Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
File:                     8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft (raw, json)
Hash identifier:          bYDO7t1dxhJugaJvM+JKzyrMVBEGkO9aCUNbHZkxAn0=
Subject key identifier:   B7:A2:D5:F8:AD:1C:C8:EE:19:11:EE:3C:6C:D8:F5:24:CC:67:7F:33
Authority key identifier: F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
Certificate issuer:       /CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Certificate serial:       01962DF396F776742877751E8D7E001C27D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 07:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:00 +0000
Files and hashes:         1: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl (hash: ccwjWziYU7ZxQic0O3GMHw9eVpqOHmhmvc9xCoM2/pY=)
                          2: 9iL04rGDZoryywio-gmg9h9zCvU.roa (hash: gqClxkuVstSkbo5JxbBFKE2JBuMbwOG9F1HTwbBvxv0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:96:f7:76:74:28:77:75:1e:8d:7e:00:1c:27:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f210bac96aff25b2aa931c4297446be37ffe2ada
        Validity
            Not Before: Apr 13 07:01:00 2025 GMT
            Not After : Apr 14 07:01:00 2025 GMT
        Subject: CN=b7a2d5f8ad1cc8ee1911ee3c6cd8f524cc677f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dd:f0:ee:89:ec:3d:4b:70:35:dc:81:39:90:
                    17:d8:87:30:8c:a2:de:97:c9:81:ba:e1:8c:c4:9d:
                    3b:43:db:c5:78:a2:ad:9b:77:16:44:27:b3:88:e5:
                    f2:c3:6b:92:90:9a:86:1b:09:92:b5:f7:b0:f7:0f:
                    fb:b0:24:01:37:cd:84:0c:3f:09:3f:aa:e4:79:53:
                    8e:f1:89:a6:aa:6d:d9:d6:3b:55:b8:62:bb:3a:82:
                    aa:b8:6e:59:dc:05:05:9c:79:c2:a8:11:cd:f0:b1:
                    8c:41:d5:6d:12:fa:43:45:e2:20:d2:fa:59:8f:37:
                    6f:3f:d3:6a:0e:34:9c:2f:26:b9:86:be:2f:ed:da:
                    6e:83:87:fb:32:db:40:ad:cf:a9:b1:62:c8:08:e0:
                    de:59:fe:f5:13:57:20:08:b0:08:69:70:9e:39:97:
                    88:c1:8a:8f:3e:97:81:72:7c:c3:e9:cd:b3:7b:66:
                    a9:b4:5e:fb:cd:ac:c3:b4:29:db:1a:4b:9d:fc:10:
                    78:05:93:55:a5:49:46:cf:16:62:68:b0:79:8b:23:
                    65:cc:10:fa:d5:1e:a6:95:88:71:c2:0e:5a:df:a7:
                    ad:84:68:31:c6:ca:95:c9:2a:d9:6d:12:9a:a1:b5:
                    d6:40:82:a2:c1:c2:67:01:a0:ae:79:d9:28:b9:49:
                    3c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A2:D5:F8:AD:1C:C8:EE:19:11:EE:3C:6C:D8:F5:24:CC:67:7F:33
            X509v3 Authority Key Identifier:
                keyid:F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:2c:50:00:ea:a7:74:df:66:64:82:f1:80:1c:0f:d4:3f:8c:
         7e:e3:b0:96:b4:62:f6:23:41:39:46:05:e3:61:35:02:b4:fd:
         f8:d4:82:a7:7c:a7:ee:d9:0a:57:b1:ef:cd:86:6b:70:2b:4f:
         c1:f1:b0:c0:42:be:2b:44:85:5c:60:e3:03:e3:22:e1:5b:df:
         98:7d:f0:05:10:ed:0b:65:b1:0f:d7:21:e5:de:38:4f:20:52:
         26:51:30:fe:8b:a3:fb:b7:74:3e:d0:b3:00:7e:eb:27:ef:d7:
         a6:a3:9e:f0:e9:2d:31:87:7b:bb:43:3a:12:9f:1d:cb:50:ec:
         af:ab:e8:8e:58:f1:ac:e6:6a:c8:b0:9a:05:b8:29:bb:fe:6f:
         05:dc:be:e1:f8:16:fc:d6:29:c3:37:fa:4f:fc:27:92:98:29:
         e3:42:2e:01:ad:76:4a:eb:86:ac:f4:31:b2:52:28:f2:c1:06:
         ec:06:e9:91:f8:0a:87:87:ad:2b:85:c1:38:04:76:70:e0:b7:
         fb:ef:27:13:ea:e0:84:fc:21:a0:16:41:66:9b:67:46:22:2c:
         c9:47:6b:da:eb:18:84:60:c1:de:b4:df:6e:de:cf:01:0b:71:
         9d:1c:2d:b9:27:28:01:48:58:5a:9d:0b:b1:9f:b8:ea:a6:7e:
         1c:af:2f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----