Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
File:                     8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json)
Hash identifier:          84nMTfzdw7adnNGmH3S4u85qzTac562F7mhqGH1SQLo=
Subject key identifier:   7B:CE:9A:01:A7:83:71:07:9B:55:58:37:F8:73:8B:AD:FD:E4:65:94
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Certificate issuer:       /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial:       01962E2AB8B8C958BF5996F5436C93C03C1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
Manifest number:          0EFD
Signing time:             Sun 13 Apr 2025 08:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:13 +0000
Files and hashes:         1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: R8sNRdXwr+lIGKsUZUelPdvikPbDQshzQJkzWbtpupM=)
                          2: rPbx58T-x5ORRRx0tEYr-rx7t3U.roa (hash: vSn+krLvdIPvrWL0ipO2XK8jiZxa1ds2oZDzxWzd7dE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:b8:b8:c9:58:bf:59:96:f5:43:6c:93:c0:3c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
        Validity
            Not Before: Apr 13 08:01:13 2025 GMT
            Not After : Apr 14 08:01:13 2025 GMT
        Subject: CN=7bce9a01a78371079b555837f8738badfde46594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f6:d3:5a:0d:14:9d:b4:81:47:f0:2d:ce:ec:
                    dc:fe:60:98:04:03:d7:fe:d2:24:7f:ee:32:7b:12:
                    96:4b:49:84:0e:29:9d:3a:c6:6c:92:54:78:0a:3c:
                    cc:eb:51:5c:5e:65:59:0b:c3:f3:c5:07:aa:f2:4d:
                    a5:8a:6a:97:8d:95:8f:47:ea:63:78:1f:69:80:5c:
                    94:c2:5e:cc:13:8a:0c:95:30:05:5a:3e:d3:e2:82:
                    fa:96:fd:e7:14:0d:14:4d:c3:8c:38:a8:1e:64:60:
                    3a:0f:d2:4a:bf:be:0f:a2:d0:e0:d9:e9:e6:e3:7c:
                    0a:1e:53:0a:e4:53:43:58:b0:ae:99:cd:36:ba:8b:
                    c7:62:67:ea:3f:86:18:e9:d0:bc:e3:c2:1a:5a:3f:
                    91:a2:27:1c:e4:87:e4:6c:9b:21:8b:ea:99:c7:16:
                    22:94:1e:18:cc:db:a1:a6:b0:03:23:51:3d:45:81:
                    a6:97:b4:ea:38:3b:9e:53:1d:14:9e:b4:23:a1:4e:
                    55:0a:69:33:89:73:aa:6c:84:79:32:c6:75:4e:85:
                    aa:43:e2:b5:c0:7a:a5:8e:b1:0f:21:e1:5e:ba:c1:
                    98:80:15:24:de:46:fb:15:4f:05:ce:46:6b:26:06:
                    78:e6:92:b9:b0:c5:b8:ef:ac:47:66:f7:a3:16:3e:
                    5d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CE:9A:01:A7:83:71:07:9B:55:58:37:F8:73:8B:AD:FD:E4:65:94
            X509v3 Authority Key Identifier:
                keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:23:5a:1a:f8:42:cd:34:25:d6:85:60:88:f6:52:6c:51:56:
         c6:a9:e1:bb:2b:3e:8f:e4:5f:18:c5:fe:8c:a4:e5:4e:2a:af:
         81:78:1f:cf:67:2d:42:c7:cd:4f:28:e5:76:c3:81:2e:bc:58:
         ea:ad:d2:21:58:e4:6e:5e:88:79:d8:0f:f3:b6:4e:9d:ce:a2:
         04:0f:62:ad:f5:fe:33:cb:14:f2:68:0d:64:60:67:fd:3d:07:
         ff:78:a7:4e:85:5c:43:32:75:e1:0f:da:ec:b8:12:0a:dc:fb:
         80:2e:ed:ea:71:8b:fc:45:a7:87:c1:c4:6c:d0:51:e1:a5:b2:
         42:44:4d:71:36:fa:f4:f2:3c:e1:a8:f0:00:79:35:33:3d:b3:
         c6:91:69:cf:a9:f0:1b:f8:99:a4:97:3d:fd:ee:9c:d3:95:bf:
         c2:5f:a1:e3:f2:78:d1:b9:76:33:2f:25:9c:39:0b:02:d2:95:
         46:c4:6d:39:e9:a8:3e:c4:7f:65:d9:db:c6:7e:ee:3b:d2:2b:
         e8:67:72:3c:37:17:27:b7:69:00:f6:f7:f1:a1:03:9c:ab:b0:
         27:5d:1a:93:9e:9e:7f:e5:53:84:7d:80:8b:78:52:59:7a:ad:
         e6:4d:03:67:8a:8a:50:72:11:3b:0a:56:dc:04:87:f2:bd:37:
         e9:82:b0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----