Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
File:                     8jJYqmuD7J-3vpZsYmqRZngcfzs.mft (raw, json)
Hash identifier:          TaF/BEyBiDbS8P8g6mPnVWUE5vZWnwKv4yp7g8+wWio=
Subject key identifier:   8F:63:A6:10:6B:18:3B:E5:9D:4D:45:74:22:92:23:CE:46:08:4A:C8
Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
Certificate issuer:       /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Certificate serial:       01962E61CD59DE64E3E13E9A5360D361FFDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: 1-wkMXSOgCsAbfcTJoQ9M_9mEa8U.roa (hash: ChEU1antJRBwFOEOOm1ILlDCVAljbS+GMt59ceUbKBY=)
                          2: 8jJYqmuD7J-3vpZsYmqRZngcfzs.crl (hash: 4sK/i9RKaeRkvXbt+jaSpHHwXVs/C6ttACPl1PuG9RY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cd:59:de:64:e3:e1:3e:9a:53:60:d3:61:ff:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=8f63a6106b183be59d4d4574229223ce46084ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4b:50:3d:43:e8:4c:cf:a1:7b:af:6f:6e:b6:
                    97:c6:cb:c9:9b:b4:fb:e5:af:84:55:1d:38:fc:6d:
                    bf:b5:95:83:e4:62:d9:e4:e6:df:f8:a6:cd:96:2e:
                    95:93:39:d5:8e:87:81:5f:78:fa:55:c5:1f:e0:e1:
                    00:02:50:11:d2:0e:a1:76:f6:29:a3:83:0b:c5:b3:
                    2a:66:08:5a:c5:31:7e:5f:df:91:a2:1e:d2:cd:06:
                    f6:6a:4d:86:d3:90:a4:5b:3c:56:87:4a:3f:22:20:
                    58:b2:b1:74:f2:fc:ca:56:4e:5a:77:f2:9e:f3:d5:
                    f9:08:e3:0e:2a:9e:0d:9e:77:9e:1e:68:7d:89:be:
                    41:c2:c3:4b:c5:93:d8:8c:d4:31:6f:b8:f8:e0:96:
                    2b:40:f3:da:ba:09:04:bc:49:64:f1:60:a8:a1:e5:
                    f3:a6:b9:46:35:74:1c:e2:91:dd:e0:fe:9e:6f:b7:
                    9a:cf:82:af:5f:fa:a8:75:4f:86:cf:14:2f:57:04:
                    78:d8:96:46:dd:28:c2:8a:3b:f9:01:66:f6:58:fb:
                    de:41:00:27:58:93:65:c1:31:1f:14:10:22:9f:8a:
                    85:bd:04:65:3f:6a:27:e8:27:11:a8:38:4e:f6:df:
                    bd:67:0e:7c:c8:7f:38:9a:36:91:b1:4c:8d:c5:4a:
                    97:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:63:A6:10:6B:18:3B:E5:9D:4D:45:74:22:92:23:CE:46:08:4A:C8
            X509v3 Authority Key Identifier:
                keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:f8:91:b1:71:07:a6:7b:28:23:7b:eb:12:56:58:e6:08:2c:
         93:8c:b1:76:5b:70:94:5c:f9:7f:01:fc:c2:a6:b8:cf:f9:eb:
         df:f0:25:82:f1:b4:fb:7d:10:e8:e6:f4:32:96:f0:4e:aa:6f:
         a5:e9:c8:3e:fd:55:19:1a:a0:56:23:47:c3:b4:0e:da:04:7d:
         1a:eb:ba:1a:05:7a:e2:10:42:6c:a4:8e:42:21:d9:3a:f7:c6:
         16:ac:26:3a:80:f3:49:02:af:64:fb:26:22:30:a6:7a:02:da:
         75:19:72:6c:b2:4b:fd:9d:61:8c:03:89:75:42:15:cf:3e:16:
         54:34:0c:fb:93:69:dd:09:80:b9:0c:e3:2a:c9:33:1e:53:d7:
         ac:17:77:8b:3c:92:90:aa:e1:a1:58:cd:b6:40:96:2b:d2:0b:
         f8:a2:af:c6:11:88:da:c4:3b:a8:41:1f:c5:82:d1:e6:9f:d6:
         f0:86:e5:12:06:46:be:4a:e7:39:05:ac:d4:08:a3:fd:74:a4:
         2e:c3:02:d7:64:66:d3:3c:b8:2b:39:e7:29:c9:18:90:5b:61:
         6a:fa:83:37:cf:13:31:0b:0b:83:0c:d8:95:f7:c7:c0:a4:61:
         14:63:7e:de:4c:69:09:9a:c0:5c:a6:4e:1f:4f:db:1c:1d:5f:
         83:39:0b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----