Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
File:                     sO8ZvLI6LwTFhqwTEakbx8oql2U.mft (raw, json)
Hash identifier:          87dw5ZBABCo/eFcxEW4BVolxEJMVDAL45+DZ3kXvdBU=
Subject key identifier:   48:97:05:59:26:C4:1C:26:E8:40:B1:1E:53:50:EB:58:40:82:2F:FA
Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
Certificate issuer:       /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Certificate serial:       01962E61CA47B585380A5C599305D26209ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
Manifest number:          08D9
Signing time:             Sun 13 Apr 2025 09:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:22 +0000
Files and hashes:         1: E6bot_tKJqCzADpBxFeKtsutgCs.roa (hash: IzVVajCV/IB0bxI8d5Bqo7CZjFjDagAuPrwaJPvu9o8=)
                          2: sO8ZvLI6LwTFhqwTEakbx8oql2U.crl (hash: vmy/K2FBGSmoqzGHp6WYjEgUOKGqz2ClKjJbP58T0bQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ca:47:b5:85:38:0a:5c:59:93:05:d2:62:09:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
        Validity
            Not Before: Apr 13 09:01:22 2025 GMT
            Not After : Apr 14 09:01:22 2025 GMT
        Subject: CN=4897055926c41c26e840b11e5350eb5840822ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:10:8f:4a:21:8f:ce:40:26:de:67:13:16:4d:
                    57:38:2b:30:29:c0:e1:1d:c9:38:4b:ba:bc:74:d5:
                    4a:f2:5c:05:b7:c8:15:17:40:ca:43:dc:e1:66:b5:
                    5f:88:7d:ac:43:88:fe:8e:46:9c:89:85:8e:fb:a7:
                    31:07:df:20:d3:19:c7:79:44:2c:42:b9:34:44:5b:
                    7d:1d:53:ec:d9:d3:d8:08:5a:71:3e:0d:1e:ef:f7:
                    93:e9:7b:7e:d2:8a:17:64:23:d9:e8:55:60:ec:fe:
                    d0:08:6a:41:2a:a6:13:28:ef:e9:c8:f5:7d:67:0c:
                    54:02:70:18:21:48:47:11:f4:35:e4:96:ed:5a:6b:
                    fd:f8:7a:11:a2:ea:11:d1:1a:d9:e4:c0:f7:59:3d:
                    2d:24:7d:40:8c:41:b8:56:35:90:22:00:07:d6:43:
                    e2:ac:43:6d:c7:0b:b4:3c:d1:0e:68:88:ca:37:75:
                    c2:33:6f:05:ab:6a:b5:1e:67:cf:e7:ae:a1:83:2e:
                    57:e3:da:3e:d2:70:11:7d:48:92:a1:e4:33:6d:64:
                    ed:62:48:1b:2b:87:50:df:17:dc:26:51:5e:81:00:
                    0d:ec:af:1f:7a:25:e4:6e:e9:f4:bb:ea:88:c7:62:
                    7c:e3:b0:3e:52:02:22:0b:18:a5:0a:9a:24:fc:b4:
                    d7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:97:05:59:26:C4:1C:26:E8:40:B1:1E:53:50:EB:58:40:82:2F:FA
            X509v3 Authority Key Identifier:
                keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:63:bb:a0:b7:94:68:6e:cb:95:32:3b:86:ff:45:3e:be:9c:
         2f:45:cf:e1:d1:6c:c5:3f:8d:85:df:b2:30:ba:d5:9d:9e:33:
         0c:32:a6:30:03:5f:1f:73:25:2b:87:e3:9d:38:aa:1d:45:a5:
         8e:00:7e:cf:f3:d1:eb:6f:a2:fa:ce:bd:b4:1e:d6:15:1c:2e:
         f5:a4:7c:1e:80:e2:f0:0b:4f:91:bf:ca:ed:54:da:fb:bd:4a:
         0c:f2:35:02:1e:a4:c5:4f:a4:77:fa:cb:db:c3:ba:ab:8f:6a:
         96:4e:b0:75:87:e1:9d:74:39:54:83:cf:7f:90:7b:70:b5:64:
         9a:20:37:de:08:57:f9:c9:a3:a5:94:f3:2c:85:46:b1:7d:5c:
         40:b8:40:bb:bd:8b:3c:2e:55:25:e0:7f:0e:8a:87:e4:fb:42:
         4f:4c:95:6f:f2:34:a1:ac:8a:5b:15:9a:44:47:46:50:3c:25:
         4e:39:f9:29:fe:42:14:fb:58:71:23:04:6b:b0:94:00:00:73:
         55:32:f6:ca:c6:bd:9f:a8:f4:be:44:8e:4c:01:99:8b:b3:17:
         48:ef:ef:68:b9:a1:3d:39:71:ec:ac:c6:3f:75:92:e5:e1:01:
         12:56:37:fb:a0:e7:1e:09:7b:f9:bb:6c:c9:b1:fd:f9:71:34:
         a5:8d:f1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----