Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
File:                     8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft (raw, json)
Hash identifier:          /SBODZ0JqgyWYqNV4VQIad5UISLCvs5Qm5F/5aFFAMU=
Subject key identifier:   53:88:8F:A1:EF:DD:1B:54:CC:42:4C:34:F1:D2:B4:64:55:AC:08:39
Authority key identifier: F3:FC:4E:F2:32:AE:23:94:E8:88:54:4F:52:AB:08:B1:7A:FE:32:48
Certificate issuer:       /CN=f3fc4ef232ae2394e888544f52ab08b17afe3248
Certificate serial:       01962E986168477AD81F15DA8AA9F885E9EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:00 +0000
Files and hashes:         1: 8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl (hash: DWD0W1TrR8VczIOtGm8NIdfPzDNI3EzjOa6w3P5tLio=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:61:68:47:7a:d8:1f:15:da:8a:a9:f8:85:e9:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3fc4ef232ae2394e888544f52ab08b17afe3248
        Validity
            Not Before: Apr 13 10:01:00 2025 GMT
            Not After : Apr 14 10:01:00 2025 GMT
        Subject: CN=53888fa1efdd1b54cc424c34f1d2b46455ac0839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a0:9f:8b:fd:58:c6:ae:5a:61:d3:aa:4a:4a:
                    9e:a2:36:45:c3:eb:dd:b2:f8:e7:4e:0a:5a:23:5c:
                    00:b5:f5:4b:c6:37:4b:86:dc:ae:c3:4b:50:4d:e5:
                    3d:c0:38:4f:e7:f0:6a:68:8f:20:8f:0e:13:7a:3c:
                    b9:73:6c:01:6c:fe:4f:68:4d:fc:cf:0f:f9:14:6d:
                    70:eb:0f:09:1c:0c:41:4e:c2:02:d5:f2:39:35:59:
                    c5:49:27:3e:6d:77:30:3f:70:fa:85:19:3b:89:5b:
                    1a:4b:9e:64:8d:31:25:bb:69:b0:b6:1f:2c:4a:92:
                    d0:3d:03:27:6d:81:d2:b7:bd:f0:ca:fd:be:57:5f:
                    7e:27:7c:66:b0:3e:2b:99:b8:72:19:8f:8b:a3:62:
                    07:f1:f5:e3:03:21:da:d4:3f:26:8e:23:42:91:90:
                    b6:c1:64:db:f6:9f:13:7d:42:08:23:d7:b4:94:65:
                    9e:f0:57:fb:79:08:14:d5:b4:21:18:44:7f:0e:c8:
                    f4:1f:af:69:51:45:30:67:0e:51:a0:84:cf:0f:0d:
                    d5:e8:f6:27:b6:64:f7:9f:a2:bf:9a:2a:33:23:79:
                    66:ae:95:79:c2:a4:60:ec:99:e3:69:65:d2:94:77:
                    9a:be:bf:65:69:45:e0:55:46:84:f0:db:f0:e7:26:
                    e5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:88:8F:A1:EF:DD:1B:54:CC:42:4C:34:F1:D2:B4:64:55:AC:08:39
            X509v3 Authority Key Identifier:
                keyid:F3:FC:4E:F2:32:AE:23:94:E8:88:54:4F:52:AB:08:B1:7A:FE:32:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:24:08:e6:96:6e:1c:20:4f:18:d9:06:e8:52:51:da:6d:3f:
         e8:19:a8:5f:f7:03:48:52:88:ee:71:ce:97:25:30:bf:87:ea:
         52:3a:8c:dd:15:a0:54:5e:15:64:58:7e:de:b0:c7:de:fa:11:
         14:89:ff:3d:dd:fb:88:fa:d8:48:74:ed:8d:6e:9a:e2:41:e9:
         de:83:39:e8:9c:93:f9:2e:bb:b3:5a:1a:3f:63:a0:a7:79:aa:
         91:cf:9d:a9:c3:2a:70:95:b2:8e:8d:30:8c:84:9d:93:45:52:
         17:57:8f:14:70:1a:24:55:44:90:0b:e4:0c:86:9d:f8:6f:4d:
         42:03:ac:4d:6b:6d:09:70:4e:af:bf:27:7c:c5:1c:02:60:2f:
         02:25:99:8e:d7:da:1f:b8:da:88:40:49:ac:ae:f7:e7:2d:fe:
         4b:51:51:ef:43:b5:65:4a:03:79:e3:c7:46:aa:17:91:28:ad:
         36:96:34:81:cf:fe:a6:e6:93:87:ec:fb:7b:ca:cc:39:91:15:
         d8:62:c4:e5:13:e0:39:91:f8:ea:9f:6c:22:a9:02:d2:bc:e6:
         07:fe:19:39:47:86:fb:64:47:ea:a6:84:e6:48:28:c7:5e:7a:
         45:ab:7d:42:c2:cf:30:90:fe:ad:a0:71:32:c8:8d:f3:1b:5b:
         15:7f:f5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----