Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
File:                     B8QNcBYPMIZCEpobcq5a5S24g8Q.mft (raw, json)
Hash identifier:          uofmnhEL09eUZXbr5aC+PqZA3xw+itRZB1BCTlfsTrs=
Subject key identifier:   EE:20:A4:E2:AA:0B:0C:FD:90:8C:31:B0:D4:6F:23:DE:D3:16:C7:8F
Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
Certificate issuer:       /CN=07c40d70160f308642129a1b72ae5ae52db883c4
Certificate serial:       01962DF3FB0A32E4AB1E67B818E21C5A8B63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
Manifest number:          0DA8
Signing time:             Sun 13 Apr 2025 07:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:26 +0000
Files and hashes:         1: B8QNcBYPMIZCEpobcq5a5S24g8Q.crl (hash: EDoi07nWqXQMtWSsYKaY/Ldx169ag+mL9S3XNiz1pws=)
                          2: FrqlWltvg2IIueyy45ogVbfzXOI.roa (hash: I5FtBNSL1o5XSBQN3V8eqj4CiYkfCwGhk95ch/7f1y0=)
                          3: w7QCmizrQXeuidochTL3wPaTPwQ.roa (hash: H6wbvBF9uFQ8IN4rm+CScPncC9WaN8oR2hYLVqdaZWA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fb:0a:32:e4:ab:1e:67:b8:18:e2:1c:5a:8b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4
        Validity
            Not Before: Apr 13 07:01:26 2025 GMT
            Not After : Apr 14 07:01:26 2025 GMT
        Subject: CN=ee20a4e2aa0b0cfd908c31b0d46f23ded316c78f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4f:f9:ba:52:4a:05:5e:23:73:c8:28:ce:36:
                    1d:cb:b7:f5:70:88:dd:b0:bd:2f:0c:17:e1:56:bd:
                    1e:f7:8f:48:91:1e:bc:b9:30:e6:29:4f:4c:d4:f3:
                    5e:5a:34:6e:7b:dd:f1:d3:0d:d0:ef:96:19:fa:ca:
                    97:6b:8d:fd:1b:32:ef:6b:34:f0:6d:2e:f1:7e:fd:
                    91:98:d4:a8:be:37:e1:47:87:a5:ff:e7:92:1e:52:
                    78:0f:e1:00:da:5e:95:c6:19:ca:f8:a6:7f:f6:25:
                    c5:8f:fe:d9:86:aa:bd:e1:36:cf:7f:3d:c7:f1:f7:
                    9e:ac:3b:97:b7:b9:fa:75:67:08:da:b6:62:ab:c6:
                    c7:9d:53:a8:8f:27:eb:16:94:54:5a:31:c4:6c:74:
                    08:52:8a:04:9f:fe:03:b3:04:26:2c:aa:89:88:f0:
                    cf:6c:9e:13:3d:83:51:50:f5:68:7f:86:f4:ce:2b:
                    f7:2f:12:f0:24:bb:7e:96:28:28:56:e6:bd:d5:09:
                    ab:e1:d4:cd:30:9a:d6:7a:9c:65:cb:8b:34:c7:5c:
                    f3:d1:93:32:6f:07:ab:fe:3f:ae:ce:94:93:43:7e:
                    a3:ba:1e:b8:d3:7f:63:c0:9f:0a:0d:d5:19:4d:06:
                    c9:00:52:71:82:fe:8b:94:16:39:12:02:f0:84:c0:
                    2c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:20:A4:E2:AA:0B:0C:FD:90:8C:31:B0:D4:6F:23:DE:D3:16:C7:8F
            X509v3 Authority Key Identifier:
                keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c2:65:29:48:46:cd:86:b2:1e:3e:21:6f:fe:13:75:a1:ea:
         d9:fc:d3:8d:0e:e9:f2:8f:1b:a6:7a:63:f3:a7:7d:96:4b:74:
         5f:ea:7a:82:a2:06:ed:f8:37:63:27:02:50:c0:e9:e7:31:32:
         df:9c:35:b9:b2:30:f3:1e:e3:c4:82:0e:23:cb:3e:db:0d:6c:
         7a:7f:86:b6:a7:be:1a:68:0e:45:c3:5d:94:37:ca:84:84:d3:
         a6:67:fe:3c:4a:69:ac:f1:9f:c8:0d:c4:7f:d0:e5:24:ab:19:
         fd:15:14:e3:68:fc:ce:aa:2c:e7:a7:0e:2e:bd:77:c8:62:e0:
         90:c0:e3:bd:a4:9a:5f:6a:41:cf:c0:bf:ca:bc:b9:0a:6f:2d:
         15:e1:a8:e3:6d:83:a9:51:e7:4d:53:1c:70:31:33:e6:77:21:
         76:6d:b5:23:71:4e:10:39:2e:3b:5f:dd:6e:c6:52:78:62:05:
         53:57:4e:5b:8e:9f:5b:63:f5:79:26:6f:1f:85:e0:01:42:53:
         5e:09:51:23:47:34:53:ff:91:b0:bc:3a:c5:85:f0:7d:a3:35:
         54:0c:de:2b:c2:ca:28:a7:99:44:85:ea:a5:65:64:bb:d3:d8:
         af:64:90:72:bd:a8:2a:bf:dd:4b:2f:75:7c:ee:0a:e3:75:cb:
         45:73:9e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----