Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
File:                     z9whc4iqfpAo3R4EumQpE1LWC-8.mft (raw, json)
Hash identifier:          Smkqdw+Ue7ddClSjY3sXfMMTsoUEhytnShCVvMFSD7o=
Subject key identifier:   8B:3E:AA:71:C8:AF:88:CA:72:A7:9E:E2:B3:02:45:3E:64:BA:9D:CF
Authority key identifier: CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
Certificate issuer:       /CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Certificate serial:       01962E99B20D9490ACB82E0233C3AC16B4F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
Manifest number:          0150
Signing time:             Sun 13 Apr 2025 10:02:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:26 +0000
Files and hashes:         1: ntif6JQzKkt15ZXJfkk8Oj8cYf0.roa (hash: 3JrfUgNRXXI9DKBiBLG/+I75NBSeTwYH7idBMj+gRRQ=)
                          2: z9whc4iqfpAo3R4EumQpE1LWC-8.crl (hash: Ln6whTtwmlsatuIKcyHZEiJGLtadPNoL9fBEY3Au3cs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b2:0d:94:90:ac:b8:2e:02:33:c3:ac:16:b4:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
        Validity
            Not Before: Apr 13 10:02:26 2025 GMT
            Not After : Apr 14 10:02:26 2025 GMT
        Subject: CN=8b3eaa71c8af88ca72a79ee2b302453e64ba9dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3c:bd:c4:df:d9:40:a4:8e:b9:29:36:c4:e4:
                    3e:df:c7:57:3b:42:ae:96:be:ac:f3:a2:9c:d6:3f:
                    78:70:8c:06:ce:f9:21:9d:a0:e0:97:8b:d6:a8:79:
                    d3:66:66:eb:12:7c:5b:79:2b:d2:ef:e1:91:8f:f2:
                    45:5f:de:1d:09:2c:d9:b9:fd:a9:4f:08:d0:b3:bd:
                    ee:9c:e9:61:dd:7b:62:49:21:f8:13:05:55:3a:11:
                    35:51:58:fa:7b:17:3f:08:c0:78:f8:f8:16:62:70:
                    8a:ca:45:a4:31:cc:75:64:3f:ef:b4:a9:91:39:fc:
                    6a:c5:07:ca:58:ee:6d:04:98:28:15:af:11:af:89:
                    01:03:b1:67:02:ad:b7:c0:b1:0f:2f:eb:50:33:77:
                    e1:3c:6b:93:0f:08:e5:2e:2c:83:2c:a8:b2:46:54:
                    66:73:90:0f:7c:42:4d:d1:66:2e:5d:2d:9b:50:cd:
                    5c:1b:ed:85:7f:cf:2a:cb:84:97:f0:0d:26:a7:26:
                    21:3b:03:6b:0c:23:2a:12:a7:6c:13:85:8e:f5:ba:
                    03:2a:d0:63:8d:0f:68:a6:6a:ca:a8:a0:fb:d2:d2:
                    8d:21:a2:d4:8c:70:8c:cc:a1:e9:57:8c:9a:96:dd:
                    6d:4a:65:e1:f7:7d:3d:e2:f4:f4:87:10:39:0c:cd:
                    8b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3E:AA:71:C8:AF:88:CA:72:A7:9E:E2:B3:02:45:3E:64:BA:9D:CF
            X509v3 Authority Key Identifier:
                keyid:CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:7b:25:27:27:c4:d6:0c:52:a7:1a:54:77:f0:ec:c2:88:cc:
         cc:a9:f4:a4:70:63:fb:3c:63:49:dd:6a:68:ed:c9:42:49:51:
         af:da:5d:25:18:81:6f:51:70:46:2e:a9:71:89:81:94:66:d7:
         88:65:00:2d:4e:13:d2:0e:81:a0:d7:0b:b2:ff:b9:2c:b6:1b:
         4a:da:4e:84:13:eb:eb:a3:b8:ff:45:4e:fc:21:04:4f:94:36:
         53:ac:a6:a1:12:d4:eb:ae:aa:e9:5d:ac:76:56:96:5f:d4:5a:
         9e:58:5a:8a:bd:0c:98:bd:ff:59:36:4c:e3:e4:5a:6e:26:b1:
         87:e4:db:9b:59:12:03:91:b0:f8:4e:0b:80:ae:d7:d2:43:b3:
         b7:3d:fc:98:55:cf:01:62:95:6b:91:66:03:bf:90:f0:80:78:
         85:5c:c7:e6:3b:ee:26:09:b8:03:41:d9:47:3c:b3:f0:ae:03:
         a8:b8:28:04:50:65:73:a4:4d:53:d6:98:9e:6c:2f:61:f7:3e:
         02:aa:47:01:0a:1f:25:73:01:44:0f:67:aa:39:51:09:64:f4:
         12:af:6c:91:60:3e:40:c1:7b:bd:4a:22:bc:80:dd:64:ac:dc:
         63:ee:ec:60:26:0f:72:40:b0:a4:04:59:6b:c3:03:ac:98:dd:
         2a:4b:ff:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----