Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
File:                     8oB_KA2plWnsokNGur6dyFrBMkA.mft (raw, json)
Hash identifier:          O67AQ73hDQKzrYCDJu7XfB2cRnqIVfRBgqpY+LgUb78=
Subject key identifier:   2E:DA:A2:5B:53:46:3A:1D:38:72:E1:AB:34:55:16:B1:99:F3:CF:3F
Authority key identifier: F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
Certificate issuer:       /CN=f2807f280da99569eca24346babe9dc85ac13240
Certificate serial:       01962F74D393D1FACE5930FB7A92DFEDFF0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
Manifest number:          102C
Signing time:             Sun 13 Apr 2025 14:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:47 +0000
Files and hashes:         1: 8oB_KA2plWnsokNGur6dyFrBMkA.crl (hash: WXUVmAr36zYANN4JPxlX0THE9QpP9gqY6HaXkT2qDCU=)
                          2: RxiVRcsHeclsIn7rqDibVKMm4qY.roa (hash: RdPDIHwu5UxKtKljTR4KLIRVl+B3RPcwmBVzbEhliKU=)
                          3: n1BFonHtDGvA8w45LaQUVIMy610.roa (hash: UPpZGSFwSh5u0Vmh3TPpTDA5brKnQclTUnn56OlMfIA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d3:93:d1:fa:ce:59:30:fb:7a:92:df:ed:ff:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2807f280da99569eca24346babe9dc85ac13240
        Validity
            Not Before: Apr 13 14:01:47 2025 GMT
            Not After : Apr 14 14:01:47 2025 GMT
        Subject: CN=2edaa25b53463a1d3872e1ab345516b199f3cf3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:18:b0:13:6f:a2:95:b6:68:19:91:f5:75:2c:
                    3f:45:d1:10:9b:bc:13:fe:12:1a:83:c9:60:69:68:
                    1a:51:39:34:8f:ee:2e:69:f6:71:d9:1d:bd:b4:ad:
                    6f:dc:01:8a:1d:cf:0c:b4:ba:48:28:01:c0:27:b3:
                    3d:91:92:4f:7c:f4:8b:26:ee:92:3d:30:cf:f3:7f:
                    73:63:fb:69:2d:56:41:c5:f6:4c:fb:36:22:40:60:
                    50:15:3c:7b:f8:98:7a:19:91:b7:b7:0c:53:23:ff:
                    48:c5:4b:d3:3f:99:ea:4e:37:4b:74:54:90:c4:cf:
                    0b:95:05:b3:f9:92:91:36:02:1f:8e:75:98:e6:9a:
                    fb:d8:ab:2f:39:d4:b2:b2:ac:a1:23:47:f3:5f:cf:
                    e9:94:1d:4d:c8:00:d7:3d:c2:b1:2a:0e:bc:43:d6:
                    38:09:a1:37:0a:22:ae:a9:06:99:a0:da:65:7f:a3:
                    e3:6a:fe:59:2b:14:e3:11:b7:81:eb:61:72:0b:b6:
                    ca:63:5f:db:23:23:48:38:38:ce:f7:5c:b2:bf:58:
                    f4:76:22:0d:7e:af:96:31:56:6f:87:2f:2e:33:2a:
                    55:3f:30:16:66:94:4e:ae:b3:61:16:b1:3f:3f:6d:
                    5c:60:fe:9f:cd:62:2e:db:91:d7:7e:2e:da:4e:03:
                    74:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DA:A2:5B:53:46:3A:1D:38:72:E1:AB:34:55:16:B1:99:F3:CF:3F
            X509v3 Authority Key Identifier:
                keyid:F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:5d:3b:21:ca:3f:8a:d0:57:5a:7b:40:94:6c:50:f8:75:74:
         55:89:bb:14:57:cf:2f:1d:16:94:6d:a0:14:bc:04:2f:fd:b1:
         64:2e:e5:18:2f:09:07:47:7e:5a:07:c6:2f:eb:5c:e0:5c:6b:
         30:52:64:ce:d8:87:33:c5:a1:d5:20:3e:54:44:c6:33:c3:13:
         92:c3:af:fc:09:ed:92:ec:18:67:53:1e:89:47:cb:36:c0:93:
         30:8e:34:c1:9d:75:e7:d2:ad:c2:68:99:cf:d9:54:c5:c9:9e:
         91:ef:f4:b3:41:fb:39:13:29:0e:9d:91:bc:12:a1:7b:a8:c4:
         dd:68:12:bf:ba:3f:7c:e8:9e:e6:9c:b3:47:b7:2b:f5:f0:81:
         54:92:50:fa:7c:d9:c8:30:ed:b1:34:f7:99:1a:f2:15:72:b1:
         d8:df:16:8d:0a:2c:ef:3d:63:ee:3b:3b:86:c0:ec:39:20:a0:
         dc:4e:a5:67:41:aa:b3:b7:55:af:86:cd:6f:bf:c1:41:40:ed:
         1f:34:14:e3:3a:99:8f:59:5e:2b:c6:2c:05:0a:3a:9c:39:a2:
         d5:0e:0a:45:8e:44:b9:d3:9f:0a:da:82:32:6f:5e:a3:0e:61:
         93:12:dd:ac:64:73:2e:46:d9:2f:81:4c:0b:96:7c:57:a9:7a:
         c5:3b:66:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----