Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
File:                     i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft (raw, json)
Hash identifier:          wVAWMj3qyC6FOJ8t19Pzhl4V/QS7tmVGbdlMg3yHgvk=
Subject key identifier:   E0:4F:AF:8C:B1:CC:C3:E2:A8:22:47:7F:8F:FD:4C:5A:CF:9B:25:74
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Certificate issuer:       /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial:       01962E61F3BBE703286C51A2A7426C377C27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
Manifest number:          14FE
Signing time:             Sun 13 Apr 2025 09:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:33 +0000
Files and hashes:         1: RZK0b0ovThhwOspu5E-ursP21fk.roa (hash: QD9vKhIKNC6G+l7AznXUzzLsXomMDZljRclFB7nn2HQ=)
                          2: fiISLcTtszje5XVI9V1A5UtzzeY.roa (hash: eVRxObYN5WO+IJLUe7vH/MdccTrSwqFAfOP7RIW37BY=)
                          3: i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl (hash: 3DQBZ1pKu5o+jhHjK3eAOk2KfxwNOF7REfOr9K6DGkI=)
                          4: jI6BNQdThJo2MEdSZOm1_susYMk.roa (hash: rpQAWWU68zMZ9YE0YNIh6QHC51Xor5PQY1DDvCq8+m8=)
                          5: uqvRjoImP67-V2pzEWGA2vqwBPY.roa (hash: yGPp5s4cB95t+0hM/KR3osWVzparRNQvZpkZjxE6wzs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f3:bb:e7:03:28:6c:51:a2:a7:42:6c:37:7c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
        Validity
            Not Before: Apr 13 09:01:33 2025 GMT
            Not After : Apr 14 09:01:33 2025 GMT
        Subject: CN=e04faf8cb1ccc3e2a822477f8ffd4c5acf9b2574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:35:67:35:f6:1d:ba:4c:a9:59:04:3d:97:59:
                    dc:db:d5:40:15:94:77:b2:cc:c2:5d:82:f8:ef:ac:
                    7b:17:62:e0:10:10:23:89:26:74:8f:43:bd:58:55:
                    d7:70:b9:46:ce:c2:38:cf:ae:c1:48:31:c2:39:d4:
                    47:00:7e:1d:9f:d7:d9:b3:f5:cf:e5:61:9c:84:4a:
                    d0:c7:71:cb:95:7d:9f:68:13:a4:38:df:76:ba:f1:
                    b7:a5:9f:46:cd:26:b5:ff:22:36:ca:13:af:03:9c:
                    35:e1:a4:f3:12:a0:90:b3:20:48:f9:ed:1f:2e:d6:
                    69:7e:db:4a:28:c2:8f:c4:15:06:24:4d:55:b0:e8:
                    f3:b8:37:9b:59:bb:4b:c0:1f:0f:6c:62:1e:9f:13:
                    07:cf:8b:c5:22:80:3e:86:6d:2e:d9:58:cf:2d:17:
                    9d:6d:e3:87:37:d9:22:0c:ab:23:ea:78:3f:2c:87:
                    6b:99:6d:64:7d:41:9a:cc:b4:8f:e0:8d:41:96:7b:
                    05:5b:d2:1d:35:0e:58:18:58:5e:17:db:54:91:94:
                    7a:7d:80:85:cb:d7:2d:73:40:10:1f:31:7b:82:71:
                    a5:44:2c:48:91:89:85:31:dc:a2:31:4b:16:61:05:
                    53:e6:29:1c:cc:8f:47:72:21:9f:27:8d:9e:e3:d8:
                    67:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4F:AF:8C:B1:CC:C3:E2:A8:22:47:7F:8F:FD:4C:5A:CF:9B:25:74
            X509v3 Authority Key Identifier:
                keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:bf:ba:61:f0:0c:cb:6b:71:f6:5e:7b:e9:0c:42:df:2a:8b:
         cb:6f:aa:89:ca:b6:4c:44:70:09:95:b6:3f:43:58:60:77:a0:
         b8:75:7f:21:9a:f4:95:d5:49:e0:08:65:50:07:f0:65:24:c5:
         84:c1:64:aa:d5:8d:74:ef:26:97:6e:75:df:9c:6a:da:0f:cd:
         c0:ab:8f:39:31:e7:1f:c6:cf:08:a9:b1:00:a4:f1:dc:2c:5f:
         f1:04:43:72:cc:3a:e6:96:f9:5d:70:97:a0:09:51:53:c3:1b:
         78:17:8c:7c:15:12:dc:68:7c:29:a1:10:de:99:14:e1:6e:f1:
         c1:cd:72:d2:ff:e0:c5:54:82:24:3c:cb:21:0a:cb:ef:3e:b4:
         0c:ed:a3:74:17:bf:39:84:1f:9d:a0:df:ad:14:c5:97:6f:b5:
         9c:b0:61:ed:f5:c5:17:72:fa:f1:bf:9e:88:8d:55:24:96:42:
         49:1e:b3:30:7e:10:c5:2e:74:f9:a0:2e:6f:21:08:16:aa:3f:
         d6:3b:c0:c4:fc:18:10:e5:d0:d2:fe:47:4c:91:fe:83:2b:44:
         09:a1:6d:a0:64:f9:b8:24:23:c2:98:9a:3c:0f:32:cf:c2:b0:
         dd:c1:09:96:2f:8c:f9:84:98:35:24:5b:41:52:0a:48:61:ea:
         10:41:b5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----