:17:64:95:d9:7e:cc:
         2c:19:db:1b:bd:0f:98:7c:d7:a4:4a:56:49:6d:3a:70:72:9c:
         29:85:57:04:44:96:9b:9b:02:75:2f:b7:65:00:b3:6f:c2:60:
         5c:fe:99:93:ad:0b:c6:00:5d:83:2f:12:73:d1:21:bc:fa:17:
         91:46:04:0d:04:3b:2a:6d:46:33:20:c3:82:88:4d:b1:85:80:
         6f:0d:bf:91:42:25:2e:f9:fd:ed:6e:bf:25:05:1a:d1:2b:b1:
         ca:24:68:fa:e4:03:21:69:fe:1a:2b:6e:38:05:8a:55:78:d4:
         61:3b:61:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----