Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
File:                     8TWf8QwVZEIel0VzrOG6YjM7gqc.mft (raw, json)
Hash identifier:          bV3reicmA1R0L962BNvIu0zYlSrZtVFvf77noS/2BeA=
Subject key identifier:   E6:91:BB:70:46:7F:12:67:13:EA:8A:1B:6B:5D:C7:95:30:FA:9F:18
Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
Certificate issuer:       /CN=f1359ff10c1564421e974573ace1ba62333b82a7
Certificate serial:       01962E61D29155D13A06E10D4DB032E8E96F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
Manifest number:          117F
Signing time:             Sun 13 Apr 2025 09:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:24 +0000
Files and hashes:         1: 8TWf8QwVZEIel0VzrOG6YjM7gqc.crl (hash: 3Pq+kMtQhADN/XPVSsLu6pO5F9vr4zOVBVepyoJyAZU=)
                          2: xcycZms0_ZHCVQVtErEWcPT6uzM.roa (hash: LGvEW3RDqUd1ArWiz/8ADiBje4yqqRUes0HgBtn3AOM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d2:91:55:d1:3a:06:e1:0d:4d:b0:32:e8:e9:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7
        Validity
            Not Before: Apr 13 09:01:24 2025 GMT
            Not After : Apr 14 09:01:24 2025 GMT
        Subject: CN=e691bb70467f126713ea8a1b6b5dc79530fa9f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ab:8f:66:4a:d4:8b:11:0d:38:d4:36:cd:50:
                    5e:df:ee:df:a1:04:ff:3e:bd:02:0c:bc:5f:0e:4d:
                    b4:8d:8c:94:16:5e:27:cc:59:60:f4:f7:c4:3a:06:
                    67:57:b1:3b:b4:41:24:e4:0e:92:97:96:51:58:b2:
                    f8:29:b9:43:03:12:00:e8:12:a0:61:43:a0:5f:fc:
                    5c:4f:e7:d4:04:a7:b7:cf:62:89:0d:6d:73:ec:5e:
                    b2:57:62:6e:eb:da:31:a9:14:7d:0c:f6:98:60:52:
                    f5:02:9a:fd:82:37:96:c7:25:b1:a2:65:aa:3f:da:
                    2a:f1:0b:0d:54:bf:50:c0:0e:7d:a6:29:45:48:3d:
                    71:9c:17:1b:c3:79:95:dc:a6:9a:49:98:16:ea:9e:
                    19:b6:2a:df:ee:ac:d6:17:97:92:af:d4:03:bb:2b:
                    e2:98:8e:8f:fb:4f:3f:69:2c:f7:1d:44:12:bb:95:
                    cf:db:c5:06:2a:7d:1e:d8:5a:bb:e1:79:25:ef:cc:
                    51:2a:14:37:3a:ca:a1:c9:18:b4:2e:6b:9a:c4:16:
                    50:8b:d6:6c:24:48:1e:46:cc:63:96:4b:d4:5a:b8:
                    e6:45:58:fa:44:31:8b:65:c1:1f:ea:b1:6b:8b:63:
                    9d:55:68:8c:65:81:32:2a:ee:0d:90:1b:04:7d:c3:
                    ef:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:91:BB:70:46:7F:12:67:13:EA:8A:1B:6B:5D:C7:95:30:FA:9F:18
            X509v3 Authority Key Identifier:
                keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:b6:46:3f:41:a7:0d:b7:18:9e:eb:24:99:a0:9b:f0:7a:2e:
         e9:6a:52:09:be:56:f7:6d:df:30:9e:a1:45:10:ce:af:ba:d7:
         42:aa:c2:4b:9e:1e:1a:79:79:08:33:a4:fb:47:4b:04:42:19:
         d2:d9:a1:83:14:33:0c:58:82:4a:54:9f:b1:18:56:e2:22:99:
         0d:aa:c9:e9:91:77:57:60:b1:36:62:74:b9:da:22:72:64:ff:
         71:57:0c:68:3e:d2:3f:fc:dd:1e:d7:25:39:50:7d:b8:4f:1b:
         34:6d:54:1d:a1:b7:cd:f1:1d:ee:2c:e3:84:4d:d1:89:c4:62:
         74:0f:87:2b:8f:33:7e:03:6a:72:86:aa:70:c5:bd:0b:f2:fb:
         39:77:b1:e8:f0:1b:a3:bf:67:99:1a:71:42:ed:39:50:ba:02:
         c7:1b:55:1b:a0:09:c0:50:06:99:1b:e6:15:8e:92:08:3b:ed:
         77:02:dc:e1:c1:49:8e:d4:19:8c:1a:2a:55:b5:ab:a6:43:d8:
         63:6d:20:1d:af:70:7e:ba:47:2b:bc:67:a7:f1:17:4b:42:26:
         17:b1:e4:bf:cd:1a:a1:f3:d5:f3:06:6e:a8:2c:dc:fd:fe:58:
         c6:50:e4:4b:24:6d:c6:e0:ed:f8:0a:f4:75:2d:f3:fc:1b:95:
         39:37:41:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----