Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
File:                     8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft (raw, json)
Hash identifier:          64yiPiY6cNhw8MjTPJgwvca4v2A71kvVSSuuEzURigk=
Subject key identifier:   16:C5:3C:E7:B9:06:E4:9E:DF:8F:F8:D5:BD:B5:0A:91:89:93:0D:72
Authority key identifier: F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4
Certificate issuer:       /CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
Certificate serial:       01962E61D558518C80920AE2AD073FFCB09F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
Manifest number:          01D3
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: 8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl (hash: 6MDgNr00jiiXa5JEiHS+fdeYxfsoEH/kOmpRy0LJsAU=)
                          2: xvoTABjzfOJqRlktELqO5-hThXE.roa (hash: x+oF0WQqCiPxjdbp2WUuqGjKnL/p9KwR8r/xmYFnEcM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d5:58:51:8c:80:92:0a:e2:ad:07:3f:fc:b0:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=16c53ce7b906e49edf8ff8d5bdb50a9189930d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5d:7a:cf:d1:c9:10:21:c0:45:4d:ae:3e:f4:
                    00:78:03:96:54:bf:96:11:18:8f:1b:50:e6:25:32:
                    50:2e:40:c3:2f:c4:10:d6:96:d1:ac:50:a7:bf:27:
                    af:1b:c1:59:10:c8:ca:a6:fd:68:20:f3:e2:1c:6c:
                    b4:14:a6:a4:fb:c3:33:ce:50:43:10:ac:a5:83:e7:
                    2c:98:f1:59:d1:04:f8:85:3d:a4:86:8e:2e:9f:ac:
                    f5:9a:0e:f0:07:2b:4f:d4:14:b7:d0:92:8e:bc:b1:
                    88:4c:13:45:50:97:a0:f8:e7:35:3c:69:5d:46:0a:
                    26:0f:69:c4:c4:77:93:2e:f7:56:22:48:de:8f:23:
                    b6:24:29:fd:36:25:76:eb:82:ce:16:fa:c6:53:b2:
                    04:6a:1a:10:c4:0a:ac:3a:10:f6:5a:86:57:a9:1b:
                    2a:52:61:6d:65:fe:2f:cc:ba:94:34:ce:f9:fd:4d:
                    6b:2b:15:a0:1b:e0:1e:db:a1:26:b0:b0:3d:fe:a5:
                    c3:74:b0:1d:c6:3c:17:50:53:60:23:33:91:d1:b1:
                    2a:6a:74:29:a7:2f:78:ec:82:df:f3:ea:73:44:91:
                    d7:87:f5:ca:45:ab:d0:a1:00:77:3e:cf:f1:85:27:
                    6e:79:90:1a:eb:5a:82:0f:a7:be:ad:d3:5e:be:1b:
                    ff:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C5:3C:E7:B9:06:E4:9E:DF:8F:F8:D5:BD:B5:0A:91:89:93:0D:72
            X509v3 Authority Key Identifier:
                keyid:F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:31:2f:bb:fa:b5:ee:09:0b:0f:90:9e:55:4b:70:78:32:ae:
         75:4f:ab:fd:c9:57:9e:da:41:04:d8:87:a7:b5:76:f6:49:54:
         78:56:76:7b:da:8b:df:e4:c2:f6:bb:cb:11:b7:1d:0c:41:5c:
         f2:60:8a:5e:21:4d:95:2f:c6:a6:b0:b8:a9:5a:4c:c4:b7:0d:
         c7:db:75:c0:7c:0e:b3:48:f8:d9:97:d8:5d:95:d6:67:60:9c:
         db:98:92:73:d8:7c:21:fe:2b:48:01:fc:07:ff:38:2d:b0:cd:
         60:95:53:20:94:44:12:2e:85:a9:fd:65:04:89:ce:39:40:52:
         e7:bb:28:e7:c2:b3:69:48:c5:66:83:8c:08:c8:c4:ca:9d:9c:
         4f:9f:77:af:32:1c:4c:e9:d8:14:e8:cd:61:84:eb:a0:81:23:
         93:cd:b4:00:e1:e1:6e:94:3c:0f:c4:06:e9:c4:65:13:03:e2:
         0b:64:47:a2:94:f3:bf:f6:1c:28:59:2a:5c:c7:84:26:25:03:
         d6:1e:e3:c3:9b:4e:42:e1:3f:ef:69:3d:b7:4c:71:5a:88:ae:
         c7:85:b4:f1:01:97:d1:79:17:3b:2a:c2:14:3b:a2:18:a2:d3:
         09:e1:11:5b:3c:0b:81:f3:52:95:df:68:08:62:07:dd:e2:bb:
         92:ae:ca:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----