Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
File:                     8KMtISmjhsmgr9u5FeDb8TC6cNU.mft (raw, json)
Hash identifier:          YdmZGBMoVygX50JnpKTqraTO93xV2tKL6MtS3LV/NIU=
Subject key identifier:   85:FB:4A:7D:49:14:95:BB:6B:32:D4:2C:0A:7B:8F:CE:FE:F0:B3:96
Authority key identifier: F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
Certificate issuer:       /CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Certificate serial:       01962DF3B1576D1DFD7C3BBB508B6E179BA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
Manifest number:          06E9
Signing time:             Sun 13 Apr 2025 07:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:07 +0000
Files and hashes:         1: 8KMtISmjhsmgr9u5FeDb8TC6cNU.crl (hash: jljECJB5VNQiBSmf1NUEoDsCgqsWXma6/rtxUE7Dx5I=)
                          2: jB8O0EexbXRJ48aM1Kli0Ktl1vI.roa (hash: IcThWozF746RiVAe4jDaPPGv0zWnJg0lyhHJVcObykM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b1:57:6d:1d:fd:7c:3b:bb:50:8b:6e:17:9b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
        Validity
            Not Before: Apr 13 07:01:07 2025 GMT
            Not After : Apr 14 07:01:07 2025 GMT
        Subject: CN=85fb4a7d491495bb6b32d42c0a7b8fcefef0b396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7b:5c:f0:5b:1f:fa:0a:f8:f4:3e:14:60:5c:
                    c6:f6:b8:13:40:b4:d2:80:d0:78:a9:7c:ae:b4:7a:
                    a3:b0:ec:c0:03:bb:07:91:c1:11:3e:af:62:eb:38:
                    ac:8c:d0:41:b3:cd:0b:b0:97:da:2f:11:f5:8e:4c:
                    98:0a:15:d1:8a:63:c0:06:c8:d8:38:4c:f1:02:6d:
                    96:8c:08:b0:95:11:0d:cf:e0:bd:b3:82:51:9a:81:
                    8d:d5:b8:11:c7:5d:b7:b4:cb:45:6c:18:a0:e1:8e:
                    e7:86:10:b0:42:60:7d:12:b1:74:10:4e:f3:c2:06:
                    d7:b8:74:47:6c:af:ad:19:fd:eb:a6:a7:42:88:c9:
                    82:86:ab:da:96:1b:3f:53:8f:e2:e0:8c:19:ce:ef:
                    b0:4d:f4:57:bf:e8:ea:41:a5:2b:19:e2:d1:7f:18:
                    b1:d5:88:ae:b1:10:37:bd:b6:04:60:fa:77:1f:52:
                    8b:f6:1f:0e:91:b8:b9:25:f7:7f:ef:06:59:b2:a4:
                    2f:f5:ba:b9:af:1d:2a:d8:fd:cd:37:f5:d5:ed:11:
                    0f:87:9f:cb:24:9f:66:60:c4:fb:3a:f0:35:e6:3a:
                    25:dc:8e:7f:6d:fa:a2:10:e4:6c:42:82:4d:b5:84:
                    6e:06:b6:cb:d6:52:02:e1:6c:06:30:a5:e1:ed:be:
                    7c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FB:4A:7D:49:14:95:BB:6B:32:D4:2C:0A:7B:8F:CE:FE:F0:B3:96
            X509v3 Authority Key Identifier:
                keyid:F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:16:d9:51:16:2b:c4:3f:cf:12:4a:a3:3a:86:b4:29:c6:34:
         ae:a3:b9:66:df:94:75:2b:82:3b:ed:1d:cf:54:68:0c:f8:5f:
         69:8f:d0:fa:47:3c:cc:4e:38:60:c0:dc:b4:bb:c1:c6:8f:fa:
         18:11:7c:37:d6:38:4a:80:3d:94:6c:1b:52:d0:75:c5:76:f7:
         e9:89:fd:71:8f:99:25:3f:50:fb:10:fd:ef:ac:bd:f3:83:43:
         1d:a2:64:95:b9:1a:fd:0b:62:4f:d7:90:0d:45:de:63:75:29:
         b7:73:bb:30:51:e4:7b:23:0b:f5:7f:a5:18:b2:55:a1:01:bd:
         9f:18:e4:6a:8f:c8:1c:f6:7d:d4:05:92:44:47:97:59:f5:a6:
         ce:b4:3d:2b:5d:44:8a:d1:a8:b6:8b:d5:ba:68:f5:07:92:8e:
         58:c5:11:b5:c4:d6:36:53:64:e3:2d:87:aa:4d:7b:ad:68:00:
         1d:8e:8a:5c:32:dc:eb:c9:30:b9:44:71:ed:b9:bd:77:79:0c:
         3c:f1:40:5f:05:96:bc:58:f3:c8:4a:02:72:a6:ee:8a:60:ad:
         1e:a0:f6:25:d4:eb:66:dd:5a:e7:91:50:59:7a:a5:77:8d:dc:
         ab:ee:58:a6:18:28:8b:01:2e:c4:1f:7e:cb:e7:d2:58:7d:4a:
         cd:28:b7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----