Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
File:                     8DqRN3TbyeYF3BerI6BaFoA5jeU.mft (raw, json)
Hash identifier:          +rJXLeXZEYmLj1236xTEHb7dRhP/XkCSWhcVYE/MyRQ=
Subject key identifier:   B7:EF:CA:48:19:DC:3B:69:45:FE:06:62:24:46:F0:A0:F9:C1:A2:28
Authority key identifier: F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
Certificate issuer:       /CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Certificate serial:       01962E98D6CB5C4A5EA431D28181655EB678
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
Manifest number:          08AD
Signing time:             Sun 13 Apr 2025 10:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:30 +0000
Files and hashes:         1: 8DqRN3TbyeYF3BerI6BaFoA5jeU.crl (hash: AyudcOuivyBD3frT2AFlS0Wv6fjVIrZV2mU3M4Z53qQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d6:cb:5c:4a:5e:a4:31:d2:81:81:65:5e:b6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03a913774dbc9e605dc17ab23a05a1680398de5
        Validity
            Not Before: Apr 13 10:01:30 2025 GMT
            Not After : Apr 14 10:01:30 2025 GMT
        Subject: CN=b7efca4819dc3b6945fe06622446f0a0f9c1a228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f5:2d:a0:a1:f3:c8:33:7e:b5:6f:c7:33:59:
                    06:e5:08:48:38:da:f6:06:60:87:2b:34:46:d3:e6:
                    b5:49:3e:fc:79:ef:14:c1:52:d9:e2:4c:82:54:ff:
                    b7:6d:a5:5e:26:8a:72:49:85:ef:3d:4f:14:2c:34:
                    2e:76:76:36:cd:75:61:8c:4b:8f:4f:27:3e:74:06:
                    fc:2f:48:b4:66:6f:0b:74:75:d5:21:13:06:e9:06:
                    9a:7b:ed:d3:ac:b4:63:a7:be:7d:1e:7c:85:3d:7d:
                    01:ad:54:0a:23:31:51:17:6f:f1:c9:d6:60:56:ac:
                    a2:27:8c:1d:d3:01:3a:eb:2b:02:0b:ad:41:5b:2b:
                    88:45:38:6a:0c:b3:56:94:07:92:20:a3:9b:0c:9a:
                    07:d0:b9:ee:f3:0d:b3:d7:a3:20:42:81:c4:da:7f:
                    05:8e:c6:67:62:91:7a:66:5b:2e:26:95:a2:ca:71:
                    5c:c1:01:f4:95:61:19:a7:a8:5f:d9:21:18:e7:b6:
                    b3:08:65:e9:59:72:8a:64:5e:e8:ce:19:48:11:f2:
                    92:a3:64:42:6d:91:5f:5c:8c:f8:ac:25:cf:35:a1:
                    c9:79:bc:14:46:a4:37:fd:50:d8:ce:bc:05:f4:6a:
                    29:88:e5:be:63:be:44:ee:85:0d:4a:ec:6a:ad:53:
                    4a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EF:CA:48:19:DC:3B:69:45:FE:06:62:24:46:F0:A0:F9:C1:A2:28
            X509v3 Authority Key Identifier:
                keyid:F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:23:8d:00:d3:d0:f7:d3:76:2a:1c:e0:45:00:7a:b1:f7:a3:
         df:bc:8e:0b:92:04:0a:14:0f:21:d7:6b:51:3e:f7:41:fe:16:
         99:96:01:1a:7a:f6:eb:bb:70:4b:a6:6e:bb:a7:58:5d:34:6a:
         44:f6:27:dc:7d:df:fe:23:f4:3e:b2:20:85:c2:06:c9:c4:93:
         f5:ec:2d:f0:7e:6b:d9:09:45:a9:3f:26:1e:93:ab:38:f3:b6:
         8b:aa:76:6f:22:78:8c:0e:2c:1a:e5:df:1e:d3:ab:e7:e4:54:
         6b:6d:19:84:07:4e:c3:1d:63:4d:41:6d:ec:bb:f0:23:a6:c2:
         15:6d:51:96:e0:d2:b4:42:c9:06:4b:f3:44:bb:80:b3:08:48:
         25:0c:be:ab:9a:56:52:88:f1:93:aa:66:12:3a:56:8b:32:f5:
         7f:f1:19:4d:e4:0c:4e:8c:49:10:10:94:ff:6f:32:c3:f2:3d:
         9d:be:83:d6:e2:08:61:76:33:e6:0e:62:3b:92:84:c0:83:3e:
         44:b5:43:1e:78:db:b1:92:cb:e0:92:70:5c:73:34:dc:dc:f2:
         7c:07:7e:a4:9f:a6:e5:72:9a:b7:13:28:a7:83:60:82:da:06:
         d4:dc:ab:20:38:23:19:47:af:ca:7a:79:c4:3f:cb:4d:fa:5b:
         89:fa:54:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----