Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
File:                     8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json)
Hash identifier:          HnEK0SQu+FdBja0iVc0dhEmvJzGQ/4ULsLWlTp2l2lg=
Subject key identifier:   85:15:64:72:DE:34:4B:F6:2F:93:1C:5B:5D:05:D5:63:0A:33:57:3A
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Certificate issuer:       /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial:       01962FAB8644CAFB2EF68B8C4909C4695A0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
Manifest number:          0B46
Signing time:             Sun 13 Apr 2025 15:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:32 +0000
Files and hashes:         1: 4eZ-orLf3Sw1i9FoVC_BgUuV6yY.roa (hash: Hm2QNZ0IWwgkGkpS2MI3Rx4rLkOrxRzbQrRfD6XRt60=)
                          2: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: WsGqynHNr2PsBpNaLuJWz8ANs+8VxwSK51Y9ytj7nAM=)
                          3: PvG7RaoFWA1C7HlDkfB4Ix4UWSE.roa (hash: 3vQKjjJTEuiCPTgwApvaXGsOiHre5b8+kVP9FzsOJUw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:86:44:ca:fb:2e:f6:8b:8c:49:09:c4:69:5a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
        Validity
            Not Before: Apr 13 15:01:32 2025 GMT
            Not After : Apr 14 15:01:32 2025 GMT
        Subject: CN=85156472de344bf62f931c5b5d05d5630a33573a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:47:56:f5:f1:4c:b1:ab:4d:87:80:71:75:31:
                    2b:f0:87:50:a7:6a:f9:a9:ff:d6:d9:5b:37:c3:a6:
                    5a:f8:b8:64:e5:89:9e:c8:9f:bf:ac:24:11:0d:d0:
                    78:ed:18:72:af:d5:db:39:0a:1b:e9:9c:c7:67:6b:
                    1a:46:82:ba:db:7f:65:3c:b4:b0:5d:58:17:8f:32:
                    47:a0:fd:e1:61:34:5a:0e:a3:0c:19:73:2e:3b:b6:
                    8b:07:ea:8f:da:8a:17:60:11:92:5c:6b:af:63:62:
                    f9:d9:91:d8:9b:7f:e2:6c:25:e4:a4:a3:c7:28:ce:
                    c0:72:40:99:4b:45:bf:16:ce:ac:aa:bf:3a:f7:3e:
                    8b:9b:57:5b:eb:38:3d:ad:dc:89:d2:97:4f:1f:cc:
                    69:0b:7c:04:29:b7:8d:06:c9:96:9d:b0:ec:96:5e:
                    14:75:81:8c:65:c6:66:93:0f:71:09:a2:c1:78:de:
                    fc:b3:76:32:5a:9b:4c:bc:5e:41:8d:a1:56:b6:88:
                    d4:65:35:56:1e:b0:61:32:16:d0:b4:0c:73:6f:79:
                    43:fc:57:50:14:b5:83:1b:08:87:4a:01:4d:84:65:
                    dc:0a:c9:69:a8:73:96:5c:84:4c:59:c5:b2:f6:d2:
                    09:6c:03:6a:e3:67:8c:d3:73:8f:66:1b:c2:80:0c:
                    d2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:15:64:72:DE:34:4B:F6:2F:93:1C:5B:5D:05:D5:63:0A:33:57:3A
            X509v3 Authority Key Identifier:
                keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:15:6b:3a:34:93:5f:de:cb:fd:c0:ea:cb:85:ef:c8:27:1c:
         c8:a8:ea:c3:a3:86:ce:1e:ac:ab:aa:79:9f:30:cf:13:42:99:
         7f:c1:4c:73:0d:a9:70:c7:6a:08:05:c6:1b:67:c2:db:81:c8:
         d6:66:61:b4:20:0c:41:32:7f:a9:29:6e:33:2a:72:80:6d:1a:
         c1:6d:30:47:ea:bb:e1:a6:17:eb:b8:c4:39:53:c8:01:fc:a3:
         76:d4:0f:30:54:86:74:52:42:26:39:a2:2b:bf:95:d3:84:72:
         2d:a8:ee:bf:6c:48:08:e5:bc:b1:f2:6f:89:14:a7:88:3b:0f:
         91:3f:f3:6b:8d:50:1f:c2:23:a5:b7:34:54:7e:9a:bf:f8:5d:
         31:eb:e7:4e:0a:f1:26:3d:91:cd:4e:a2:01:61:33:b7:3e:80:
         07:1c:3c:c8:c4:71:d3:69:c4:c0:67:db:45:c1:0b:e1:17:53:
         38:56:71:2d:dd:94:ff:d8:b6:03:df:29:f3:a6:7c:c8:69:52:
         23:b0:60:65:dd:4c:21:28:ec:b9:11:de:95:38:b9:ac:f5:1c:
         9a:c5:19:ee:67:88:63:d0:70:9d:cc:f6:71:d2:14:1c:a9:2b:
         71:c0:d8:32:1b:0c:d3:ba:16:3e:0f:26:07:07:d7:3f:07:74:
         3c:3e:73:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----