Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
File:                     87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft (raw, json)
Hash identifier:          focCjLsCvlSkUNeAfuQxlBePitysLrDCpb/W4tl9kOA=
Subject key identifier:   97:5D:85:37:55:4E:2E:66:1C:DF:B8:3A:80:FE:03:68:53:65:39:E4
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Certificate issuer:       /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial:       01962FAB23B9A323103C4974B6DE327E47C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
Manifest number:          0680
Signing time:             Sun 13 Apr 2025 15:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:07 +0000
Files and hashes:         1: 3TbJq9j2geNORTi2E9xTbbuvxTw.roa (hash: GEQQroPBoH2N7pLErfqXNmjkVTV09NRy63LB6YJ9qVU=)
                          2: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl (hash: SNvNCJ2nWPAdF38BJ1BcdPO9n17U17OBCdixJQ0P2TA=)
                          3: O5vcxppH2hWxYYAsqunLkBWcHEA.roa (hash: q4yYQF/m9xvQmRwlkRVUClFyEqyPX8PvXIb5hdq5C/c=)
                          4: S074YuodosP0UuUo6De4P_sFXFs.roa (hash: pyM9pUqd+rcNeRhYxGuF9WXwPo5DNw77BSKM8YnWbDw=)
                          5: Suwxb4A_r5JBEoQCb5YosZpgxYQ.roa (hash: ynVaJVBlwlWG6tSEdbng0uT/nO6dcjS+TT74OXhzdwE=)
                          6: TeWmN6EHoWRaSQ7AOqv2c821wck.roa (hash: nLb50bk1nICV8KXxpzGqIvnlONr6M9e61qQJa/r2Gnk=)
                          7: VV_pKUnIORWQZ3e9Gq0Sb2EbVrY.roa (hash: ILHJodGOzQUy/1EkSV1sW3J8/BVRtZEBwh5TBOH9dR0=)
                          8: fpQDOceW0nAf0mI2PAXShTq2K8Q.roa (hash: AwWdNgQE53Ja7SCJFwgUtSy2nXOjhiPggUFZe7XRmBE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:23:b9:a3:23:10:3c:49:74:b6:de:32:7e:47:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
        Validity
            Not Before: Apr 13 15:01:07 2025 GMT
            Not After : Apr 14 15:01:07 2025 GMT
        Subject: CN=975d8537554e2e661cdfb83a80fe0368536539e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b7:0c:ed:95:d9:6a:7d:e4:cf:ad:2e:22:39:
                    63:a9:62:bb:2f:3b:15:b3:4f:ab:16:11:4f:40:87:
                    45:9b:ea:f6:bb:a5:b0:6c:1f:26:1d:2e:2a:18:79:
                    2d:39:49:0c:db:b0:f8:bd:66:c0:d8:a3:3e:5a:a6:
                    b1:4e:21:e0:72:ac:1f:cc:ad:3b:55:b5:94:f0:53:
                    70:8f:57:ed:01:a1:c1:a4:ce:1d:8c:8a:00:c4:e9:
                    f0:aa:78:41:b6:b4:e8:59:9e:91:06:84:76:c8:1a:
                    d6:2f:94:bf:6f:c3:61:15:58:13:a7:0e:f0:58:9e:
                    6d:d8:d5:b3:55:1e:e4:d4:f9:07:7c:1b:bb:a8:26:
                    4c:81:d9:4e:fb:2c:e5:83:18:66:54:25:d1:d0:0c:
                    66:f9:88:bf:ed:0c:d0:a1:57:64:14:7a:88:ea:3f:
                    30:0b:b9:f0:63:ea:d0:c2:b2:93:6b:31:28:06:c2:
                    5b:aa:04:bb:b6:8d:bc:08:c1:c4:99:b7:3b:33:a1:
                    a8:8e:fe:2a:8c:88:6d:49:a5:1e:c8:02:b3:69:09:
                    1f:4a:61:2c:7b:52:99:da:b2:48:f9:26:da:28:71:
                    cf:c0:36:e4:91:22:15:ee:ee:2f:32:ce:9f:24:e9:
                    1b:c2:79:7a:3a:08:8f:19:eb:95:1b:70:c5:16:59:
                    49:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5D:85:37:55:4E:2E:66:1C:DF:B8:3A:80:FE:03:68:53:65:39:E4
            X509v3 Authority Key Identifier:
                keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:29:66:3a:f7:3f:91:a5:6b:cf:ed:04:b9:1a:de:be:5a:cc:
         2d:a5:46:d7:8f:1c:e3:c3:dc:70:c2:ea:1f:43:aa:2c:eb:c0:
         8d:1b:da:36:d3:a3:db:2d:1c:e7:09:64:53:a2:2b:be:b6:43:
         68:fa:86:b9:2a:07:15:75:19:49:09:2e:b8:17:34:6a:0b:0b:
         e4:0e:2d:0f:6f:8d:f6:b6:3d:ad:a7:4e:e2:53:a1:ae:f1:05:
         80:e5:a3:d3:43:36:7b:ac:75:ca:dd:55:3b:73:db:6e:7d:b0:
         2e:a0:38:44:04:5a:51:ac:0b:8c:35:7f:41:69:0b:62:84:5f:
         8b:fe:8f:ed:5c:97:34:bb:ba:96:6d:42:98:d6:9a:67:6a:fd:
         77:88:bd:b4:c8:6a:b4:29:fa:0d:87:62:5b:8d:8c:f8:4d:53:
         10:ca:d9:54:66:bc:0c:1c:09:14:b5:b7:b6:14:71:98:60:f8:
         8d:ee:f8:27:08:1b:e2:f6:5b:71:8d:5a:24:cf:ed:a4:bd:ec:
         06:c1:ad:16:6b:4b:0b:50:24:89:2c:23:a8:c3:ea:84:4b:41:
         43:0c:83:4f:cf:79:84:a5:c0:d1:1a:f3:c5:47:a2:6d:1b:85:
         c2:a6:2d:93:b8:2d:e7:ce:c1:6e:af:c6:0f:b4:9f:28:d8:3e:
         55:8a:f6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----