Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
File:                     8IcQ5uJObWm9XESv6vDunGftOgY.mft (raw, json)
Hash identifier:          OEwGL/YEE9ME8qxV8qvzfTKXVLhwT1WXyxSBEdWt8h8=
Subject key identifier:   C4:79:A3:61:C8:EB:C7:7F:05:71:9D:A6:DE:B5:B7:CA:9F:B0:B4:DD
Authority key identifier: F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
Certificate issuer:       /CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Certificate serial:       01962F06E8BAB2A90ED135AD929706D47705
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:43 +0000
Files and hashes:         1: 8IcQ5uJObWm9XESv6vDunGftOgY.crl (hash: 4dwNkvQVrNwrHbF+tzHf/0bigXPCPEBnWLEAzGCpAJ8=)
                          2: GSeC1Rl6mpKFcoTMI2ji-UCz9Y4.roa (hash: PbjkP2/mvOpx2a2PbKu6Uf4IiG6ZwqTripEFW9PTXoU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e8:ba:b2:a9:0e:d1:35:ad:92:97:06:d4:77:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
        Validity
            Not Before: Apr 13 12:01:43 2025 GMT
            Not After : Apr 14 12:01:43 2025 GMT
        Subject: CN=c479a361c8ebc77f05719da6deb5b7ca9fb0b4dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ae:db:7b:c1:36:c5:97:0f:24:57:6d:45:af:
                    5b:e0:29:2d:0f:46:0b:cc:ed:42:9f:9f:09:b1:37:
                    d5:05:40:7d:60:6c:91:be:52:4c:22:b3:54:fa:3c:
                    1d:00:da:1a:e0:1e:49:76:a4:78:30:7f:ef:02:a7:
                    6e:af:17:c9:6d:79:65:4a:ea:f8:ad:4b:c1:55:ba:
                    85:e7:d1:32:35:45:ab:8b:c9:8a:59:4e:72:99:42:
                    aa:38:61:6c:c1:14:f0:a8:50:26:a2:f6:83:3d:f6:
                    60:22:15:68:c5:c8:df:49:de:20:83:dc:e5:8d:60:
                    dd:f9:50:fe:4e:1b:51:b2:48:4f:97:c9:5d:99:7a:
                    77:37:5b:6f:b7:a0:99:aa:5e:88:8e:40:16:05:9a:
                    b5:ed:f0:4e:b7:4c:2c:5e:72:87:6e:3c:0f:7a:2e:
                    5f:ca:9b:6d:41:97:da:56:20:b0:43:17:31:15:50:
                    09:ae:fe:19:90:3a:1d:b6:43:30:38:92:46:58:88:
                    b9:8f:6f:22:c4:50:ea:7b:ea:d7:bd:3a:e4:3f:f4:
                    45:a1:a3:28:6c:32:07:ed:38:a2:e0:96:c7:a1:37:
                    fd:7e:38:01:8c:05:1a:a1:6f:74:9e:42:d2:e7:68:
                    f1:45:6f:ba:f6:2c:13:b6:59:aa:7a:ae:93:a0:51:
                    9c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:79:A3:61:C8:EB:C7:7F:05:71:9D:A6:DE:B5:B7:CA:9F:B0:B4:DD
            X509v3 Authority Key Identifier:
                keyid:F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:7d:f3:8f:6c:2b:f6:49:0c:26:83:01:15:c7:13:4d:cb:70:
         9c:9d:5a:4c:d0:92:9b:48:43:e6:aa:fc:df:d9:41:6d:74:0c:
         38:58:e8:b5:27:be:0f:43:56:7e:88:4b:75:f4:00:ac:df:0d:
         7a:d4:57:73:18:f0:0a:ec:de:7f:1c:04:fa:a9:ff:b5:00:02:
         cd:bc:c4:ff:b6:c6:c7:e6:8f:fa:f9:46:b0:0c:f9:85:6e:d8:
         10:06:99:89:79:36:d6:40:84:7b:d3:88:77:9c:4e:62:57:b5:
         35:35:ea:7e:72:d2:70:53:f9:34:f6:3a:e6:bb:78:e6:a6:e2:
         f7:6d:cf:18:d7:be:94:8c:ee:e6:99:a4:ad:79:94:f4:03:02:
         02:1d:4c:50:7d:bc:61:9d:a6:57:32:b9:7a:88:6f:4d:d1:1d:
         4d:f0:05:a7:c7:57:8e:8b:a8:d6:cf:d4:9f:97:91:77:e9:71:
         6e:81:6e:eb:46:aa:d4:eb:9c:73:08:a3:1f:95:33:db:83:89:
         16:6b:6f:7e:50:49:f6:35:c3:0a:3e:19:9e:80:aa:fc:7d:a1:
         2d:1f:52:95:65:dd:51:81:84:27:7a:37:74:2a:4f:8a:3a:f0:
         f2:8c:7c:7c:36:7f:5c:bb:9b:9b:24:6d:f0:08:54:6d:ab:79:
         ed:64:1a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----