Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
File:                     8SsbaOoQk7zueNBxkubYw_cDAs8.mft (raw, json)
Hash identifier:          MiyoumRjEXZvAeMgiDS7Ody2+3X8GeFLm5nPgo7/qDc=
Subject key identifier:   FE:90:F5:20:75:D6:0E:06:BA:B2:AD:CC:3D:5A:76:CB:31:1B:B1:FF
Authority key identifier: F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
Certificate issuer:       /CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Certificate serial:       01962E990264954C6ADDA3B78D6748EEC71B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
Manifest number:          13D6
Signing time:             Sun 13 Apr 2025 10:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:41 +0000
Files and hashes:         1: 8SsbaOoQk7zueNBxkubYw_cDAs8.crl (hash: 0yilWPmmed0vMkRWKMZJWNosBn9fNXmFoybWcFhePZU=)
                          2: bKPhCw0mFqwfHuOY5bTkew_cDWA.roa (hash: GZO9dwOguzhoWcajFIoo6bMBVjK4nlEVTDqTZEZzar4=)
                          3: u_s4QKsF9p1kSN0KedlqNHJpJkI.roa (hash: 8YDGRlWAcN7f5DRHYPeywi/SAyIqYgv/xJQxk+e27Qg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:02:64:95:4c:6a:dd:a3:b7:8d:67:48:ee:c7:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
        Validity
            Not Before: Apr 13 10:01:41 2025 GMT
            Not After : Apr 14 10:01:41 2025 GMT
        Subject: CN=fe90f52075d60e06bab2adcc3d5a76cb311bb1ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:aa:96:97:60:1d:98:9b:8d:e5:41:ee:f7:fe:
                    00:74:aa:76:c1:13:79:6c:5e:20:b7:34:32:c4:35:
                    f3:3a:7f:ac:78:bf:0a:81:2d:db:fe:20:d6:0a:e4:
                    b5:37:3c:b0:f9:b1:89:49:c3:fb:46:53:d1:0d:0f:
                    2e:c6:9a:66:5c:cf:2c:9d:42:7c:2b:ee:70:62:00:
                    e3:80:61:78:b7:7b:20:6d:56:75:76:3f:ad:52:3e:
                    88:9c:77:a4:31:44:18:6e:d7:ed:5c:0c:cf:ec:db:
                    d2:fa:6a:df:f6:ee:54:21:ff:aa:da:68:db:51:3c:
                    2c:45:7f:81:0f:da:6a:cc:c6:8a:b6:77:ab:ac:dd:
                    bb:f7:ef:54:af:24:4d:ab:cf:1c:48:71:66:44:59:
                    41:81:a0:5b:a4:67:1e:e6:a7:c7:17:2f:59:12:c3:
                    b0:ff:8e:6a:81:65:ed:4f:6f:35:ad:34:fc:15:c7:
                    a5:4a:3d:59:35:57:8c:92:31:c4:73:9e:71:82:08:
                    78:55:0f:9f:e2:2f:c4:c5:89:1a:53:d8:af:de:b7:
                    33:92:88:9c:3a:cd:c8:4c:c0:f2:8b:84:2b:2a:da:
                    ad:5f:69:eb:ab:6f:37:85:12:e6:a3:a5:6e:6b:7c:
                    3b:b8:19:2c:9c:a0:b3:49:fa:e4:d6:1a:cd:0d:02:
                    31:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:90:F5:20:75:D6:0E:06:BA:B2:AD:CC:3D:5A:76:CB:31:1B:B1:FF
            X509v3 Authority Key Identifier:
                keyid:F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:7f:9c:47:d3:21:44:38:ed:1e:97:76:08:d9:b8:36:c0:c5:
         0f:40:52:24:b7:8a:5e:ee:7f:d8:f7:cb:d4:ee:53:5d:18:50:
         ca:5b:23:93:e6:4d:81:80:e0:90:60:02:ed:27:01:4c:61:55:
         58:55:d5:61:01:84:ae:a5:15:0f:10:39:d6:6b:ad:b5:12:a2:
         20:d8:9e:e5:3d:e0:4c:28:02:ac:09:e2:f3:7c:0a:20:23:a8:
         2f:0f:f7:38:89:17:f5:be:c5:53:4d:cf:85:f9:90:df:73:68:
         1a:b7:10:a7:83:fc:a4:ad:45:8a:79:f8:f0:e7:fd:c1:75:0f:
         b7:7b:02:f7:46:8a:1b:6e:f6:89:1a:61:e1:c2:1b:40:a6:ca:
         06:16:ca:a7:14:f7:16:43:0b:03:dc:ed:6b:ce:b8:e8:a1:06:
         ff:8a:43:e9:09:e4:17:fc:7e:92:d3:71:49:12:05:0c:37:c7:
         62:9c:67:64:e4:00:bf:27:2d:0b:58:5e:11:a9:c2:17:76:b6:
         fe:63:06:5b:47:87:4d:d0:00:a7:43:07:af:29:58:37:b8:0f:
         5a:61:96:89:af:c3:62:ef:90:81:c6:53:35:0c:90:89:e5:78:
         34:27:c3:da:fe:ec:fd:aa:a0:a9:b7:5e:3a:ae:c4:c1:51:c0:
         f1:37:47:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----