Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft
File:                     jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft (raw, json)
Hash identifier:          qgJ8WOmnmTGGgXgeyqeXC86k4J1UZDW38+XTw0egats=
Subject key identifier:   7D:4F:D5:76:83:A7:BC:EB:D5:BF:9F:24:E1:42:A6:44:19:AB:12:BC
Authority key identifier: 8E:F6:66:91:AD:3A:41:65:2F:5B:D8:59:62:30:B3:AC:74:3D:2A:2C
Certificate issuer:       /CN=8ef66691ad3a41652f5bd8596230b3ac743d2a2c
Certificate serial:       01962F74498BA0AB8AE7CEA42170E53B541E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft
Manifest number:          07B8
Signing time:             Sun 13 Apr 2025 14:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:12 +0000
Files and hashes:         1: 77vVEL7CocmnGitjx5dXVYLrTuQ.roa (hash: i9B/qaeP87J9J5JpL+2kypBNesifUR27FqkoSV77b5g=)
                          2: ZqkZ-ptbKplSamN_ahWuL-lHnJ8.roa (hash: irGPnE0iOTBsb5GQGAY7EsHYbFxfevPkFPknKA/OeLU=)
                          3: bvq2TvsXGCpwsRtYYj9XhUdj7S8.roa (hash: 0OdaxmIU7MNYz6wrZ5iFIQ/7cslJJKx/JZhNVBtuYqI=)
                          4: jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl (hash: wbh+3jyx0hX1t1+aMr6epYSM+WxWPzVkP1DN25Ujyw4=)
                          5: m3ntsGfgdnDGCMt-rflzxFG_JnA.roa (hash: q9gBjMOYNP/zGmo2wuYydWBWqzVkvYiKaSBdRO8K4Uw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:49:8b:a0:ab:8a:e7:ce:a4:21:70:e5:3b:54:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef66691ad3a41652f5bd8596230b3ac743d2a2c
        Validity
            Not Before: Apr 13 14:01:12 2025 GMT
            Not After : Apr 14 14:01:12 2025 GMT
        Subject: CN=7d4fd57683a7bcebd5bf9f24e142a64419ab12bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a7:93:06:35:d9:4a:2a:db:a6:c5:5d:87:86:
                    d2:3a:03:88:1c:e8:6c:68:33:a5:40:ba:f6:1d:2b:
                    29:0d:c3:98:66:3d:4a:f5:6d:30:e7:77:f0:a0:48:
                    e6:34:34:69:b8:4d:68:bf:59:ca:14:3d:92:4e:d3:
                    13:15:90:41:7a:12:47:5a:4f:c5:27:be:cd:e6:e3:
                    29:e4:2b:e9:3f:a1:02:b3:f0:55:cd:73:68:00:7a:
                    a3:9b:95:f8:37:55:59:3b:6b:9f:39:c5:62:8c:34:
                    8e:93:64:fe:70:c1:43:37:bc:c2:db:ae:44:8a:ad:
                    5a:82:10:c7:b2:13:31:4e:48:a8:32:29:8e:7e:e4:
                    a1:68:ba:13:89:d3:6b:66:ed:c7:e2:79:68:82:2b:
                    3b:1e:61:a8:92:8d:73:e4:4b:b1:fd:07:e8:f8:df:
                    ed:36:fb:c9:f8:f7:ff:06:b5:8f:e3:12:36:98:8a:
                    55:9d:24:70:da:77:b9:6a:45:dc:71:19:20:55:8f:
                    43:12:60:fd:83:7d:86:5e:f7:b7:4a:79:de:ea:6d:
                    05:c0:9b:4a:1d:64:06:da:a6:06:cf:c9:74:8c:3b:
                    45:95:74:b1:80:61:18:81:d2:0a:a6:aa:ca:b5:90:
                    ec:c1:5f:8a:46:c1:83:76:72:54:a9:d1:06:f5:33:
                    2c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4F:D5:76:83:A7:BC:EB:D5:BF:9F:24:E1:42:A6:44:19:AB:12:BC
            X509v3 Authority Key Identifier:
                keyid:8E:F6:66:91:AD:3A:41:65:2F:5B:D8:59:62:30:B3:AC:74:3D:2A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:90:43:e5:27:9c:c3:34:2c:30:b2:2e:ba:ca:2c:23:ad:62:
         c9:7f:fb:ec:e4:24:1c:51:43:46:d9:ba:09:6d:5f:ba:22:07:
         7d:50:6b:05:47:99:88:3a:a4:9e:53:25:a5:ad:da:5b:8a:7f:
         37:8a:95:3b:95:fa:56:6c:f8:57:c6:c2:71:6a:02:d3:31:b8:
         a6:34:6e:b1:9b:5a:e2:03:4b:1e:3d:77:70:d6:20:67:bb:d5:
         6f:4b:08:c3:a3:1f:6a:68:59:12:91:37:56:f9:d1:e6:06:cb:
         86:f4:b9:8e:b5:08:4d:ad:90:01:47:38:6f:38:1e:06:f9:76:
         74:ea:4f:1a:d8:40:8f:86:14:5b:72:be:65:6f:2b:64:b5:27:
         4f:4e:3d:70:5d:95:6b:d9:ed:17:df:0a:78:88:ac:61:33:78:
         a2:ec:ac:cb:ac:25:6a:47:6e:2b:f2:51:ac:74:9c:44:f6:4f:
         05:92:b2:34:b4:dd:6a:8e:30:51:1c:48:c0:f1:50:c4:5a:08:
         d3:6b:8d:ba:63:ba:5f:88:6c:03:24:44:18:c6:40:e5:c5:48:
         d6:69:b0:b6:71:59:9b:2e:47:ed:18:4f:cc:e5:d4:af:5e:56:
         dd:ed:6f:97:3d:f5:5a:9c:ce:17:6b:d5:4c:69:ca:61:13:99:
         4f:6a:65:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----