Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
File:                     8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft (raw, json)
Hash identifier:          IZC5j9oeAni8sg8/iaLCyEQ87aFCLSYJnGku/6fuvKQ=
Subject key identifier:   09:43:BC:48:B9:C5:9A:D6:92:A4:C8:F2:04:25:A7:FE:4C:15:A5:00
Authority key identifier: F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F
Certificate issuer:       /CN=f2d4116975d3e87bd8a28e643c69a3081de0019f
Certificate serial:       01962E98FD4A4C2CFB67BC79F62DFECABBAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
Manifest number:          08F7
Signing time:             Sun 13 Apr 2025 10:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:40 +0000
Files and hashes:         1: 8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl (hash: 2MWX/7nDBrfZ7gCbiFwWDY51HamW95GY9l5J4pnQXkA=)
                          2: SeOuDtHpMnNedoWWR3YCwAFSo6Q.roa (hash: KKrsIQvSnuAAjrYFyC+00nKT3QiU4KGPAaz0PYrqnb4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fd:4a:4c:2c:fb:67:bc:79:f6:2d:fe:ca:bb:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d4116975d3e87bd8a28e643c69a3081de0019f
        Validity
            Not Before: Apr 13 10:01:40 2025 GMT
            Not After : Apr 14 10:01:40 2025 GMT
        Subject: CN=0943bc48b9c59ad692a4c8f20425a7fe4c15a500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:05:af:38:c5:34:60:66:87:75:8b:4e:f6:92:
                    c0:a9:f6:5e:d0:66:4d:97:ba:f6:78:b9:37:1d:d0:
                    7f:e6:65:25:55:29:10:8d:c1:7e:cb:13:d6:0d:4d:
                    57:de:0a:04:6c:93:15:99:e9:7d:ca:fc:7f:21:78:
                    d0:02:47:9d:af:4a:53:21:b4:22:c7:01:8f:b4:02:
                    21:a8:c9:dd:ed:6c:9d:8a:df:87:33:c1:7c:ed:ae:
                    87:62:f3:ed:7d:59:13:22:77:91:3f:ac:23:70:ee:
                    97:da:27:4d:28:85:3c:a4:e2:df:9a:b5:03:fa:60:
                    2a:0a:ef:72:a5:d1:6c:62:6d:69:4e:e5:e6:60:76:
                    9c:b9:01:03:78:93:73:00:a9:89:82:f9:74:8b:cb:
                    e4:27:a6:59:59:c4:18:eb:bc:23:de:03:07:c3:dc:
                    6b:b2:71:d8:7b:89:4e:95:8c:c0:4b:b8:7e:5c:71:
                    43:d3:2c:e2:d5:21:8d:db:58:5d:e1:dd:86:7d:01:
                    c6:e4:0e:89:a4:04:2a:51:47:ec:b0:6f:af:26:83:
                    3e:36:42:19:cb:37:f9:bb:ae:69:01:bc:7d:92:b7:
                    3b:03:b9:62:55:ed:f6:70:f0:80:42:65:45:f1:c4:
                    cc:31:eb:15:01:c2:38:a7:90:bd:e8:2f:7d:f4:6c:
                    a8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:43:BC:48:B9:C5:9A:D6:92:A4:C8:F2:04:25:A7:FE:4C:15:A5:00
            X509v3 Authority Key Identifier:
                keyid:F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:82:66:80:2c:38:86:8d:9e:11:66:05:51:01:11:9d:d2:32:
         a5:6a:4a:01:93:53:73:99:44:4f:17:7d:39:37:82:3e:3d:1c:
         f3:60:cc:34:5c:4e:27:62:45:34:6c:5b:06:08:f6:7c:f1:f6:
         99:69:9d:64:ca:6e:66:25:d4:26:ee:18:71:22:e8:e9:79:66:
         2e:03:88:6f:54:67:1a:ca:6a:64:83:35:76:8d:6c:8f:30:7f:
         0b:30:fe:4f:51:3c:e5:58:4b:48:05:bc:73:1d:be:7b:1b:33:
         b4:53:c9:81:8c:7c:b1:73:f0:e7:94:b3:ab:ea:8e:02:5a:3f:
         71:70:7f:ea:85:00:1b:6b:7b:14:b3:40:a3:84:5a:c1:c5:c1:
         31:d6:a6:6a:00:99:4c:44:e4:28:1c:3e:ef:f5:f6:6b:12:22:
         09:dd:37:ad:a0:d2:80:ce:12:66:75:1e:d0:a7:fd:84:1d:5d:
         3f:78:62:4d:85:88:c1:d1:7a:04:17:01:3a:4d:bf:62:eb:1c:
         67:38:04:ff:9e:48:cb:2e:04:b6:2f:3c:90:72:58:58:1b:2b:
         34:23:db:a0:bf:4e:ac:b6:0b:36:28:08:a8:27:44:26:12:0f:
         11:27:0a:f5:4a:d1:4f:de:f9:6e:a9:26:ca:1d:10:f0:6d:91:
         c2:f3:4b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----