Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
File:                     8gI-dqaOpsn3DT6nLfhOU9whck8.mft (raw, json)
Hash identifier:          DuNuZpjVDDaLanelyM9Lothe9iahMfmJJecyRWLoowc=
Subject key identifier:   41:6E:4B:7C:2F:D1:16:89:5D:D6:8A:80:2E:1A:E4:EC:FB:75:04:8D
Authority key identifier: F2:02:3E:76:A6:8E:A6:C9:F7:0D:3E:A7:2D:F8:4E:53:DC:21:72:4F
Certificate issuer:       /CN=f2023e76a68ea6c9f70d3ea72df84e53dc21724f
Certificate serial:       01962E986ADF9903269D50D47DD58C1A4F34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
Manifest number:          0D3E
Signing time:             Sun 13 Apr 2025 10:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:02 +0000
Files and hashes:         1: 8gI-dqaOpsn3DT6nLfhOU9whck8.crl (hash: QOUJub/1amdqLxJOSIFeBkQ8hl176XSIrDPRkstY5lA=)
                          2: xmm2JL7TcI6ebRwScNNxmj8JWuo.roa (hash: fkFUQl1m0mbIlDS4H4YUitr8IcfvKPdCtORJm2ZIyMA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6a:df:99:03:26:9d:50:d4:7d:d5:8c:1a:4f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2023e76a68ea6c9f70d3ea72df84e53dc21724f
        Validity
            Not Before: Apr 13 10:01:02 2025 GMT
            Not After : Apr 14 10:01:02 2025 GMT
        Subject: CN=416e4b7c2fd116895dd68a802e1ae4ecfb75048d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:95:ae:73:39:cf:89:61:35:7b:e8:4d:a7:11:
                    aa:9a:98:0d:04:8c:63:49:f0:ac:bf:99:14:14:56:
                    f2:8a:3e:d3:4a:9d:c6:a2:ab:0e:0d:7b:21:28:49:
                    ae:b4:6f:30:45:c0:4a:4c:aa:bc:41:cd:4e:3d:44:
                    d7:53:77:aa:5c:a5:bc:ff:58:32:fe:4b:1d:ce:3d:
                    8c:91:27:47:e1:7b:d4:47:cb:6a:4f:f6:cc:85:4a:
                    ed:33:44:62:20:f9:56:83:34:bf:90:ed:cd:28:48:
                    3e:64:7c:5f:d8:57:05:87:d3:f9:d3:ee:39:52:ae:
                    1b:79:4d:6f:7a:cb:79:98:19:28:a5:03:a7:57:2b:
                    51:2b:80:eb:46:a6:27:08:ec:f5:0d:37:f7:de:8a:
                    17:1d:e9:28:89:c5:0b:cb:6d:bf:26:16:f8:fe:74:
                    54:0c:63:94:e0:0f:cb:cc:1a:44:d8:7d:e2:31:18:
                    b8:e0:9a:64:37:d6:f3:ce:6a:d3:94:26:69:1f:92:
                    6a:29:0b:cf:49:ca:16:c7:1f:fd:0c:00:1b:6d:f7:
                    3d:e7:6b:49:dc:cc:fc:f5:ca:5c:52:cb:80:54:3e:
                    c6:3a:79:31:f8:eb:16:f8:71:d3:6e:24:87:a7:11:
                    43:c1:3f:a9:aa:6b:ea:78:45:f7:3e:2d:ea:ab:fc:
                    18:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6E:4B:7C:2F:D1:16:89:5D:D6:8A:80:2E:1A:E4:EC:FB:75:04:8D
            X509v3 Authority Key Identifier:
                keyid:F2:02:3E:76:A6:8E:A6:C9:F7:0D:3E:A7:2D:F8:4E:53:DC:21:72:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c3:28:9d:5f:26:01:1d:fa:55:ae:df:95:2c:3c:72:0a:ca:
         d7:50:26:52:57:ae:1e:ee:25:c8:31:30:3f:62:55:64:59:84:
         f5:db:9b:8e:b1:a9:b0:d4:c8:4d:b5:44:1c:de:55:b7:62:22:
         3e:05:42:e4:bc:d0:da:11:b1:42:44:c3:24:63:a2:23:f9:a8:
         75:1f:c2:2b:16:5e:eb:93:42:c2:e3:27:e9:04:a9:2c:04:4c:
         75:47:b8:a1:c4:7a:64:66:8d:0e:37:6a:60:2f:b9:de:ca:aa:
         10:5b:23:3b:09:6e:3f:37:5d:21:fb:66:1a:e1:da:38:6d:19:
         d9:8a:5a:9b:47:57:35:52:96:e4:db:87:93:f6:87:ea:c5:3b:
         d2:ea:f5:25:b1:fe:3d:87:55:93:6e:59:69:fa:a7:4e:50:24:
         d5:f7:f9:23:7f:53:9c:97:da:0b:4b:12:78:eb:10:ac:42:5d:
         dd:ae:26:41:27:7e:e8:36:68:be:fe:75:5e:d7:d1:2c:ac:a7:
         8b:a4:7f:df:ba:d5:3e:fb:49:82:95:08:17:57:25:9f:e8:6f:
         f9:20:5f:ff:bc:a7:a7:15:48:db:92:7e:e6:04:1f:9a:ca:ca:
         fc:52:73:70:ce:e0:4b:42:30:29:33:0a:49:d4:3a:42:04:4b:
         be:e0:6e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----