Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
File:                     8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft (raw, json)
Hash identifier:          ohjW0nw9ifq1Lw52u3qZgxRCgnHefw1M6rv6ASZWZPE=
Subject key identifier:   43:B0:86:1E:4E:F8:9F:CE:6F:A5:4D:A6:EA:E9:54:AB:64:8E:BB:AB
Authority key identifier: F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
Certificate issuer:       /CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Certificate serial:       01962DF3F95F22E5A33943DE71A9866A2AA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
Manifest number:          0469
Signing time:             Sun 13 Apr 2025 07:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:25 +0000
Files and hashes:         1: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl (hash: r9oL14JHCOMy6OqxmhiBcTAfdzHtRD1vWwbh19J32Fk=)
                          2: 9LD-hrLWBwUSPOko1WfMuzpukWE.roa (hash: IlW9fI4rY7r7GVZoUndhpUDRIk8UJ5M6N9Zdn/noO1E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f9:5f:22:e5:a3:39:43:de:71:a9:86:6a:2a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
        Validity
            Not Before: Apr 13 07:01:25 2025 GMT
            Not After : Apr 14 07:01:25 2025 GMT
        Subject: CN=43b0861e4ef89fce6fa54da6eae954ab648ebbab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:86:7b:ef:5a:04:40:fb:a5:3c:02:5a:d1:97:
                    4f:27:2d:cc:f7:7f:23:65:7e:f8:cb:3f:8f:6d:91:
                    df:84:64:99:4a:42:e9:fb:80:15:e4:ed:ef:b8:ee:
                    50:dd:93:f0:03:87:7e:02:bd:ef:26:88:7d:93:12:
                    76:cf:60:1a:b2:c2:19:27:ff:76:40:62:42:7f:c1:
                    18:d3:b9:8a:f9:7e:f7:eb:b8:97:67:36:b8:e9:d8:
                    2f:87:dd:95:e6:6f:1d:66:96:ad:df:09:a2:56:8b:
                    16:a0:be:56:52:a0:a0:7f:b3:60:b1:fe:66:72:86:
                    eb:c4:6f:6c:d9:cc:e6:34:77:2c:f9:ef:81:f0:aa:
                    8c:06:d1:93:d6:3e:b0:05:2c:cb:86:f8:85:31:27:
                    4c:5b:f3:5c:63:ed:8a:f6:ae:44:d7:86:94:6f:f8:
                    b1:a1:86:76:4f:d5:e3:bc:8d:00:68:1a:aa:1b:d0:
                    43:bd:b0:95:2d:62:45:d3:34:25:dc:c5:21:b5:4a:
                    e2:df:ad:92:62:ab:d0:76:92:2f:84:16:17:88:cb:
                    02:e2:49:9d:63:63:33:7e:6f:d0:ff:63:c0:57:9a:
                    24:be:4d:eb:f8:21:f0:5d:28:c7:f8:14:ad:bb:ee:
                    dd:14:b0:72:4d:ce:14:47:25:c1:f1:f4:d0:63:b0:
                    e5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B0:86:1E:4E:F8:9F:CE:6F:A5:4D:A6:EA:E9:54:AB:64:8E:BB:AB
            X509v3 Authority Key Identifier:
                keyid:F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:1c:e1:48:14:76:67:87:6f:fb:61:2f:c5:29:e4:1a:52:08:
         67:e0:40:98:68:70:53:ae:f2:d4:de:a2:66:13:99:55:18:e1:
         17:c7:47:7f:ba:79:ca:39:2f:78:d1:7d:56:ba:af:7a:5d:ea:
         94:27:f4:4a:84:52:b9:89:bb:b5:65:81:bc:c2:1d:ef:a6:94:
         8f:5d:e3:21:5f:e7:0d:d4:c8:4c:d3:87:43:ab:de:e6:21:98:
         d4:da:a0:85:37:09:88:3b:a0:02:20:a0:cb:0b:a1:9b:f1:10:
         5f:2b:3f:10:ae:07:44:aa:ba:ab:ea:67:56:da:42:72:99:7d:
         4c:12:ea:52:24:79:f0:67:d5:83:5a:95:36:a5:49:35:c2:70:
         1a:bf:7b:db:cd:31:5e:e9:64:fc:2b:5c:60:4a:4b:3c:11:cc:
         06:03:2c:dc:43:62:ca:1f:9c:53:d7:16:fd:1e:62:2a:94:b9:
         20:55:5e:13:5d:91:b1:3f:4b:41:34:88:b8:7f:97:71:13:44:
         4c:65:94:37:da:f9:46:69:b0:17:38:8e:eb:83:98:34:4b:c0:
         02:ae:5c:c1:b9:d6:d2:f4:10:44:4c:fa:e6:38:dd:8d:f5:38:
         67:41:72:a6:48:b0:8e:b2:b4:75:24:4d:ed:c2:2e:2f:56:1c:
         a4:35:e9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----