Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
File:                     psb8p1JpxrAQpvpxCeQxXgagg9w.mft (raw, json)
Hash identifier:          ll0sNQU3LfFBdc/jLESyy1HjPk6PfWqx2cKSWpHMtWM=
Subject key identifier:   AB:EC:5F:58:D6:D9:B7:43:13:BE:EE:77:29:74:61:0F:BE:4F:3A:83
Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
Certificate issuer:       /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Certificate serial:       01962E617E118BFA66D4E1CD29836236D84F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 09:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:02 +0000
Files and hashes:         1: okAV_h5VY2rYZdeinC81X0hRA2Y.roa (hash: Qv1PPO81VnI1ltfb9vhPQi4AdxGUBWm2X2BZUx+f7S0=)
                          2: psb8p1JpxrAQpvpxCeQxXgagg9w.crl (hash: 6Go2W/TroYR58hF6z1658kB5Y3NH8mrTRA9g4TMC6Ao=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7e:11:8b:fa:66:d4:e1:cd:29:83:62:36:d8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
        Validity
            Not Before: Apr 13 09:01:02 2025 GMT
            Not After : Apr 14 09:01:02 2025 GMT
        Subject: CN=abec5f58d6d9b74313beee772974610fbe4f3a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:53:a7:4d:46:d9:0c:99:97:58:c2:ca:ed:31:
                    6e:cf:45:b8:2b:77:eb:16:b5:79:36:d5:b7:b7:9a:
                    7b:6c:fb:24:6f:84:b8:0a:19:a4:de:9f:77:ef:e3:
                    27:9a:5b:5f:66:a0:01:e3:44:48:87:2a:e6:de:1a:
                    f8:6c:e6:45:a9:c8:d7:2e:50:12:53:01:f4:fb:26:
                    fd:5e:68:f9:7e:81:9b:8f:e4:8c:5f:35:2e:f6:c8:
                    61:2f:f8:4d:82:88:44:53:7b:6f:fd:81:89:4d:ae:
                    e1:a3:c4:2e:9f:9e:62:7d:a7:9b:f5:93:cb:0a:00:
                    6b:8a:55:db:7b:7b:9e:16:29:35:42:58:14:f1:2b:
                    72:3e:08:c5:79:de:36:b6:12:49:69:f3:1a:2a:2d:
                    52:84:ba:2e:8f:0c:ac:e0:c7:2f:01:a3:fa:1f:18:
                    01:f6:15:66:a9:c9:2b:18:c4:b5:98:50:90:12:91:
                    84:31:98:a1:4a:57:de:78:d9:09:f8:8d:86:14:96:
                    08:20:24:b3:c5:33:64:c4:42:f0:c3:62:42:f8:20:
                    df:8b:b3:c5:12:f5:0c:22:d8:9c:6d:bd:b1:01:00:
                    77:d4:6a:65:41:83:49:c5:77:ec:e8:b7:4f:98:e1:
                    c4:08:ef:17:5e:e5:24:91:c0:44:23:97:92:48:22:
                    f0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:EC:5F:58:D6:D9:B7:43:13:BE:EE:77:29:74:61:0F:BE:4F:3A:83
            X509v3 Authority Key Identifier:
                keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:cf:c0:39:b8:d4:c1:6f:ed:58:ca:cc:8c:1f:10:76:25:34:
         67:33:a6:be:13:c4:ca:23:fd:65:e5:b8:7c:66:ec:c9:2e:10:
         d6:1a:18:ae:ae:e6:42:f7:28:b3:11:8a:63:9b:bf:76:1c:1d:
         a1:72:21:56:40:2c:ca:e5:cd:47:79:38:71:75:0b:90:e4:2c:
         19:5a:30:ed:a1:ab:3e:e3:43:20:f8:d4:4b:40:a7:c7:9d:2e:
         dc:d4:9a:08:b5:c7:a2:cc:21:db:86:6e:57:96:4b:8e:88:e5:
         2c:62:8e:96:72:1d:87:9c:51:00:50:fc:91:5d:28:20:39:43:
         bc:65:8e:14:36:fe:de:d4:24:d9:f4:1d:b7:9f:9e:0b:c2:95:
         f6:65:7c:d6:d0:10:20:fc:e0:0c:aa:05:ab:10:11:27:6c:b3:
         d3:26:ab:af:8f:a0:4f:77:28:40:05:c9:fe:67:91:6e:4b:c3:
         01:5e:1d:43:91:66:bd:3c:5b:82:eb:27:cd:7f:9e:ee:59:71:
         6c:9b:a6:18:6f:09:56:a1:71:f9:37:fa:4c:62:07:04:66:04:
         92:f9:d6:b7:7e:e0:ed:8c:4a:44:8b:10:5f:70:ec:06:86:85:
         46:64:49:a7:59:2d:03:39:98:fd:06:6e:a9:d6:9b:5a:66:b6:
         55:e5:c8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----