Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
File:                     8mFEyCSVlxG2UteMGHAr9DLyGVw.mft (raw, json)
Hash identifier:          fZiLE7fL2O/Bk6IqAcIM0ahDzwfeRjcu8uNWAG69694=
Subject key identifier:   04:5C:0A:D1:82:ED:42:57:09:7D:01:3E:02:9A:8D:58:7B:AF:55:CC
Authority key identifier: F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
Certificate issuer:       /CN=f26144c824959711b652d78c18702bf432f2195c
Certificate serial:       01962FAB48D388EAAC70B02B9A9279837289
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 15:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:16 +0000
Files and hashes:         1: 8mFEyCSVlxG2UteMGHAr9DLyGVw.crl (hash: iLM1IVUjrNQsYvw1T51q8LXisQFAOZ9IT+eRNnSN4lg=)
                          2: yT1Jx8Ou-jYtMpuKi40cHf-H83c.roa (hash: Lx4YPLeLSMnJ3NGAZ4PST+Ci/ylYMYy1Z+vRgBl8ZqA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:48:d3:88:ea:ac:70:b0:2b:9a:92:79:83:72:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f26144c824959711b652d78c18702bf432f2195c
        Validity
            Not Before: Apr 13 15:01:16 2025 GMT
            Not After : Apr 14 15:01:16 2025 GMT
        Subject: CN=045c0ad182ed4257097d013e029a8d587baf55cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:52:ad:9f:d2:36:12:4c:09:91:31:c6:ff:96:
                    63:0a:02:89:34:59:a8:eb:3e:ae:c1:3a:1a:58:9e:
                    b5:82:17:38:cc:77:e3:0e:5d:ef:1c:6b:b0:39:9c:
                    b0:36:16:f0:fa:0d:e8:dc:e7:22:5c:90:ac:6b:3d:
                    8e:7f:bb:ee:1b:31:47:03:33:e9:28:a2:7d:cb:4d:
                    91:e9:5f:eb:3e:76:1f:88:11:55:59:d4:73:2d:38:
                    d1:5b:e5:48:13:8f:f4:d5:67:2b:25:8f:3b:32:50:
                    9e:2b:0d:8b:9d:6f:d0:59:27:16:0a:4a:d9:c5:cc:
                    6a:d3:30:e7:20:13:f3:b7:c1:77:ba:a3:a6:a9:f9:
                    a8:6c:ac:54:f0:8d:ad:16:2e:89:aa:76:41:61:96:
                    64:21:aa:d9:0a:cb:25:5a:bd:55:9c:77:2b:52:e8:
                    61:ea:cd:da:97:ba:c5:41:eb:9f:73:f0:03:89:c3:
                    97:31:c3:63:68:0b:e0:79:c1:fa:b8:55:97:97:dd:
                    8e:02:b4:ce:33:c4:74:06:27:1c:3b:c5:21:b3:ae:
                    d7:4c:a5:6c:13:75:42:3c:d8:40:0b:79:68:d2:dc:
                    d7:c9:5d:48:f9:c6:0c:e3:86:db:33:2d:7c:c2:7b:
                    c6:72:05:be:06:84:81:8b:77:ea:f5:93:4a:3b:53:
                    c8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5C:0A:D1:82:ED:42:57:09:7D:01:3E:02:9A:8D:58:7B:AF:55:CC
            X509v3 Authority Key Identifier:
                keyid:F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:44:cd:05:77:b1:c9:7a:fd:7d:d5:c1:15:eb:2a:e4:ae:0c:
         48:d8:2b:7d:dd:72:cf:1f:ab:86:7a:de:90:4b:bc:80:37:81:
         62:be:f8:04:28:fb:2e:7c:b4:39:0c:c9:8b:24:ef:2a:11:cb:
         5f:83:f9:bf:5e:95:ec:29:e7:33:ce:61:81:5e:a6:31:67:6b:
         95:63:ea:4e:15:b2:e6:3e:bf:05:cd:5c:5c:dd:08:83:87:e2:
         c9:3f:03:f4:ae:75:98:39:41:1a:9f:c1:a4:f3:20:0a:fa:50:
         ec:47:e5:25:db:23:60:95:aa:09:ea:c1:90:d7:8a:37:0a:ef:
         8c:79:e7:a5:72:4d:21:7e:4e:c1:f2:38:ce:ab:12:26:aa:4f:
         92:01:e1:bd:4b:0e:c6:90:6d:ae:66:a8:e2:16:fb:7b:4e:9e:
         19:6d:e0:3f:20:59:22:f0:dc:a3:73:c5:16:56:41:cf:a8:50:
         6d:c1:a7:90:ca:2a:76:1b:67:41:35:e4:a9:85:cf:04:22:16:
         92:2b:29:1c:2d:a3:e0:bd:4a:de:db:11:71:1f:a9:17:08:ad:
         46:d5:bc:b1:78:64:5b:92:a0:82:07:64:63:62:57:9c:89:e3:
         59:92:3d:d8:aa:1a:a4:19:46:14:de:62:06:70:34:99:96:a9:
         8b:7e:3a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----