Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File:                     jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier:          dDOk/vIhOgMGBTeLMi4O0DZAw2H7IyZrHs6SOxZJqf8=
Subject key identifier:   3C:66:19:97:F1:95:18:FB:B7:78:99:09:0F:AF:6C:DA:22:5E:DD:99
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer:       /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial:       01962F74C318177B4B2E1DE40781E7CA3270
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number:          0101
Signing time:             Sun 13 Apr 2025 14:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:43 +0000
Files and hashes:         1: 2a4uGqXqRLFwxkrNzW_s6-qnGXE.roa (hash: goHZck25hCom6tNMtTpOVgal0/zlXu42ccbA4cfzVE0=)
                          2: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: qZYa9yV94pMWFiOEnFLBzO1ncuTLJsXQJINNg4z+0Ec=)
                          3: kFOw0UjGI7qti8qa1uAUEOsP1Y0.roa (hash: 3Ka4QMk7D3J6EIhtUeiuaJXa58kFmA+7bZN+m672Gvo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c3:18:17:7b:4b:2e:1d:e4:07:81:e7:ca:32:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
        Validity
            Not Before: Apr 13 14:01:43 2025 GMT
            Not After : Apr 14 14:01:43 2025 GMT
        Subject: CN=3c661997f19518fbb77899090faf6cda225edd99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:57:14:d5:1b:6d:3c:d2:b2:3d:d3:aa:cb:c4:
                    37:60:92:04:85:c2:0b:39:86:ba:f9:4c:2c:86:69:
                    dd:e6:9b:0d:a8:5b:ff:a8:f9:21:9d:79:55:5d:e5:
                    95:06:b2:3f:33:9a:af:b9:32:c2:60:9d:e1:96:30:
                    46:96:96:74:fb:5a:50:23:46:63:53:4f:17:e3:57:
                    be:62:2a:0b:02:48:cb:b7:1f:8a:43:aa:fa:e9:ac:
                    d3:58:12:98:30:9c:97:4a:08:3a:45:23:67:e6:a9:
                    fd:66:01:23:ae:f0:27:b4:67:a7:05:66:09:18:d9:
                    bb:2d:b4:ff:0a:cd:36:c3:18:9a:b2:0f:0f:b3:8a:
                    65:c9:69:32:d6:71:1a:f3:80:45:a5:8a:3c:cd:9a:
                    44:29:fd:43:20:f6:9a:fe:b8:3c:ef:56:22:c2:ce:
                    c9:34:56:ad:55:8c:5e:22:1a:8b:35:6e:7b:ff:a6:
                    05:ce:60:6c:d6:f5:dc:56:c0:4a:bb:d2:60:1b:c6:
                    ae:7d:8d:ff:a7:cd:35:7a:44:03:d5:a3:c8:88:22:
                    7c:7d:8e:d6:f7:ad:a1:c8:6c:d6:d5:42:1a:01:bb:
                    81:b1:e4:a3:e5:16:9e:32:c0:05:be:b4:85:aa:5d:
                    9a:4a:ae:4f:c8:ac:15:04:71:5f:70:6a:e1:93:7e:
                    9f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:66:19:97:F1:95:18:FB:B7:78:99:09:0F:AF:6C:DA:22:5E:DD:99
            X509v3 Authority Key Identifier:
                keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:39:7c:b2:8a:1a:a1:21:e7:7d:ad:19:64:6e:3e:02:26:f6:
         0b:11:97:52:45:74:a6:f3:61:48:58:24:0f:93:c4:b9:3a:01:
         88:81:8d:5a:0f:6f:d9:bb:66:f1:fa:5a:9a:16:8c:89:e4:57:
         b4:dc:13:f3:fc:c6:c3:59:d9:8e:6c:5f:93:79:ce:1b:fd:db:
         6d:1b:dd:9f:06:ec:6c:83:3e:2f:11:32:bc:c4:b2:6b:dd:9d:
         31:e2:3c:7e:f3:9f:56:5b:b2:4d:4a:4b:b8:d4:6f:c6:11:23:
         ac:29:e8:40:6d:68:19:ee:dc:15:26:6c:cd:38:e9:79:6a:62:
         30:8e:94:e4:05:99:53:fa:47:cb:0c:ab:7b:cc:2b:fd:d6:80:
         51:c3:45:db:13:f3:39:db:ba:e9:1e:6e:af:08:2b:d9:2b:e9:
         e3:ce:7a:60:10:36:f3:67:e8:ce:d7:20:81:35:51:01:45:84:
         c6:37:86:b8:a4:16:23:93:64:95:7c:30:06:c4:83:17:8d:19:
         dd:15:1b:4c:a4:21:6d:14:7c:d9:61:6b:fd:55:f9:29:54:8e:
         5c:bd:54:ac:be:cd:2a:dd:ae:f7:63:2c:ab:79:d7:53:69:e2:
         25:90:bb:c8:ca:ca:b1:6f:fc:cf:f8:29:42:51:ac:4a:01:6f:
         2d:55:15:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----