Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
File:                     8IoI64-nvuajGD4y3lGi88zUrkc.mft (raw, json)
Hash identifier:          IpbwMwrdwvURgb8/IQNe6pAQy+j8ATUkK1bcfKjLODU=
Subject key identifier:   C6:2E:54:C5:CF:E8:6F:91:DD:CF:62:A1:FC:46:0C:3A:97:AE:C9:38
Authority key identifier: F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
Certificate issuer:       /CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Certificate serial:       01962F3D39BB6B818CC564323E28257AFBA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
Manifest number:          06F6
Signing time:             Sun 13 Apr 2025 13:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:03 +0000
Files and hashes:         1: 8IoI64-nvuajGD4y3lGi88zUrkc.crl (hash: UdbdiQ1RR988swnjeXKqD2A0pPHOAV8z7vZ8hsbeK0o=)
                          2: cTkzelFg_-EfS7l9udnxkMrP0Fs.roa (hash: UdEI1k400GkRcUTewdlzP2o8ezwAuPLRkhdPLsyI4ng=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:39:bb:6b:81:8c:c5:64:32:3e:28:25:7a:fb:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
        Validity
            Not Before: Apr 13 13:01:03 2025 GMT
            Not After : Apr 14 13:01:03 2025 GMT
        Subject: CN=c62e54c5cfe86f91ddcf62a1fc460c3a97aec938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:00:3f:4d:8d:69:df:75:ee:ea:78:22:e5:31:
                    3e:ca:56:60:eb:16:6d:78:98:6c:82:ab:29:7c:c1:
                    82:90:7f:ff:b2:4f:f2:76:15:2e:46:7a:60:fa:ff:
                    23:e8:ef:81:36:a7:a6:49:35:ce:07:c5:8f:bb:a2:
                    36:6a:58:30:8d:63:09:52:61:5c:be:79:29:87:76:
                    e1:0d:d6:c3:2f:98:d9:d6:68:9f:e2:39:ab:7a:c6:
                    0b:8b:12:85:64:88:9e:a1:7c:9b:6a:07:ae:67:73:
                    cd:1a:41:dc:59:1d:68:e0:a7:c2:e6:42:36:6a:4d:
                    c6:41:15:4c:70:86:ba:74:b1:aa:34:29:c9:63:e8:
                    b0:10:0b:d7:3d:ae:8f:43:84:7c:8c:f7:4b:1c:4c:
                    34:0f:39:f5:1a:8c:f1:7c:4e:6e:98:1e:7a:eb:b2:
                    6f:ba:df:92:f1:c2:62:5d:24:06:31:f6:0e:67:35:
                    32:be:e4:75:1e:ba:1e:31:60:20:bc:84:ac:21:ca:
                    aa:bb:76:ee:dc:db:ba:68:40:72:63:bb:0b:4c:dc:
                    33:8a:9d:92:4d:35:54:e7:6b:f5:1a:3e:e0:97:cf:
                    15:6c:d9:61:66:bb:ee:d4:d7:9d:99:b2:71:2d:00:
                    32:98:e8:04:17:99:f5:62:9a:1f:c3:37:5f:69:e3:
                    36:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2E:54:C5:CF:E8:6F:91:DD:CF:62:A1:FC:46:0C:3A:97:AE:C9:38
            X509v3 Authority Key Identifier:
                keyid:F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:10:99:7f:f2:94:e3:5d:e8:9b:29:07:15:54:45:57:ef:89:
         2f:28:46:a9:e0:d1:c6:d1:3a:95:fc:99:a1:18:8c:34:87:39:
         2e:32:73:f4:4d:da:89:9b:2b:16:f5:e8:10:93:11:24:ed:ff:
         72:0e:da:56:06:73:f0:73:d7:bb:f3:96:9e:f5:d4:39:de:61:
         1c:67:83:ce:46:08:95:08:58:db:56:5f:2d:84:0d:a4:44:52:
         3d:6f:a5:f0:40:1a:de:14:80:74:0c:77:1c:cb:89:5e:2f:29:
         0c:b0:5b:ef:44:54:77:37:a7:b6:ee:42:f1:c4:17:b5:80:bb:
         56:ea:bb:9d:88:4c:20:a9:4a:4d:2e:39:0a:f0:14:0c:16:61:
         74:1f:de:d6:cf:5a:3c:cf:bc:12:84:16:2d:d4:4e:f9:e8:8d:
         7b:4e:15:b7:9d:ad:eb:d0:36:08:97:da:5f:46:5d:2b:e3:e4:
         cd:51:3e:ff:f5:0c:0e:f5:17:21:cb:71:16:c4:0a:38:cb:f9:
         8b:af:25:de:b2:4d:32:5c:49:6f:9d:31:0f:de:f6:3a:81:29:
         81:77:8b:5f:21:21:a9:1b:50:54:59:47:e8:34:17:d6:1e:db:
         79:c7:4d:05:0a:f8:af:3e:98:5f:b5:18:5a:d7:e5:b6:7e:ac:
         70:46:61:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----