Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
File:                     A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json)
Hash identifier:          Zn2RLH7iOg0kJi9qqnb5Vv/b5hm2dQNDXd8xn64bmao=
Subject key identifier:   48:3D:2C:33:99:75:0A:C8:ED:52:3E:44:9F:A5:CE:AB:89:CE:50:D1
Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
Certificate issuer:       /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Certificate serial:       01962F0660B910FE2C50587AEF0CB6DAE7DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
Manifest number:          0F72
Signing time:             Sun 13 Apr 2025 12:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:09 +0000
Files and hashes:         1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: NbIXhQ2R2C2ynfp5TWgguhwBXJhBdpUYRXgilMIXpb4=)
                          2: cp23u9vhlMaqrHKUYwtPPiioz4s.roa (hash: vMJOgdz9BvyEVCpUUDvmbRYIMf8G3KzzC7uWtP3ziOc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:60:b9:10:fe:2c:50:58:7a:ef:0c:b6:da:e7:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
        Validity
            Not Before: Apr 13 12:01:09 2025 GMT
            Not After : Apr 14 12:01:09 2025 GMT
        Subject: CN=483d2c3399750ac8ed523e449fa5ceab89ce50d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:49:9c:ca:94:64:2e:11:e4:87:f0:d5:a6:c5:
                    dd:e1:1e:17:60:13:68:f2:51:b0:40:65:30:66:c9:
                    c3:03:81:1c:b9:87:cc:b3:9a:60:86:46:93:3d:68:
                    66:b4:dc:91:73:1f:b1:04:a3:1d:d4:3a:82:18:f2:
                    1d:f1:1f:60:10:68:74:3b:52:aa:b2:46:11:e9:2c:
                    fb:65:21:fb:99:68:34:bc:1a:85:1d:24:bc:80:ab:
                    2a:db:93:83:07:c9:38:be:90:6f:a1:2a:6e:05:b7:
                    28:c5:50:cc:45:59:fb:ef:b9:f3:86:de:1c:fe:05:
                    4d:d1:1d:32:9f:35:c0:1c:5e:4c:06:9f:41:06:47:
                    a0:da:5d:fa:2b:8c:4f:0d:15:76:33:4b:a1:27:cf:
                    d2:d8:8b:97:cb:e5:95:0c:2f:a9:4b:8d:2e:98:1b:
                    5d:e9:06:06:c4:6a:c0:cb:ca:ff:95:dd:70:2c:65:
                    3c:30:4b:40:b3:a5:50:78:02:f1:bf:9d:b6:b6:84:
                    f8:8e:66:48:3c:ce:50:47:6b:6c:57:6f:28:8b:26:
                    04:6f:fb:05:15:1b:e9:20:a3:02:39:13:8b:66:55:
                    2e:24:8d:07:a9:0e:e5:9a:6e:a6:f0:3b:c6:5b:cf:
                    fd:f7:68:d3:4e:cf:0c:6e:c3:11:a4:cf:d6:7f:95:
                    90:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3D:2C:33:99:75:0A:C8:ED:52:3E:44:9F:A5:CE:AB:89:CE:50:D1
            X509v3 Authority Key Identifier:
                keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:9d:26:27:3e:f4:46:98:ec:8f:9e:48:be:a2:7b:9f:ce:f4:
         bb:d4:4e:6e:ef:65:c2:97:25:9f:78:20:5e:df:c3:0a:6e:d1:
         bf:aa:e4:48:2d:b4:d2:6d:b5:79:dc:f4:5e:ff:3b:61:57:fc:
         a9:d0:75:f7:0a:a2:9b:a6:06:65:50:b1:a1:a5:ae:2c:9a:9c:
         11:50:cb:57:ba:51:45:81:de:25:1f:06:50:df:2b:f7:7e:77:
         30:91:38:bf:8f:08:43:c9:b2:4f:96:8e:3e:06:70:2a:ce:b5:
         d0:a5:8b:a2:58:1e:88:2b:75:87:25:f7:c9:0b:b7:e6:2f:00:
         1e:16:e0:2f:79:ca:6e:8c:76:e6:d1:76:20:6b:9e:7c:cd:4b:
         37:b2:f9:85:67:4d:d2:cb:8e:67:2e:a5:6e:11:3a:cb:2b:8f:
         c4:d4:c6:2f:76:3b:46:9a:d0:96:5a:bc:bb:cd:76:2d:62:e4:
         e2:86:32:0c:07:c8:98:44:71:fd:4d:16:2d:fa:f2:44:49:cf:
         ac:56:3a:d2:ac:a9:83:ae:1a:4f:34:24:68:af:32:65:6e:ba:
         2d:a7:db:c0:9b:67:01:e9:a0:6b:bf:90:13:2f:ed:d2:7f:af:
         a7:32:d8:a5:6b:b8:60:39:8a:30:b7:c1:2f:16:dc:15:ff:b2:
         66:a6:59:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----