Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
File:                     8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft (raw, json)
Hash identifier:          ygfxoEaKoFAJCiJhNYFc3TsMQFcdJ10PySCc9/mtghs=
Subject key identifier:   89:47:F0:FB:02:DB:AC:AE:22:97:15:30:80:ED:C0:A1:98:0B:14:D0
Authority key identifier: F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
Certificate issuer:       /CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Certificate serial:       01962FAB9091E568AB23EED6844DC75CF964
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:34 +0000
Files and hashes:         1: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl (hash: jAKHuSgmPG9pqfspMvPLH/c0L/+w6X7VY39kJwb+s1w=)
                          2: rT4QMLbWFUH0Mel-lifTyr0ioFc.roa (hash: wpH6c9l5MVs0PUcAmPxTy3wVy1NXeRT3Lk+wmtz29PE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:90:91:e5:68:ab:23:ee:d6:84:4d:c7:5c:f9:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
        Validity
            Not Before: Apr 13 15:01:34 2025 GMT
            Not After : Apr 14 15:01:34 2025 GMT
        Subject: CN=8947f0fb02dbacae2297153080edc0a1980b14d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:30:fe:8c:2a:81:49:db:4e:2a:7b:ac:c2:59:
                    93:31:b5:b1:54:2e:2d:84:32:13:a1:c6:11:a3:b9:
                    94:23:03:61:41:74:61:12:b1:b4:61:c4:5c:60:89:
                    c0:00:ad:19:82:83:ed:26:c5:6e:c1:4a:e8:6b:d8:
                    23:f5:1c:4f:ce:51:db:ea:c5:70:72:47:df:82:42:
                    af:a8:6f:91:a0:ef:aa:0c:6d:71:1a:88:36:e5:48:
                    77:87:61:a1:7d:76:e5:d7:df:9a:74:07:df:3f:7e:
                    71:15:ef:88:19:e1:fd:23:de:fd:06:ca:16:10:f9:
                    1d:e2:54:11:37:85:d5:0a:fe:44:c7:35:08:20:e1:
                    fe:12:c6:c9:f7:9a:75:08:27:0c:ab:42:cf:b9:ba:
                    18:0f:2d:7a:d1:7e:88:3e:62:2e:dc:de:ef:69:bf:
                    01:01:86:df:03:70:ae:23:7c:fc:47:08:22:5f:e2:
                    b7:77:6b:2c:5a:e0:d1:1a:2d:45:37:16:93:4a:e8:
                    6c:cf:10:1e:ff:4e:4b:7d:46:02:ea:93:cf:1d:21:
                    f1:10:2a:2b:59:ad:7c:d6:8e:a9:49:2f:c6:e2:64:
                    62:c5:da:e8:32:cc:6b:e6:81:92:14:5c:49:39:31:
                    4a:20:98:02:60:6f:f9:34:f5:c1:4e:92:da:7a:4f:
                    77:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:47:F0:FB:02:DB:AC:AE:22:97:15:30:80:ED:C0:A1:98:0B:14:D0
            X509v3 Authority Key Identifier:
                keyid:F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b4:83:20:8b:bc:af:82:79:6f:fc:db:4f:24:c9:91:e2:5f:
         60:8a:dc:1b:8a:27:7a:de:87:02:ae:a2:a8:c7:f0:19:5d:46:
         84:84:a0:30:ca:de:a3:0f:d4:6e:fd:34:5f:5f:bc:09:14:e7:
         a5:83:6b:ba:4d:94:a7:5e:7f:56:67:71:97:c3:7c:27:d3:39:
         78:64:9e:f8:bd:0a:8f:a1:3c:52:a9:fa:cd:06:ec:c1:45:23:
         47:36:40:c2:e0:0a:97:37:00:f8:56:06:ea:77:2d:8d:52:b0:
         21:18:63:a6:f6:f3:5b:2d:c8:88:ae:2e:47:41:ad:3e:41:d0:
         72:b1:e5:57:b7:bc:aa:24:1e:fa:fc:15:ac:bf:e7:37:f3:7e:
         7c:b7:1b:54:95:4f:ca:8f:be:96:61:c7:0d:d0:be:cc:a8:ba:
         71:22:21:e9:cc:cb:92:3c:d6:93:52:58:69:bb:6a:09:f4:52:
         b7:7c:3f:cc:d3:89:40:19:a7:f9:7c:e2:b0:ea:c3:dc:03:4c:
         9f:69:2a:a6:3d:8f:a9:f5:5c:b3:66:81:a0:67:c5:3b:c7:07:
         42:7f:5a:68:50:09:22:45:cf:c1:e2:4e:24:78:09:a6:b8:0c:
         a1:6d:f2:3e:cb:c4:27:1a:e8:1f:4f:de:a1:cf:0a:3b:e3:57:
         41:85:98:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----