Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
File:                     8gLwqonAZ9ZjOLTVnSBSujmplEs.mft (raw, json)
Hash identifier:          Yl1bdCES9iiozzbKkYyWvoK9vh0SmX/wUoDhSug6DnM=
Subject key identifier:   76:94:5E:F6:F0:BA:FE:0D:8A:FB:DC:02:1F:E9:8A:7D:0F:0B:E8:2B
Authority key identifier: F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
Certificate issuer:       /CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Certificate serial:       01962DF436482CFA67C1A2A211065D6393D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
Manifest number:          044C
Signing time:             Sun 13 Apr 2025 07:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:41 +0000
Files and hashes:         1: 8gLwqonAZ9ZjOLTVnSBSujmplEs.crl (hash: macQixGw3Ooht82zm5U+HiUsA6LVr+vzBT3UlbNDlcU=)
                          2: gxY3cqQ9AtbDjrB_-otpHb6Irb0.roa (hash: LD3l5OVkY9IZSD+ZJZMYqJis4oBCr+KMHwZEJzzuk0w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:36:48:2c:fa:67:c1:a2:a2:11:06:5d:63:93:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
        Validity
            Not Before: Apr 13 07:01:41 2025 GMT
            Not After : Apr 14 07:01:41 2025 GMT
        Subject: CN=76945ef6f0bafe0d8afbdc021fe98a7d0f0be82b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9f:37:2b:c1:eb:b5:84:a0:b8:0e:64:2c:26:
                    56:f7:8b:10:78:72:a8:af:03:7e:cd:4e:aa:10:16:
                    fc:7b:04:e3:e4:7c:1e:47:3e:8e:27:d3:ef:3d:0a:
                    33:70:54:09:70:18:d8:2c:a7:79:61:bf:36:b5:58:
                    13:d7:b4:53:e3:d1:26:b6:a6:a0:fa:d8:25:67:cf:
                    d1:c8:61:86:63:cb:4f:5e:3d:f7:0d:df:82:e3:4b:
                    cc:87:3f:d6:17:7b:eb:6d:04:0c:20:f5:61:a8:85:
                    86:0f:07:91:95:4b:65:eb:b7:7b:d7:5c:f3:48:d5:
                    f3:b9:5a:2c:17:22:60:4b:85:39:38:ba:84:ab:af:
                    93:2a:56:d0:19:5d:6a:94:73:cc:55:18:e5:09:0c:
                    f4:f7:3b:5b:3d:1c:e9:16:a1:a2:12:15:e9:f5:54:
                    e5:d1:de:96:31:75:a6:ed:51:57:2c:e6:b2:53:88:
                    70:c0:ec:77:47:23:93:d7:a8:26:f1:11:f8:fc:7c:
                    7a:e4:28:a6:61:31:c3:35:8f:2e:03:21:ee:15:34:
                    dd:28:be:ae:3a:87:55:1a:34:7d:4d:0a:d3:8a:2a:
                    e0:58:b9:54:af:8d:29:0b:58:1b:fd:37:8d:43:69:
                    8d:87:74:c0:88:74:e1:17:a6:a3:cb:13:5f:69:1d:
                    3b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:94:5E:F6:F0:BA:FE:0D:8A:FB:DC:02:1F:E9:8A:7D:0F:0B:E8:2B
            X509v3 Authority Key Identifier:
                keyid:F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:3b:10:ac:42:37:b5:a9:23:64:70:87:2f:34:cf:d9:5c:95:
         ec:a2:b2:85:51:bd:7c:f5:d3:ca:22:ad:70:ee:23:ac:92:92:
         ad:fc:7c:7f:da:47:be:59:4d:7b:b1:12:ef:ae:8b:ad:42:6d:
         f6:77:6f:9d:2d:ab:54:a3:03:c5:45:ab:5b:64:b9:0f:0f:ac:
         c2:94:a9:b3:41:cf:6a:4e:c9:04:fa:0e:a8:8b:ba:bd:59:15:
         da:32:0a:6c:8a:b9:ec:45:7e:fa:e6:0e:b5:69:6c:c5:5b:a6:
         a6:58:f2:35:60:13:28:6a:01:c6:e0:6f:ad:53:31:ad:e4:ae:
         7e:f5:63:9b:05:b4:1f:05:16:0e:70:6c:4e:42:22:f2:d1:56:
         8e:d2:4d:4b:2d:da:26:27:b2:1d:91:4f:aa:83:84:c3:13:dd:
         61:a1:87:a0:b5:4b:0a:6b:9f:19:66:25:6e:a0:37:ac:48:57:
         b3:b7:fc:c8:0b:ff:30:5c:48:28:06:dc:fd:b2:2b:3c:62:4a:
         f2:f1:7e:0f:64:1c:9e:b3:75:99:c6:95:a2:e0:15:67:3d:1b:
         2f:55:22:61:d4:e2:e0:e7:0d:3d:97:4d:0e:83:3c:db:27:cb:
         58:e3:4a:39:e4:d9:e0:67:92:f6:7d:68:1d:2a:d0:a4:64:da:
         05:1b:28:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----