Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
File:                     ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft (raw, json)
Hash identifier:          OX3zQjgk59+HF9TmJ6Kzh3O+oFdjCllPZ7MvucMwA4Y=
Subject key identifier:   85:08:DD:0F:63:01:27:85:3A:83:95:42:97:8C:1A:AB:32:5A:E7:B2
Authority key identifier: 8A:F7:F3:2D:33:F6:64:67:79:A5:1F:B2:32:01:C6:44:2D:14:51:CA
Certificate issuer:       /CN=8af7f32d33f6646779a51fb23201c6442d1451ca
Certificate serial:       01962F3D8F5047D5476CCB1FE0629D61A83C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
Manifest number:          08D2
Signing time:             Sun 13 Apr 2025 13:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:25 +0000
Files and hashes:         1: RZMmAomJrqs0yCU-Sl6pSFt5lLQ.roa (hash: mHTuz89sEZswLAvVyf4aCavMINMyLcZOi1mRW8tq0vE=)
                          2: ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl (hash: fXuf+ngPqsVGbPIJLNV8W4L4oIhq/W36IM/92KnD+fg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8f:50:47:d5:47:6c:cb:1f:e0:62:9d:61:a8:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8af7f32d33f6646779a51fb23201c6442d1451ca
        Validity
            Not Before: Apr 13 13:01:25 2025 GMT
            Not After : Apr 14 13:01:25 2025 GMT
        Subject: CN=8508dd0f630127853a839542978c1aab325ae7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e1:80:69:86:a8:5e:88:8b:7e:a4:d0:49:b3:
                    e0:72:7b:96:dc:fb:63:a4:84:76:fb:42:e0:87:06:
                    25:44:15:de:e7:f3:b4:c7:3a:be:a1:b4:c1:5b:ee:
                    b3:aa:f7:0d:69:b2:ab:db:8f:53:ec:a2:83:56:60:
                    97:07:34:6e:b9:42:f8:42:1f:54:11:66:01:15:78:
                    d2:35:56:92:5d:2a:22:67:18:0c:e9:04:e4:76:ef:
                    4f:e8:b7:84:7a:d7:b9:00:42:85:89:b3:76:bc:35:
                    58:94:24:fe:e5:d5:0e:97:0b:c7:34:43:86:70:90:
                    15:e2:bb:57:20:32:be:b1:c2:95:fb:de:90:05:66:
                    90:9b:ae:5e:6a:da:ff:87:77:55:d5:62:6f:d5:a8:
                    63:a7:9a:3c:7f:64:76:29:a2:4c:40:53:af:fe:ab:
                    4f:ed:72:70:07:98:35:66:59:59:69:18:a0:16:d5:
                    e7:10:fd:31:24:5e:69:72:f7:5a:05:48:99:25:34:
                    b8:8d:40:ef:a8:d9:93:97:d3:9e:42:91:cc:6a:c3:
                    b9:1c:48:fa:a1:28:af:fe:5f:cc:53:a6:20:27:31:
                    e5:14:36:ce:20:a3:bf:3b:53:34:fe:79:76:f7:92:
                    eb:40:fd:38:79:12:63:d3:2b:aa:2e:55:fb:dd:ff:
                    3d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:08:DD:0F:63:01:27:85:3A:83:95:42:97:8C:1A:AB:32:5A:E7:B2
            X509v3 Authority Key Identifier:
                keyid:8A:F7:F3:2D:33:F6:64:67:79:A5:1F:B2:32:01:C6:44:2D:14:51:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:13:ae:cd:a6:d8:f6:20:97:5a:c0:93:17:02:68:2b:1c:b4:
         54:36:75:79:03:18:64:7b:50:98:cf:6e:8c:18:cf:ce:cf:0d:
         4a:ba:f5:72:82:6c:4a:ac:6d:10:ff:e1:dc:65:1f:0b:0b:f7:
         c9:c6:4a:99:58:3b:49:bc:10:c0:8d:19:91:6f:26:a7:20:7d:
         c0:84:f6:84:7a:f9:2e:6d:4e:8b:13:13:0e:0c:e9:a4:46:26:
         dc:26:a5:87:f7:10:97:10:f5:32:94:af:f0:c9:2f:83:a0:a2:
         bc:22:fe:5a:8c:8f:8a:0a:be:dd:57:68:d8:20:29:09:dd:fb:
         ec:e1:f4:cd:d9:53:66:a7:b9:3c:4b:f5:04:97:a9:b7:df:90:
         60:5d:70:47:fc:d5:5c:67:8e:e7:0b:d3:86:76:7d:3f:b3:62:
         4c:94:86:35:9b:20:23:93:72:e8:36:e2:d6:eb:a2:84:39:13:
         61:14:73:d3:64:8c:99:67:2d:32:14:ab:30:45:51:bf:b2:d6:
         41:bc:4d:d0:3a:32:ce:d4:05:0b:07:f0:99:00:47:2d:25:e4:
         e1:d5:4d:a9:97:27:24:7c:22:9e:f0:06:a3:99:18:43:98:0f:
         0c:bb:f0:ff:1d:52:94:44:4f:54:58:53:33:eb:6c:bd:8f:9a:
         91:fb:32:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----