Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
File:                     8aBsbBCOlBmyzbIdSLSaa71sFt8.mft (raw, json)
Hash identifier:          xphoN9JZNkBq9XsIQsEwknAMAt1S8I/P9hQmqyfUGfY=
Subject key identifier:   7C:F5:91:F8:B6:93:00:5C:EB:C4:ED:C3:9F:EE:AA:D3:89:C5:5C:06
Authority key identifier: F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
Certificate issuer:       /CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Certificate serial:       01962E987F5B1E13E6565962ACBE7897A2D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
Manifest number:          14A1
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: 8aBsbBCOlBmyzbIdSLSaa71sFt8.crl (hash: wWnfVZZ90F7qFmDyUtx/jjmBZuNA4Hz5BY6U6g+gZSU=)
                          2: LYYtWBIrqnMkBqXL_qoGSSiMC0A.roa (hash: GO+MMgl638g9Pe8U4lrnZd+WeVwSJjTIvRPV7rn/M2U=)
                          3: qUqbG1fI6WnBp5sF-Oa70_Lholo.roa (hash: Onc/iKE+MBUdx68cwO8V8LQmCLrY9+uNfRvlbv3SVUg=)
                          4: vNazpVnOuKKsE-A9nDrKkBqBqmw.roa (hash: 6yzwUeXrNsunwiRKny+F9bobTBkszKyU+zUViVo+zKA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7f:5b:1e:13:e6:56:59:62:ac:be:78:97:a2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=7cf591f8b693005cebc4edc39feeaad389c55c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5f:62:fd:d8:de:f3:34:7d:b6:3c:9a:30:03:
                    63:27:48:d2:ef:42:5b:be:1a:d8:57:ad:0f:fa:6c:
                    88:20:1b:3b:a0:2d:57:f2:22:44:fc:5b:49:90:11:
                    14:93:44:8a:46:53:7f:80:b2:13:23:23:f8:de:18:
                    ca:ed:68:07:e4:2e:2e:e5:db:8f:89:af:57:2a:77:
                    79:b2:b3:d4:8f:2d:f3:ec:ec:1e:f8:ff:48:84:e9:
                    3a:75:2d:5d:c8:aa:4a:d6:6b:2c:ff:ea:33:01:7f:
                    6d:4b:e8:65:a3:ec:fe:98:77:7d:42:75:91:91:61:
                    8e:83:d6:4e:14:a5:d5:1e:4d:60:c0:f7:30:72:e9:
                    e9:bd:da:a5:4b:11:a3:a6:19:c0:3b:3e:fe:03:f3:
                    9c:60:5d:47:e2:27:17:15:46:98:a8:d0:5a:bb:ee:
                    d4:7f:e9:c7:44:4f:50:1c:d3:49:e2:72:10:cb:8c:
                    82:7e:3c:22:ea:12:44:c5:af:48:df:fc:97:76:d7:
                    6f:10:4a:3c:69:92:86:81:7d:42:1f:4a:6b:20:29:
                    ad:73:ff:75:6d:a4:09:7a:c4:04:ef:e8:47:95:17:
                    dc:8c:70:0e:82:b5:1b:72:27:e5:4e:3b:fd:da:53:
                    a0:73:2c:09:4f:ac:25:21:3e:cb:64:63:68:b0:98:
                    a4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F5:91:F8:B6:93:00:5C:EB:C4:ED:C3:9F:EE:AA:D3:89:C5:5C:06
            X509v3 Authority Key Identifier:
                keyid:F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:be:0b:29:a2:75:cf:aa:d4:cc:68:43:f5:cf:4d:09:27:2f:
         db:9f:18:e6:a8:48:4b:e6:66:11:c0:90:b9:aa:db:63:69:70:
         ce:5d:28:3f:fd:d2:fa:d7:41:5d:2a:92:72:7b:9c:0d:5a:f4:
         a3:f0:aa:fd:75:16:77:d3:a3:b9:2f:2b:8a:5f:9c:6c:68:fb:
         dc:c5:ea:00:5f:7f:37:ad:0c:bd:71:d5:11:e0:13:a8:a0:03:
         2c:21:93:24:af:2c:8f:1f:f8:e9:aa:9b:b4:1f:db:67:74:4a:
         8f:f5:14:24:8d:a1:2d:d5:7f:f5:19:fd:e9:e4:ff:6b:7d:ac:
         bf:4e:57:dc:d8:a0:bd:11:69:81:b9:67:3b:95:fd:54:a8:f3:
         6f:ad:61:ef:42:f8:8f:9f:ea:1d:df:33:d9:b8:85:e6:0a:6e:
         83:98:21:d6:97:00:bf:5a:c5:61:e2:04:64:23:b7:1a:e1:1c:
         af:e1:c6:10:60:75:1e:6b:bd:d1:cc:74:7a:69:19:10:b2:99:
         c2:e7:5a:0f:38:c1:ab:39:86:b8:09:5f:5c:90:0a:13:a3:04:
         22:a9:e8:ef:90:4b:8a:0b:03:0a:2b:a2:80:14:25:95:85:91:
         b7:97:57:a4:f5:33:3f:fa:d4:24:be:9d:90:07:89:a7:ef:5f:
         95:6d:96:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----