Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
File:                     8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft (raw, json)
Hash identifier:          1+8siqF/PvLWG2Y3VckM9nqLX93c2nPVGsQ7xuOEMrg=
Subject key identifier:   CF:56:1F:2D:14:64:EA:DA:FC:33:58:81:92:CA:BE:ED:1A:88:6C:12
Authority key identifier: F1:60:90:C5:F6:23:3C:BA:EA:F3:19:DC:FA:E6:92:A9:56:EE:A1:02
Certificate issuer:       /CN=f16090c5f6233cbaeaf319dcfae692a956eea102
Certificate serial:       01962F3D75FCCD3C1790866E6C9AF854FF51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:19 +0000
Files and hashes:         1: 7Kmoa0mTT-hmQesiS2Vd310k5jw.roa (hash: USbTJdTp4AkhAgtWaDPdpVWCdumqCodGAPlzgsbWpqI=)
                          2: 8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl (hash: quEboXZ5VJwNJUV09tUEd6MmVdwsxDWDSucHP9Jtgxg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:75:fc:cd:3c:17:90:86:6e:6c:9a:f8:54:ff:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16090c5f6233cbaeaf319dcfae692a956eea102
        Validity
            Not Before: Apr 13 13:01:19 2025 GMT
            Not After : Apr 14 13:01:19 2025 GMT
        Subject: CN=cf561f2d1464eadafc33588192cabeed1a886c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ea:11:03:f5:fd:91:00:ef:07:1b:00:59:d7:
                    9b:9a:f8:79:a9:1f:b0:99:ea:b6:50:77:1f:4c:fa:
                    13:b0:60:f8:a7:d0:9c:62:05:cc:ae:9d:ad:78:f6:
                    9c:48:e0:a4:7c:4e:cb:bd:d8:b6:ea:eb:62:af:9e:
                    4e:ce:78:10:11:17:f5:4d:31:fe:36:3a:e0:85:b6:
                    df:7c:e0:a3:05:d9:e1:69:e7:07:d3:de:23:28:23:
                    10:8d:c6:57:d3:5d:9b:09:b2:cb:96:3b:88:5e:f0:
                    21:64:77:70:3e:de:3e:86:4a:84:87:e3:bb:23:85:
                    a3:cd:a5:dc:75:02:67:6a:13:a5:04:af:89:3b:8f:
                    c9:bf:16:6b:d6:7f:19:f6:b2:c7:cf:d0:34:5b:0c:
                    3a:ad:18:d0:2f:c3:7c:39:fc:44:8a:77:be:dc:bf:
                    4e:12:37:72:b7:0b:8c:52:4f:c0:9c:9b:65:10:e0:
                    45:e0:e1:7e:92:0c:ce:1e:a6:e6:85:ed:46:6b:2c:
                    80:fe:d9:05:32:f8:4d:f7:3b:33:26:ed:7f:1b:f5:
                    0c:86:7a:ac:13:a6:92:34:fd:68:a1:83:7e:bc:43:
                    82:37:56:41:de:1d:75:87:99:f4:87:4f:0c:55:8d:
                    21:eb:f9:e4:cc:c6:f6:c7:46:7b:15:ed:8d:e8:06:
                    4d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:56:1F:2D:14:64:EA:DA:FC:33:58:81:92:CA:BE:ED:1A:88:6C:12
            X509v3 Authority Key Identifier:
                keyid:F1:60:90:C5:F6:23:3C:BA:EA:F3:19:DC:FA:E6:92:A9:56:EE:A1:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ac:b2:c0:00:c7:e5:6f:34:48:ee:b6:8d:75:8f:2f:e0:99:
         28:16:15:96:12:cd:ac:2b:d4:aa:20:80:21:d4:55:0c:5f:35:
         7a:93:28:88:24:63:8d:b7:b6:fa:a5:6a:8f:7f:32:e0:81:21:
         3c:e9:69:1f:74:c2:80:17:7d:b9:ae:d8:23:2c:4e:a0:f6:a7:
         0a:23:ed:2b:ad:75:d5:8e:e5:76:0a:a0:1d:6e:9e:be:92:37:
         47:8a:33:3a:ac:67:09:14:86:79:6c:15:09:79:f9:92:1c:2c:
         72:c6:09:32:a0:71:62:1a:9c:03:d4:38:8b:95:ef:94:2d:72:
         fe:d4:f9:91:4d:2c:07:1a:08:f0:92:f1:4e:21:13:2f:9f:19:
         65:96:8b:97:99:76:9a:38:ce:92:4f:a1:63:35:93:fc:db:81:
         60:07:35:18:8a:39:1e:1f:b6:25:d2:e6:e0:0f:3d:b5:0a:d2:
         4e:98:f5:6c:d0:12:5c:7e:41:20:f9:8e:c8:f7:06:e2:a7:ad:
         61:a6:0a:39:9f:39:62:5f:26:b6:5c:c6:ae:0b:e0:87:b8:7a:
         40:fb:75:e4:ee:4e:50:84:35:4e:e6:38:f1:76:7b:74:25:34:
         2d:c0:84:ad:45:15:36:b5:ac:69:6d:de:9c:0d:9b:c9:8f:dc:
         95:bd:33:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----