Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
File:                     8XShpC1Ap_uCpsCM6XZRy2ar83A.mft (raw, json)
Hash identifier:          +358QWan4ZS3544h4IwQab/p7q6+eyRSHH1JIHJnCTs=
Subject key identifier:   80:7D:02:5A:45:F9:2D:71:03:BB:B6:E5:4F:9C:DD:7C:2B:46:2B:0F
Authority key identifier: F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
Certificate issuer:       /CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Certificate serial:       01962F0715F5868B61082003265AA259262E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
Manifest number:          08EA
Signing time:             Sun 13 Apr 2025 12:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:55 +0000
Files and hashes:         1: 8XShpC1Ap_uCpsCM6XZRy2ar83A.crl (hash: LRehL8Gw9/o7DBQwPS2jAKKLMl/1JkHECm32HpS1TjM=)
                          2: Jzc1N5JK_K9rsqLLazjrhQAzn9E.roa (hash: c37u7+7V7zO9cUACPw1X9wuITqfc2J+4zg3NEuS9Gzw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:15:f5:86:8b:61:08:20:03:26:5a:a2:59:26:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
        Validity
            Not Before: Apr 13 12:01:55 2025 GMT
            Not After : Apr 14 12:01:55 2025 GMT
        Subject: CN=807d025a45f92d7103bbb6e54f9cdd7c2b462b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:41:5c:a7:9e:21:d9:61:22:de:9a:c8:00:a5:
                    d5:fd:4b:d9:19:b8:94:6e:b2:e3:a7:5a:75:ec:89:
                    20:7d:5b:13:b1:7d:22:a1:96:ea:c6:e3:90:26:72:
                    80:84:5b:97:92:9a:12:cb:30:47:c5:80:b6:b9:97:
                    f4:58:c5:6e:80:02:66:6a:99:c7:ea:56:2a:c1:24:
                    44:3a:f9:bf:35:89:24:4d:af:bf:b5:11:f4:85:34:
                    c1:11:1a:b2:88:24:8d:95:3b:4e:37:d2:e5:4c:91:
                    12:5b:84:a4:9a:04:c5:6b:35:08:b3:87:b5:08:40:
                    a3:1f:69:6e:c3:ac:d9:a1:a9:3c:34:67:81:a7:d0:
                    bc:d2:98:cb:ab:96:f7:ae:d9:79:0b:b0:d4:5c:a0:
                    84:c4:e9:c7:d2:fd:1c:9b:b0:f7:e3:62:ab:b6:79:
                    ca:4e:37:a0:4b:66:e4:8e:da:f4:32:ec:61:1c:d7:
                    41:4a:7e:88:48:76:b7:bb:fc:87:5a:f5:e2:98:3c:
                    82:84:75:f7:d7:90:e5:6a:d7:e9:6f:10:64:e9:9a:
                    e6:e7:fd:e5:ac:87:d2:a1:f9:27:18:40:c8:58:b8:
                    45:74:2d:cd:86:b8:a2:f4:e1:2c:ae:95:d4:9e:64:
                    b5:f7:c2:e1:88:ad:b3:26:48:ef:eb:46:5b:67:1b:
                    37:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7D:02:5A:45:F9:2D:71:03:BB:B6:E5:4F:9C:DD:7C:2B:46:2B:0F
            X509v3 Authority Key Identifier:
                keyid:F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:5a:c7:59:d8:26:f1:61:5d:d7:2d:3d:7a:57:a8:a5:f8:04:
         87:70:cc:7f:06:d1:3b:47:7c:17:af:39:ac:e4:dd:74:2f:cc:
         b7:9d:77:0e:86:92:58:9f:a7:09:03:5e:9e:5b:4c:ca:75:67:
         f3:48:5a:8c:d5:c9:72:59:ed:b2:8b:c2:9f:a5:c2:f6:f7:fd:
         33:32:5c:a1:16:25:f5:1e:6b:3f:5b:36:db:22:e0:ff:42:f3:
         03:22:6d:47:01:6d:b3:0c:aa:c2:52:af:f5:82:bd:1f:f8:c1:
         ac:c1:2e:c5:63:e9:c7:7a:ca:3a:e9:7f:b0:a2:f6:0f:dc:66:
         14:02:a6:f6:57:78:6f:14:f6:1f:44:d5:e1:36:2e:af:2b:37:
         8d:09:01:2f:e5:20:5b:c5:e3:5b:25:60:e7:5c:9d:6d:14:14:
         82:45:e0:2a:ea:5f:be:b0:fc:bb:c2:d4:7b:54:bb:d5:be:9c:
         98:b0:4a:48:48:49:85:6e:78:58:88:97:67:c7:9d:46:15:fb:
         d5:ea:db:cf:d9:7b:a2:f1:86:b9:98:65:40:04:10:e8:2e:47:
         87:6e:b5:ab:de:85:20:13:6b:b7:9e:e1:80:0f:fc:4a:27:29:
         7e:49:2b:66:af:85:a1:2e:fb:a1:3c:dc:53:1f:74:ee:96:94:
         bf:c8:83:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----