Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
File:                     8wmyGYl7xcKttIcCrC2jDeVj08s.mft (raw, json)
Hash identifier:          uY4Bu9AqqkwRo+06RCK+j0SrTczSpVxshf1O9+iTUMY=
Subject key identifier:   B0:0A:EC:E9:48:37:7A:1C:77:89:01:B1:F0:D3:0D:A5:5F:71:10:9C
Authority key identifier: F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
Certificate issuer:       /CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Certificate serial:       01962E98CBA46EF58B60F1843C9E1889028D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
Manifest number:          1220
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: 8wmyGYl7xcKttIcCrC2jDeVj08s.crl (hash: +RUjSEdQiKqf5iOzmTE0mDKppMUJ0GDprZCO1+nGL6g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:cb:a4:6e:f5:8b:60:f1:84:3c:9e:18:89:02:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f309b219897bc5c2adb48702ac2da30de563d3cb
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=b00aece948377a1c778901b1f0d30da55f71109c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:67:7c:ed:db:af:1a:04:2c:dd:fd:4c:97:3e:
                    3f:d5:de:9f:10:0f:a1:94:84:b7:b7:59:c5:72:22:
                    3e:3f:42:97:8f:06:00:2e:06:26:d2:5d:07:8d:3a:
                    42:2c:2e:d0:b6:9f:da:9b:0b:8e:6f:7c:d7:37:09:
                    4c:9d:ee:b5:3d:c8:21:e8:de:3c:ee:1d:4e:b6:cb:
                    58:03:3a:4e:f0:56:ca:53:b1:de:fc:b2:3c:55:1e:
                    82:62:29:5b:59:c2:80:05:88:95:c0:82:ab:0c:80:
                    5d:1e:36:c3:85:bf:92:6a:66:a3:b4:02:ff:56:fe:
                    4c:ee:d7:6c:94:00:8d:45:d3:bc:55:df:25:74:d3:
                    1c:32:8b:71:4f:68:9d:85:ba:bb:e9:d4:de:a6:13:
                    59:d4:53:66:c0:a4:43:89:8a:c1:6b:97:07:f8:97:
                    2d:a0:5a:87:87:7d:de:9d:d5:85:fc:c0:5d:ad:10:
                    49:e6:0d:88:08:07:6e:04:09:e6:39:b3:b3:a4:8c:
                    83:39:a2:50:d9:52:b2:77:fc:56:bf:ea:e8:42:91:
                    b9:33:07:1d:d8:48:c6:2b:eb:ce:5d:fa:a6:ea:af:
                    35:11:2f:87:5d:b1:17:92:2e:29:6a:cb:e8:5a:a8:
                    f2:d2:b4:59:4a:42:6d:8e:2e:61:57:fc:03:ea:19:
                    25:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0A:EC:E9:48:37:7A:1C:77:89:01:B1:F0:D3:0D:A5:5F:71:10:9C
            X509v3 Authority Key Identifier:
                keyid:F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:37:31:97:a3:15:c3:89:ff:8e:cd:64:04:f0:90:97:e1:dc:
         67:7f:4f:3a:9e:78:49:b2:e5:08:16:ee:9f:43:a1:ce:3c:8f:
         6b:77:59:76:b3:61:9d:f7:cb:5f:74:21:0b:2c:94:84:24:0a:
         29:13:90:f5:8b:5a:f8:47:1a:b9:0f:a4:38:fe:79:22:e0:f2:
         3b:70:98:c7:43:aa:f9:dc:7f:b6:30:6a:7f:2d:4f:a2:30:8e:
         7f:f7:54:27:e9:8f:68:dd:64:62:bd:2d:77:50:d0:82:b4:68:
         d9:bb:ac:7f:ec:94:5a:04:18:a2:35:49:77:3f:24:b3:51:b7:
         43:e3:cb:e5:69:d1:95:54:3e:6d:9c:87:b4:1f:30:32:de:61:
         59:d2:a1:6d:14:d3:41:37:f6:f0:e4:54:26:c9:80:eb:0e:66:
         e2:fe:88:f8:5d:99:1a:c8:bd:2f:6f:b2:84:f7:ec:00:b9:34:
         f0:c3:1f:2c:b4:92:bb:43:07:6f:45:dd:17:11:93:0e:f9:82:
         52:f5:12:21:8a:db:89:a8:31:9e:7c:6e:c0:e7:fd:fd:1a:95:
         a6:1b:78:46:eb:d0:1a:5d:1d:ba:81:6b:01:57:09:40:ff:3c:
         e9:93:ed:ae:73:4e:b9:d1:90:1d:ed:d8:4d:75:5a:ec:18:2c:
         08:15:a4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----