Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
File:                     8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft (raw, json)
Hash identifier:          uKn/P4Ug4/jmMt+yfxnkVJC6HWBEL4jff+a5qXA0uj8=
Subject key identifier:   FB:38:C4:F8:9B:F7:CC:D9:70:38:8C:ED:9C:0D:9E:F5:31:7C:53:03
Authority key identifier: F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
Certificate issuer:       /CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Certificate serial:       01962FAB36205D1623CC5074A730EE0F696D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
Manifest number:          129E
Signing time:             Sun 13 Apr 2025 15:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:11 +0000
Files and hashes:         1: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl (hash: RrJ2nuwXxTk8fcnWztSQo6dKJfUsQVTuQ7kb7Wgm1rY=)
                          2: OkXBNJnUgokPx0Xxs8AUPN40aT4.roa (hash: E/UomHj5ST+3/lio4VV13yWumaIvNp+hYEYFZLaJR7Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:36:20:5d:16:23:cc:50:74:a7:30:ee:0f:69:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
        Validity
            Not Before: Apr 13 15:01:11 2025 GMT
            Not After : Apr 14 15:01:11 2025 GMT
        Subject: CN=fb38c4f89bf7ccd970388ced9c0d9ef5317c5303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fd:85:e5:29:d9:7a:9b:4b:86:12:ad:45:80:
                    7b:37:75:c8:17:12:79:44:cc:ef:1e:31:34:f9:48:
                    4a:36:e2:e8:94:f7:1c:64:ad:c2:78:4f:63:81:38:
                    9d:50:3c:e1:cd:0b:e8:e9:2b:a8:0f:a0:e4:0f:88:
                    14:4a:37:98:05:a5:18:be:81:4c:e5:41:0c:ce:72:
                    bf:65:3d:bd:32:66:72:62:a3:29:10:82:e7:db:98:
                    eb:3a:8a:70:9b:c9:48:bf:f4:e9:d4:b1:47:fb:77:
                    02:c5:ba:de:f7:d9:72:85:31:f4:d0:8a:9c:fc:9a:
                    06:e4:6f:7d:5a:e8:33:82:f1:d2:0e:88:57:86:c1:
                    a3:6e:a0:19:83:75:6b:e2:56:82:60:c0:23:27:d1:
                    1b:fe:76:f4:ef:6c:03:02:6d:ae:5a:ae:64:fd:8f:
                    9c:30:36:46:06:53:c1:03:ee:ce:63:b5:c4:e8:a7:
                    19:7d:d9:51:ee:0b:f8:8d:f3:fa:26:33:52:e8:df:
                    4b:1c:8c:99:e9:e8:46:f4:99:7a:fb:f2:cc:cd:75:
                    8a:a6:16:fa:3a:09:df:53:16:5b:98:87:aa:77:0a:
                    ee:f6:94:b4:af:52:35:21:f0:53:6f:c6:16:bf:99:
                    8d:21:6a:0d:46:55:c0:7c:0c:83:62:db:e6:a6:47:
                    c4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:38:C4:F8:9B:F7:CC:D9:70:38:8C:ED:9C:0D:9E:F5:31:7C:53:03
            X509v3 Authority Key Identifier:
                keyid:F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:8f:1e:80:08:c7:2d:28:85:bd:8f:82:c3:e4:16:53:60:d1:
         a7:8f:ec:cf:96:43:8d:ee:fa:6c:79:69:ec:fd:32:92:d1:a2:
         02:6e:d9:29:31:db:27:f9:cd:af:b0:9a:09:29:f9:d1:24:56:
         98:b8:e3:ac:76:93:50:41:3f:a0:c5:e9:40:e3:1e:f7:eb:30:
         8a:a7:1d:f1:6a:ef:e2:e4:90:5b:8b:2c:41:97:2d:69:24:a7:
         60:76:e5:d8:95:ee:31:3f:1b:2a:a6:17:fe:d9:7c:7a:c2:05:
         59:fc:63:86:08:9c:46:52:55:e9:12:01:56:ef:19:d7:2a:bc:
         ae:68:0d:b8:7b:a9:e3:69:a9:ef:80:df:c2:ac:0e:58:fe:07:
         83:a8:40:ae:f4:d0:79:22:a5:17:39:c4:af:ef:d7:1a:ee:33:
         44:b3:4b:d4:85:a9:71:84:4d:14:66:1b:7d:f1:0d:c9:48:0a:
         de:31:b3:0a:35:df:f6:f3:49:31:16:9c:dc:70:9c:9e:47:fb:
         ec:e2:36:9d:e9:47:23:5e:a4:bb:9b:a4:b7:2e:fb:d3:97:3b:
         1c:85:ae:94:79:7f:92:38:b6:54:9e:b8:f7:56:25:8e:8a:1b:
         09:fa:fc:41:5b:29:db:0a:62:62:df:17:d0:ae:f6:db:d3:30:
         ab:75:fe:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----