Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
File:                     CPy8NByHQz0D5N1hW380UxZDRLM.mft (raw, json)
Hash identifier:          lL5ihIcfS9wlWYTvZGzJ8eOt+YZVLFG0kkbKp3nBC64=
Subject key identifier:   8A:D4:78:9C:43:B8:C8:CD:A0:00:CA:A0:83:04:3A:93:5B:A5:4C:AB
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Certificate issuer:       /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial:       01962E98BC452A13DD9B10E4A276C9AF916A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:23 +0000
Files and hashes:         1: 5eRiGQx5boAqRAuznUmYz2xfqMQ.roa (hash: zDFWtpJ7+CfToiZs8AAMHmyitJykUodCcfEyyz3iDfc=)
                          2: CPy8NByHQz0D5N1hW380UxZDRLM.crl (hash: UM2xWTxYTbieQ7ibtQsFx7rqIgQin/ufDEFs8spcRrI=)
                          3: FuRu0xLu2HvckUxx6CKawcRdyGM.roa (hash: X0KwYGhpxludEjFHlw9/03BXtRT7Yd1fekWuVBjCvVo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:bc:45:2a:13:dd:9b:10:e4:a2:76:c9:af:91:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
        Validity
            Not Before: Apr 13 10:01:23 2025 GMT
            Not After : Apr 14 10:01:23 2025 GMT
        Subject: CN=8ad4789c43b8c8cda000caa083043a935ba54cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d1:bf:36:69:18:39:2a:83:3e:4c:fa:f1:a7:
                    b7:64:6f:42:9b:5e:0c:eb:3d:78:8e:ae:77:98:0b:
                    f0:0e:9b:e4:0d:bc:d4:2a:56:d6:ee:70:11:03:01:
                    32:a8:ff:02:86:a8:75:47:54:ea:78:b5:4e:cc:02:
                    22:6b:89:b5:af:16:08:ac:a4:ce:ac:ac:34:93:37:
                    10:ca:11:22:e5:85:7a:79:5c:82:a6:a8:9a:cb:82:
                    74:ed:13:c7:45:67:71:80:2f:27:14:f8:cf:0c:62:
                    7d:a8:3b:ed:76:77:c8:fc:c2:36:1a:3f:e7:1c:d3:
                    81:73:d7:dd:e2:9c:99:0c:95:75:c0:d6:7a:e9:9e:
                    af:4f:96:2d:d6:8e:96:51:97:ec:ec:43:8b:69:22:
                    8b:7f:0c:3c:11:fb:58:1e:e7:a0:2c:6e:fa:f2:f8:
                    78:f3:b0:42:45:e7:31:65:61:33:b2:ff:1d:98:16:
                    93:59:47:dd:a2:40:d4:f6:cf:c8:5a:47:e1:64:00:
                    86:25:f3:2c:36:96:6b:7c:8c:de:cc:fa:0c:bd:88:
                    41:fd:03:7a:4d:7d:dd:a0:25:4c:4c:ef:93:2f:1f:
                    20:40:d1:10:78:30:6c:e6:05:2f:0f:75:8e:e6:07:
                    38:b6:35:fc:86:fb:fc:a1:07:16:de:90:0a:d9:14:
                    58:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D4:78:9C:43:B8:C8:CD:A0:00:CA:A0:83:04:3A:93:5B:A5:4C:AB
            X509v3 Authority Key Identifier:
                keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f4:94:d9:91:94:3e:cb:1a:fb:31:45:0f:7d:a6:fa:00:bb:
         9a:88:b6:a9:54:2e:a1:2a:8f:1a:6d:79:f4:4b:38:44:e3:8b:
         36:70:c7:f1:6d:9b:f3:8f:77:f9:1d:55:94:4d:33:48:43:6a:
         18:3a:e3:0d:bb:6f:f7:26:48:54:91:f2:18:9e:71:6a:17:4c:
         91:1b:e7:e0:e6:79:39:b9:12:06:3d:5a:6d:41:ec:fc:43:86:
         9e:62:a0:b6:a8:eb:5f:7e:97:c5:d4:af:97:cd:e5:d8:ef:b4:
         e0:6c:75:e4:50:1b:a0:06:af:da:6b:57:cd:3d:d5:ac:61:44:
         7f:46:26:29:cd:cc:e4:69:bb:92:e2:84:bc:e7:0e:46:37:29:
         1c:9f:59:bd:54:21:78:b6:86:79:ad:40:c6:e1:25:e7:92:90:
         66:69:6e:db:bb:8b:e4:02:0b:d6:50:d6:2c:74:96:5f:e9:79:
         07:05:a0:17:69:26:0f:20:ad:9a:0d:12:42:cd:50:a5:dc:7f:
         28:43:08:97:82:a6:1d:0c:b7:36:a5:48:fc:2e:ef:8a:cd:2e:
         c7:bf:ab:4b:20:df:af:17:dc:fc:4b:29:d7:c1:bf:1b:26:79:
         3f:5e:82:73:70:e2:da:b7:30:87:d6:a6:03:fb:15:f8:de:21:
         28:2d:c6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----