Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft
File:                     j6zLrHFHe5QOXNQQPj7uYdthWRU.mft (raw, json)
Hash identifier:          zv2lHwi+c4hF/O03XnbBe/LdOHHsuo23WHJtbabOWcE=
Subject key identifier:   21:A0:ED:B8:D4:B7:E6:91:F3:8F:20:C2:7D:A2:22:14:76:F3:15:66
Authority key identifier: 8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15
Certificate issuer:       /CN=8faccbac71477b940e5cd4103e3eee61db615915
Certificate serial:       01962F3DA46917934BCD3F7F2219B30626A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft
Manifest number:          030C
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: EKSKrQ1FbAZmq1KtPIW7Uy3IctY.roa (hash: QeMTexv2bHp61zdnXh2g6I+MqFr8HxGSohB7DT8On60=)
                          2: a44sy3HYySYYWzX1Xc0gD8ljcUU.roa (hash: mG+H6uo6FVVDTMv9HhWuPrvRA4BkbeYs8ovYondFREA=)
                          3: j6zLrHFHe5QOXNQQPj7uYdthWRU.crl (hash: zD7FB39PPzDylRXFpUjgl9rpapoVw2y6QKBax8OWFRA=)
                          4: t_igGhLq7IzbkQZnR3SxFZTI3tA.roa (hash: 6dLogSW/OhD3Yu1E3Y4ZKNcTx1tRF0Y/a9V0hhFyQW0=)
                          5: wFmITchCOTh-4_pkSKxt-DBDXmI.roa (hash: 0czxK7spC8QNTMDj8fqbhsYijXl48ZLs3CZRQQWgFNg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a4:69:17:93:4b:cd:3f:7f:22:19:b3:06:26:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8faccbac71477b940e5cd4103e3eee61db615915
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=21a0edb8d4b7e691f38f20c27da2221476f31566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:09:10:6f:6d:a6:a2:e6:cf:72:0f:0a:90:4f:
                    e7:8b:7c:a7:72:1c:14:9d:7b:06:58:5a:db:4a:0b:
                    81:6f:6b:0d:f4:d9:29:07:5e:a0:62:1d:c4:59:51:
                    8e:49:ef:d0:9c:1f:87:95:a9:93:56:fe:e6:f9:9a:
                    53:46:96:5a:40:93:2e:3f:6b:0f:7b:c3:e6:fa:86:
                    56:d3:91:4b:e5:6d:db:fd:fc:af:1f:71:e7:ce:11:
                    ad:8f:e2:a9:29:07:21:69:eb:9c:b4:3f:e2:c5:90:
                    42:30:c7:6c:83:4b:88:d6:96:2e:5c:fb:56:49:d0:
                    79:ea:ad:d3:7c:45:d0:01:ae:db:23:40:4c:17:e7:
                    a7:77:71:8f:46:b3:5f:ab:48:9a:8f:40:92:1a:a1:
                    92:dc:d5:fc:f2:36:dd:8a:99:00:63:a2:78:69:09:
                    47:a0:7f:a8:0d:dd:44:6f:33:35:8d:5d:b6:ba:f7:
                    05:89:54:0a:32:da:f9:f1:49:90:a4:bf:2b:6e:61:
                    4e:ab:9d:a5:3b:b5:7c:d9:4f:15:45:55:9a:55:32:
                    b4:21:23:fc:e2:18:ef:fc:21:66:a0:74:10:01:30:
                    78:28:b5:97:81:9f:85:55:04:7d:98:ee:17:5e:86:
                    05:aa:f7:1b:ce:15:49:b8:e1:8a:01:3a:67:71:2a:
                    a0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A0:ED:B8:D4:B7:E6:91:F3:8F:20:C2:7D:A2:22:14:76:F3:15:66
            X509v3 Authority Key Identifier:
                keyid:8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:65:b6:40:d6:e1:14:50:7f:f7:0e:89:a4:28:81:6b:ad:1b:
         d8:f1:2e:94:c4:1e:a4:8d:21:d3:7d:53:07:86:f1:db:36:34:
         fa:83:a5:67:6c:00:77:9c:55:9d:92:a7:8f:26:38:0e:33:f0:
         b8:8a:9d:c2:cc:49:fa:cb:5a:04:68:8e:e4:97:64:90:ae:58:
         59:f2:18:e2:c7:fb:79:1e:f6:5b:1c:1c:2b:b2:e4:ee:1b:93:
         13:12:eb:cc:98:e6:90:9b:d3:43:d9:73:b1:0d:a7:74:c4:8a:
         a2:a8:6e:bf:73:5e:be:f4:51:cb:60:93:8d:fc:e4:ad:0f:a5:
         73:f7:cc:9a:ff:be:c8:14:bf:a2:9c:e9:fc:f2:be:ba:8c:50:
         d0:74:d6:a1:ac:1a:c5:2d:5b:74:e6:9a:ec:cd:40:76:1f:ee:
         94:bf:93:3b:1b:d3:03:b4:c1:72:44:28:f1:c8:15:df:3b:d5:
         94:9f:da:7c:ce:59:e9:26:85:4d:a5:04:a2:75:91:2e:ba:e7:
         fc:78:c5:16:63:e5:3d:94:2d:4e:7e:19:06:58:88:66:22:f3:
         1d:34:92:f0:ea:ca:48:d4:50:ef:2f:4c:bd:95:0d:93:bd:0a:
         1e:66:07:5d:11:bf:a2:8b:ad:d7:3b:28:ee:2e:16:51:0d:89:
         eb:22:59:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----