Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
File:                     1-KMdLu62epN-LofXatn50Xzal_A.mft (raw, json)
Hash identifier:          w/qdweFChZlr/2OFmCvgEEj0f1+S9Y048FZ/wxoGzrk=
Subject key identifier:   56:25:23:BE:2D:60:6F:D5:2D:7B:7B:B8:23:87:33:12:31:FF:8D:0D
Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
Certificate issuer:       /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Certificate serial:       01962DF3F10CE08188736CAF6EBE0B879D55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
Manifest number:          0C8A
Signing time:             Sun 13 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:23 +0000
Files and hashes:         1: 1-KMdLu62epN-LofXatn50Xzal_A.crl (hash: GdrGWRVwJFlY1rVId+s34NWsvJlas6xMt3yps9iDTqk=)
                          2: 39Bk5qZTsKQMFFHFGYz2jXcUTL0.roa (hash: yuPdwUCFZLhlTho5KUzDTwTUnjWxu1cEHPF0b38FGK8=)
                          3: AzSrLJFmfeHq4hW1Qf7AEyHb8Pc.roa (hash: eCVsXCjLEvLJa9+iW+ysDbya4Y+X231ugmswa/aHdwo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f1:0c:e0:81:88:73:6c:af:6e:be:0b:87:9d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
        Validity
            Not Before: Apr 13 07:01:23 2025 GMT
            Not After : Apr 14 07:01:23 2025 GMT
        Subject: CN=562523be2d606fd52d7b7bb82387331231ff8d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:16:0a:38:2b:32:60:4f:87:44:b8:35:6f:95:
                    52:6f:11:29:09:67:63:68:77:59:ff:97:2d:47:8e:
                    de:30:9c:46:55:4f:e0:93:c1:ff:d3:1a:0d:38:85:
                    58:d4:4a:4b:f7:57:61:3d:3b:13:b1:1c:b4:62:bc:
                    f0:27:c2:a2:a4:f9:49:85:bd:bf:06:20:25:b5:ec:
                    3b:79:20:0d:02:00:42:b9:1c:02:a3:98:80:0f:1c:
                    04:bd:dc:06:a0:b3:24:81:87:b8:d5:c8:80:9e:9e:
                    eb:8d:30:dd:b9:80:13:33:ab:f4:2e:7d:22:2b:fd:
                    eb:50:44:1c:da:94:a0:a8:9e:b1:9c:00:d1:88:be:
                    5e:c4:0e:2e:5d:34:f1:28:1d:2d:88:9d:30:19:49:
                    4f:41:96:e1:ac:bf:bd:94:14:64:78:0f:c6:39:97:
                    26:8e:ee:7f:c5:96:49:d5:d7:96:38:7d:ac:d4:9c:
                    13:86:bf:7f:09:cd:24:49:2a:3b:02:68:80:35:94:
                    18:ef:02:de:55:46:9c:40:9d:7f:50:8d:d0:83:23:
                    6a:f3:ff:2c:0d:da:c2:85:cc:37:7b:35:7d:88:e5:
                    cc:d2:c2:67:24:4f:50:c3:57:fe:b8:e1:ee:27:27:
                    22:9d:fc:ad:47:9f:e8:f0:49:60:e6:bc:38:c8:9a:
                    2b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:25:23:BE:2D:60:6F:D5:2D:7B:7B:B8:23:87:33:12:31:FF:8D:0D
            X509v3 Authority Key Identifier:
                keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:5f:7c:93:42:50:9a:8d:63:bb:df:58:4b:58:b5:ed:84:46:
         72:23:b0:d7:d9:6a:13:fe:43:57:54:4a:64:95:66:6e:86:59:
         0b:26:08:ad:d3:12:15:61:f8:5c:dd:db:7b:a0:e5:24:a4:e8:
         18:f7:1f:f4:c9:49:07:6d:b3:08:02:36:0d:c7:f4:97:bc:ca:
         46:b9:41:0c:66:c2:58:9f:74:f1:46:92:e2:96:0d:3f:28:37:
         71:f8:46:65:81:6f:2c:19:a7:bc:08:68:48:6f:32:0b:22:56:
         5f:0d:d1:9d:2e:bb:91:ed:35:36:f7:57:bf:c3:73:14:65:79:
         f8:a7:c9:16:bb:8d:bf:cd:55:ff:e3:65:26:ea:4c:7d:51:6b:
         f8:87:67:a8:6b:6f:0e:23:3d:f3:2d:8c:ea:f9:7b:d9:be:34:
         8d:b9:78:f9:b1:9c:e8:62:d6:86:e0:33:ba:a6:7a:59:45:83:
         7d:1b:d7:10:98:39:08:f1:55:1a:58:a6:91:10:49:a2:9b:d6:
         cc:cb:df:5e:f0:32:a6:77:02:f9:2d:54:fe:37:7c:9d:8f:eb:
         34:37:75:fb:94:f9:55:73:60:9e:6e:a6:12:6c:a8:43:44:b4:
         41:0c:d8:28:86:bf:12:d4:30:02:39:e5:24:17:1d:19:f4:33:
         36:9f:55:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----