Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.mft
File:                     rPu8qFK5VzhZCfa9KIzfNj8hiwY.mft (raw, json)
Hash identifier:          2VpmEQkwy4VzyHvKivJ9POPUVhYVKvPCXnZwhVeLVEQ=
Subject key identifier:   6C:79:CC:BB:37:7C:84:0C:63:86:C2:5A:65:F1:1F:D4:B8:A6:8E:65
Authority key identifier: AC:FB:BC:A8:52:B9:57:38:59:09:F6:BD:28:8C:DF:36:3F:21:8B:06
Certificate issuer:       /CN=acfbbca852b957385909f6bd288cdf363f218b06
Certificate serial:       01962DF41F2E2838168A05D4FF365D0579B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPu8qFK5VzhZCfa9KIzfNj8hiwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.mft
Manifest number:          11BF
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: IsJ0c25oEMcq2hs62WVn3JnR5kc.roa (hash: FVZnWTpWqx/hdTsogFHC4HE54Isaap3vLQprMcgXpZE=)
                          2: rPu8qFK5VzhZCfa9KIzfNj8hiwY.crl (hash: XJFPXkFh8xr15COn/v+t29jcuNxdxzr9vvUnyxJu7hI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1f:2e:28:38:16:8a:05:d4:ff:36:5d:05:79:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acfbbca852b957385909f6bd288cdf363f218b06
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=6c79ccbb377c840c6386c25a65f11fd4b8a68e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ec:83:b2:fe:7d:07:c0:36:48:05:fe:ff:1f:
                    ca:ff:95:ec:fe:a8:d6:4e:33:b4:b0:5c:21:ba:60:
                    d4:06:66:05:bf:68:de:27:3b:2b:46:f8:7b:37:0a:
                    9c:34:bf:6b:c8:4c:2e:20:f6:a6:43:7c:05:a2:32:
                    03:fc:8d:20:63:20:6f:b3:e5:24:b7:dd:b2:3e:dc:
                    ff:6a:60:25:18:57:fb:ff:90:2d:00:40:13:74:22:
                    73:85:10:96:15:5e:57:2e:98:44:d4:df:3d:71:6f:
                    9a:93:ba:50:d5:fe:ff:20:1f:7b:34:47:2c:e6:38:
                    34:f0:b5:65:7c:4a:12:03:28:f5:74:36:24:05:82:
                    77:ff:73:8e:e5:f0:e4:de:1f:9d:19:0d:18:7f:e9:
                    1d:6f:78:59:4c:69:8c:5f:12:76:1f:1d:f0:62:b6:
                    6f:0c:ee:fd:1c:43:f2:a3:ed:d8:36:bc:35:ac:13:
                    59:ea:7b:b9:e0:92:ed:58:ab:92:d7:8c:0a:5b:d0:
                    24:97:50:51:76:d4:ab:bd:43:0d:7a:8c:85:10:b6:
                    06:ce:25:c1:82:08:4f:19:80:1f:82:27:ee:d1:4c:
                    00:da:1a:86:1a:68:2b:a0:e1:0f:53:07:40:18:ee:
                    6d:43:2f:f2:a4:0c:48:a6:c4:8f:b4:e1:f9:f3:f6:
                    6e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:79:CC:BB:37:7C:84:0C:63:86:C2:5A:65:F1:1F:D4:B8:A6:8E:65
            X509v3 Authority Key Identifier:
                keyid:AC:FB:BC:A8:52:B9:57:38:59:09:F6:BD:28:8C:DF:36:3F:21:8B:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPu8qFK5VzhZCfa9KIzfNj8hiwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:47:d9:15:47:9e:3b:a8:f2:5e:c8:87:f7:94:3d:95:4b:12:
         a4:4a:36:f2:db:ff:3d:23:8f:66:a8:e2:18:32:82:5f:9f:6f:
         ae:a3:18:89:51:4a:e8:a3:8e:71:22:0f:c6:38:09:56:c9:ad:
         31:0c:78:c2:b0:68:5e:a2:08:f1:da:9c:99:30:8b:57:d4:36:
         43:44:ad:6a:d0:6e:cc:75:9b:e4:92:f0:d1:77:91:db:c5:92:
         06:56:f3:d2:c1:ce:7e:85:8a:40:93:d6:84:2f:a0:74:22:1c:
         b2:6e:77:8c:06:a0:43:97:be:9d:5d:85:54:f0:27:a6:b9:9e:
         5e:66:4e:aa:2f:43:49:cf:a5:58:a9:23:64:13:ac:1f:eb:03:
         9c:8b:de:68:85:b2:15:6e:39:3b:74:7e:10:25:9f:e8:5a:70:
         5f:a6:0b:b5:91:14:26:56:37:ec:ba:47:e3:b3:0c:d1:b7:eb:
         38:1e:12:c2:14:4d:bd:ac:0d:8d:83:d1:0c:1b:c2:57:8f:e3:
         bf:df:63:0e:a4:3c:2e:85:c4:3c:5f:f7:94:03:16:c2:a8:3e:
         93:69:d7:e5:2f:52:d4:c0:9a:b5:a6:06:fc:96:15:b7:d9:7f:
         41:fe:3e:ad:60:a3:2f:02:14:ef:4f:fd:42:b1:22:84:9d:86:
         34:02:ac:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----