Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
File:                     0-jUy45ELsOKa8P6QAoqUXzuDR4.mft (raw, json)
Hash identifier:          ZlOo4LfVmoaJbBUUzckqYpD16zagV7FlOpTl1HhzgKk=
Subject key identifier:   6C:3F:4B:CF:5F:1C:6B:02:8A:1A:24:69:8B:DC:78:C9:0A:0E:2E:AF
Authority key identifier: D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E
Certificate issuer:       /CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
Certificate serial:       01962ECFDB56C943982F16F33BE937DFAD59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: 0-jUy45ELsOKa8P6QAoqUXzuDR4.crl (hash: jFAotLLL5MhZEfGJgXF7UHuL0FQBZ1H2u1bYu/8Mn0M=)
                          2: 814d1F1Lpiv2ZmQt3nv-Q0MhR14.roa (hash: vJZyCty8aaf+QpA3OskD2b+GSFI6e+26K8I9XWLd+A4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:db:56:c9:43:98:2f:16:f3:3b:e9:37:df:ad:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=6c3f4bcf5f1c6b028a1a24698bdc78c90a0e2eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:35:57:f5:0b:ab:da:21:74:7d:b2:26:7b:e0:
                    b5:4a:76:38:5f:a9:22:bb:eb:8e:cc:9b:fa:f5:70:
                    bc:35:0f:12:3c:29:11:14:d5:a5:c6:1e:79:b5:01:
                    f5:be:60:fc:9e:f2:dc:44:7b:e6:a0:e9:5f:9e:9a:
                    63:c8:10:af:a6:d5:95:fd:d5:79:b8:fb:db:84:a2:
                    fd:93:6b:93:52:5b:fa:ae:17:58:71:3f:d0:50:d5:
                    35:21:1b:b5:2c:79:e3:9e:fb:f4:7f:72:c3:fc:d0:
                    4d:fe:25:d0:a0:4f:db:bb:40:ab:0d:00:88:af:12:
                    df:31:ef:d9:78:68:eb:48:29:2e:57:73:77:a5:40:
                    47:63:e9:7e:bb:40:de:af:ae:b8:b1:c7:54:be:d3:
                    05:2d:98:dc:6e:a5:6a:05:ba:99:3f:24:05:aa:6c:
                    a3:57:e0:e5:b7:76:85:8e:41:bb:a2:27:00:ea:41:
                    a2:dd:b0:3d:6c:d2:98:04:f8:e7:90:e9:d5:1c:43:
                    c9:5f:81:28:ee:ee:4e:7b:82:0e:4a:02:fa:62:05:
                    22:d4:b5:20:f4:4b:e7:d8:71:55:7c:36:ac:48:b9:
                    17:59:b8:65:4f:6f:e1:a4:4e:ce:42:e2:b7:43:b9:
                    6c:d5:6e:8a:d7:80:4d:18:80:b4:bc:de:ff:22:c2:
                    99:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:3F:4B:CF:5F:1C:6B:02:8A:1A:24:69:8B:DC:78:C9:0A:0E:2E:AF
            X509v3 Authority Key Identifier:
                keyid:D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:34:57:bd:b4:55:32:ec:ef:85:fc:55:fd:54:31:18:92:e1:
         09:97:13:7c:38:43:32:8d:04:85:e6:f3:28:ac:d5:6c:f2:e4:
         72:d5:9d:44:c6:2a:3e:ca:3d:f3:7f:8a:24:97:f5:21:e0:4c:
         4c:04:a7:0b:e0:09:8f:47:03:c4:42:50:4a:63:f2:99:87:f2:
         91:a3:86:0b:d1:72:81:54:e1:d6:9a:0e:36:2a:4f:21:2a:ab:
         81:fa:39:a5:ef:72:58:c0:1e:0b:bf:34:05:50:eb:3d:1f:40:
         28:65:e2:ae:63:2a:41:69:7a:35:6a:a3:da:87:e3:17:8e:f4:
         74:0b:5c:94:bd:5e:56:40:61:50:9d:44:8c:70:78:0b:88:e3:
         ff:f3:0d:8a:ac:d9:0e:f5:fe:9a:ac:c8:a3:3a:9b:f6:f3:1b:
         b4:31:94:81:80:6f:6f:ec:17:65:66:9b:98:ad:06:04:98:80:
         34:20:0f:f0:9d:92:94:d6:90:9c:e8:9a:b9:b7:15:92:04:0e:
         64:78:02:9a:47:5e:75:23:08:90:ea:a2:cb:61:78:98:38:26:
         72:47:60:96:5a:30:23:1c:a8:10:20:cb:39:20:67:5e:8c:ca:
         f1:b7:db:cb:ba:58:d9:32:29:01:86:2e:aa:d9:ac:29:33:59:
         54:aa:58:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----