Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
File:                     8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft (raw, json)
Hash identifier:          xKt9u1CvxZuQLCX0mwYYGaRlRtqX+f0tNZUpoFB1TbA=
Subject key identifier:   EB:39:55:F5:23:C1:85:54:E6:BF:70:C4:50:6E:6D:5D:93:FA:4B:D4
Authority key identifier: F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
Certificate issuer:       /CN=f1f4609d0d053aec0307da44b0e678c388f641a4
Certificate serial:       01962FAB4E557C001D3A11E46BC9506FF682
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
Manifest number:          09E2
Signing time:             Sun 13 Apr 2025 15:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:17 +0000
Files and hashes:         1: 8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl (hash: fL6buEDJFb0dv0OG1oWoldgdvK7Aor3F0xf4Yok4OXM=)
                          2: JlLzYa369BmhHhkMkkOAbFVKIEk.roa (hash: VUooec9+T4XmPm3CalNwGe0fyN77tnkbi4PQVdbwdIo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4e:55:7c:00:1d:3a:11:e4:6b:c9:50:6f:f6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1f4609d0d053aec0307da44b0e678c388f641a4
        Validity
            Not Before: Apr 13 15:01:17 2025 GMT
            Not After : Apr 14 15:01:17 2025 GMT
        Subject: CN=eb3955f523c18554e6bf70c4506e6d5d93fa4bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e3:69:55:b0:42:e4:54:09:18:48:c4:9a:cf:
                    0e:72:7a:0d:05:f1:a7:f5:fb:bb:e8:28:41:9f:50:
                    56:ec:0f:61:b2:59:ee:f3:d5:67:52:55:e2:fd:99:
                    7a:a3:51:55:bd:94:8e:a3:7a:81:05:c7:a7:eb:0e:
                    b0:11:b7:39:34:96:d7:3c:19:76:7d:f8:0b:cc:43:
                    5b:8f:62:0e:80:f2:30:af:d8:03:9f:08:b7:75:97:
                    0e:65:1c:39:bd:2f:a9:ba:9a:53:00:8a:cc:5c:2d:
                    71:3d:81:1f:29:78:32:14:bf:e0:c7:9b:13:4b:df:
                    83:bc:74:c8:a3:75:f6:de:a8:f8:a6:f2:ec:48:f6:
                    f3:3f:3c:64:5c:03:ac:86:ea:07:48:ee:8f:e4:ce:
                    6d:9d:55:92:c4:7c:1d:9a:28:79:aa:b8:d0:86:83:
                    51:6e:68:d8:c6:24:1c:57:8b:e9:73:37:2a:8d:28:
                    6a:99:f9:28:e2:8e:81:0b:85:b5:c5:c2:19:d1:bc:
                    66:7d:ba:07:5e:f6:78:7f:51:37:54:b3:4c:4b:b5:
                    38:00:68:34:87:45:01:64:a5:e4:32:6b:e0:c7:5b:
                    15:43:cb:12:8f:9f:8b:7b:15:15:e6:35:50:8c:db:
                    83:71:c2:3e:96:8d:92:26:83:d3:96:6d:59:66:39:
                    b4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:39:55:F5:23:C1:85:54:E6:BF:70:C4:50:6E:6D:5D:93:FA:4B:D4
            X509v3 Authority Key Identifier:
                keyid:F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:07:38:0e:69:bb:36:38:da:57:e6:73:ff:f1:cf:f8:c3:f4:
         18:ea:a0:0b:77:23:15:80:b3:2d:47:12:fe:b0:80:46:0b:d1:
         08:06:c2:b4:66:6c:24:ff:61:fa:23:e0:78:9f:b8:3c:12:24:
         ea:f4:af:aa:c3:cb:4f:9b:14:07:2a:dd:75:86:07:5b:f1:04:
         73:ba:93:69:08:f3:08:65:fc:ca:90:9b:98:08:98:d5:15:de:
         fa:2f:d7:0d:85:cb:44:79:ba:f3:dc:06:ef:8a:00:a3:ae:85:
         41:47:84:da:10:d3:76:a1:73:a1:ce:b3:2f:9c:ab:d7:5d:8b:
         dc:92:f6:bc:d9:17:38:70:af:40:ad:44:db:22:a7:9e:76:fb:
         e0:76:87:47:d8:58:e9:b0:85:3a:3d:d2:fc:b5:0b:5b:62:08:
         82:1e:2f:df:97:66:f6:a7:34:e0:11:24:d9:ad:d8:21:9e:56:
         4f:85:f5:43:26:7e:f9:bb:ea:90:f2:bb:de:af:dd:6e:a1:dc:
         da:e4:9e:d7:56:20:8f:3b:b6:b5:25:30:ab:28:f3:8e:e2:aa:
         ca:2f:7f:1f:fe:2d:00:7b:8e:06:14:72:9e:7e:df:0d:00:f1:
         f8:9b:26:c6:85:4a:1f:3d:60:5f:05:2a:a1:cd:05:18:0e:36:
         b7:a5:22:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----