Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/17f788-1fbe-40ba-84d1-46e41202b049/1/8pbiWBIRaAfIv3q6xcaVvrQbhc8.mft
File:                     8pbiWBIRaAfIv3q6xcaVvrQbhc8.mft (raw, json)
Hash identifier:          rApOniArwi91+IpinFCIJMSkgiqK+so4d/lNin1rOZw=
Subject key identifier:   1C:78:AF:6F:4B:B4:E8:AB:8E:9C:8C:B8:D9:B6:91:27:B1:85:1C:99
Authority key identifier: F2:96:E2:58:12:11:68:07:C8:BF:7A:BA:C5:C6:95:BE:B4:1B:85:CF
Certificate issuer:       /CN=f296e25812116807c8bf7abac5c695beb41b85cf
Certificate serial:       01962E9990CCC38926044C23C20738CD3EB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8pbiWBIRaAfIv3q6xcaVvrQbhc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/17f788-1fbe-40ba-84d1-46e41202b049/1/8pbiWBIRaAfIv3q6xcaVvrQbhc8.mft
Manifest number:          42
Signing time:             Sun 13 Apr 2025 10:02:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:18 +0000
Files and hashes:         1: 8pbiWBIRaAfIv3q6xcaVvrQbhc8.crl (hash: SEin/HFt927Lb+6KgOSZIuPTbUHR0hzwKujc/nxrXh8=)
                          2: C_9wJpC7N12kOu0pJ_D7XheLG4E.roa (hash: gH4AEfeN7fzJJXj/ip3PiHbGkEFNAd9HeLBxlPcZ0hQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:90:cc:c3:89:26:04:4c:23:c2:07:38:cd:3e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f296e25812116807c8bf7abac5c695beb41b85cf
        Validity
            Not Before: Apr 13 10:02:18 2025 GMT
            Not After : Apr 14 10:02:18 2025 GMT
        Subject: CN=1c78af6f4bb4e8ab8e9c8cb8d9b69127b1851c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:12:b6:28:8a:da:75:a2:99:cc:f1:7e:70:
                    3b:6f:35:57:16:ad:1f:8e:1c:ee:d2:c6:59:38:9c:
                    91:39:a5:d8:4a:b4:29:e9:65:09:48:d0:3f:14:1a:
                    1d:c3:5a:21:e0:e7:0e:87:5b:07:52:46:15:52:0f:
                    92:ec:89:8b:b0:f1:57:ea:4c:96:c6:b8:c5:4f:80:
                    ad:16:7c:61:78:52:37:b7:08:ad:db:a6:91:31:2b:
                    8c:0f:27:bc:9c:f6:49:5f:8a:28:cb:27:41:e3:d9:
                    b6:31:d1:8f:d8:5a:07:d0:b4:05:a2:93:7c:5e:a1:
                    98:41:72:4a:ac:65:2f:6d:6e:3d:06:16:46:28:04:
                    35:24:63:df:4e:ed:d7:6c:fb:03:25:23:88:8d:42:
                    b6:c0:6e:0b:df:c4:53:d3:cc:ed:e5:73:d4:4e:09:
                    d2:bb:fb:66:49:74:83:04:ce:a0:8b:58:4d:ee:ca:
                    8f:1d:cb:a0:69:39:f7:df:8e:d4:92:65:71:ef:c6:
                    f5:60:c3:9a:3b:56:f1:af:c2:bf:53:fe:92:c0:96:
                    e6:99:9b:5d:46:c4:4f:38:ec:e3:a9:d1:d7:74:07:
                    07:ec:bd:b2:5d:47:49:c7:70:74:d2:34:24:79:37:
                    25:a9:fa:e7:3f:8c:c5:41:15:00:f0:2b:42:35:ac:
                    c2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:78:AF:6F:4B:B4:E8:AB:8E:9C:8C:B8:D9:B6:91:27:B1:85:1C:99
            X509v3 Authority Key Identifier:
                keyid:F2:96:E2:58:12:11:68:07:C8:BF:7A:BA:C5:C6:95:BE:B4:1B:85:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8pbiWBIRaAfIv3q6xcaVvrQbhc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/17f788-1fbe-40ba-84d1-46e41202b049/1/8pbiWBIRaAfIv3q6xcaVvrQbhc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/17f788-1fbe-40ba-84d1-46e41202b049/1/8pbiWBIRaAfIv3q6xcaVvrQbhc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:99:10:38:2e:45:da:a1:b1:2c:db:32:ee:56:67:d0:2e:33:
         a0:84:93:1a:3f:58:c9:52:09:ad:21:ee:ef:6b:e7:21:7a:8f:
         79:62:cb:2b:e3:27:18:40:b3:72:52:bd:99:59:f6:c3:84:3e:
         ff:fa:d9:74:5d:4a:42:a8:ca:c7:62:a3:ee:46:43:55:4e:2c:
         d2:dc:c7:04:6c:31:36:85:0c:a7:b2:e0:6b:73:f2:3d:4e:cb:
         af:f6:94:31:eb:5e:ed:22:91:ac:dc:30:1d:b1:d4:88:cb:e1:
         c5:75:b8:e7:e8:49:e0:cb:c5:cb:66:9b:f2:f8:6f:d1:c5:c4:
         20:a3:11:69:a4:0b:1d:ec:92:b5:33:ee:5e:63:73:f8:23:90:
         57:92:8f:c6:ad:d4:a0:75:95:b3:1d:1d:d8:2b:c0:47:8e:df:
         98:1e:5a:47:00:3c:ea:22:fe:ad:a4:e7:22:b2:94:b5:00:eb:
         ed:61:ca:cf:b3:77:15:08:0e:fa:34:43:7b:ae:48:4f:25:10:
         2b:cf:64:5a:fd:81:b4:f1:11:8e:2e:54:6a:2f:9f:0c:33:5e:
         36:01:3a:d1:1b:8d:b2:59:6b:b5:44:c2:2f:1b:7d:79:31:6e:
         50:fd:66:f0:c3:c6:c3:99:07:4b:21:e2:99:a2:03:52:72:bf:
         cd:d2:3c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----