Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
File:                     8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft (raw, json)
Hash identifier:          n1dMsuMZNUo/dok3NkYoVcTwqys2PKLuYEl3A+i0H0s=
Subject key identifier:   62:0E:18:BA:87:2D:EC:0E:36:06:34:CA:D9:55:F0:6E:B0:6E:D3:EB
Authority key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
Certificate issuer:       /CN=f3211d2ecd60924ef2276f86939b070c0081574b
Certificate serial:       01962F74AF566EBFCC54389F4954A5D863F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
Manifest number:          E0
Signing time:             Sun 13 Apr 2025 14:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:38 +0000
Files and hashes:         1: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl (hash: UMI0mMB0KSW1uwVTKNEwSCcksr/bvRZ6V6EHlOa5ZmQ=)
                          2: J84DjEhi_gEyD8-a87brecsYsNM.roa (hash: A66a3xMstZT0T3ni5nfFwwrP4QVYA3zVnvHKSfI3TDI=)
                          3: yitip1-kJD5dQRdS53t4KfkARHM.roa (hash: cgy9OckdIOJNSQ5+HtqFQg4ACHdIPiP47DMcF7GV8yY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:af:56:6e:bf:cc:54:38:9f:49:54:a5:d8:63:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3211d2ecd60924ef2276f86939b070c0081574b
        Validity
            Not Before: Apr 13 14:01:38 2025 GMT
            Not After : Apr 14 14:01:38 2025 GMT
        Subject: CN=620e18ba872dec0e360634cad955f06eb06ed3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b2:ce:82:cf:69:36:67:d3:3f:95:8e:ec:7f:
                    bb:9a:9e:31:9d:84:0f:55:b7:17:3f:98:67:d3:db:
                    62:10:29:30:c7:f5:07:d3:7b:1f:1e:73:e3:62:18:
                    85:2b:f1:28:fe:7e:2a:c0:c8:a8:2f:55:23:35:8e:
                    3b:e4:ef:e6:eb:f9:27:bb:ea:69:81:60:c4:e0:be:
                    a2:d7:03:df:af:c8:ac:92:f0:3b:fd:d3:53:37:7c:
                    df:b2:19:f1:5b:5e:4b:94:b2:06:e7:47:a9:5d:27:
                    07:4b:d0:3d:f7:53:f6:22:5b:5f:34:f1:b8:83:0b:
                    47:5d:72:a5:ec:a6:a9:42:4c:68:eb:a9:75:67:5b:
                    c6:5b:f6:65:4a:60:10:b1:ac:c3:2b:01:63:84:5d:
                    8f:3d:a7:bf:c7:93:de:03:12:a1:42:9a:87:5a:2e:
                    a5:d1:34:1e:80:b3:73:78:e3:7b:00:1c:d5:84:fc:
                    0c:3c:cf:d2:2a:2f:81:ec:3d:f2:ae:70:24:91:51:
                    08:eb:0b:30:97:d8:69:d2:bd:f3:b5:7d:dc:6b:e5:
                    21:c6:41:cf:ab:75:16:59:10:8f:a2:6e:79:2d:17:
                    6e:1d:91:81:dd:2f:9b:31:9f:0d:21:73:cd:fa:cb:
                    dc:10:e7:3f:fd:35:1a:97:51:76:6c:3a:b9:f2:cb:
                    8b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0E:18:BA:87:2D:EC:0E:36:06:34:CA:D9:55:F0:6E:B0:6E:D3:EB
            X509v3 Authority Key Identifier:
                keyid:F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:eb:48:fd:d6:6a:ca:fd:ea:5e:e1:57:9d:e9:23:03:9f:01:
         8c:8c:f2:c1:1b:92:a1:76:ba:21:d9:1a:4d:da:89:59:5d:43:
         56:13:b3:1d:65:c9:97:0e:eb:6b:4b:29:56:a7:3e:25:65:06:
         1b:65:9c:d5:14:0a:94:51:52:04:20:73:86:05:8f:2e:56:27:
         8d:67:90:2a:42:13:5b:a8:75:09:6e:23:32:fc:9e:8f:ab:ba:
         47:af:02:66:5d:93:7d:01:17:f9:74:36:99:1e:32:7a:78:7b:
         c9:70:fa:af:34:e3:ff:f1:b5:17:42:5f:a7:3b:e1:3d:22:16:
         62:54:6c:97:6b:61:46:5d:2b:9f:9e:08:34:86:a2:34:70:d1:
         bc:ce:bc:a7:09:ba:3a:ec:2e:11:34:95:d0:53:00:61:8e:1b:
         8a:53:ca:ba:0e:17:dd:6c:2c:b5:a3:23:94:b3:4b:66:90:61:
         2b:df:bf:e8:03:fa:d2:5c:4b:48:90:1b:a3:7c:84:95:6a:6a:
         cf:48:1f:56:a4:96:1d:f0:e4:aa:40:de:0d:14:07:a4:e8:b5:
         13:d8:52:f2:e0:cc:9f:b0:2d:a9:67:de:d9:ee:f0:4f:d9:3e:
         5c:0b:8c:a1:cc:c3:f7:7b:75:b6:b6:b1:70:95:6c:0f:68:ea:
         16:51:6a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----