Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
File:                     6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft (raw, json)
Hash identifier:          Hrh6zpnsfmsfTXwiuwAs50g+lmohAXAz7fgrDx4OUqA=
Subject key identifier:   3B:35:3A:B9:CE:9D:2D:7B:C4:65:F3:20:6F:2E:82:0F:D6:15:47:45
Authority key identifier: E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E
Certificate issuer:       /CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
Certificate serial:       01962E2B2CFE60F500D4E1C6A1E103EFDBBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:43 +0000
Files and hashes:         1: 6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl (hash: 1zzCIN7uLZgA1MZyPJzmcR6wuk/tZl+GsH8QP2w6oDk=)
                          2: CEi11oDah-Xj3CSyKJ8iomoOYoM.roa (hash: ez/wVHjqJzETmetoc7ih07UD25PAbuMs0U3dxKCFOXE=)
                          3: h_PujoF1idQej6mkI673sMCS4CI.roa (hash: gJAR6zsyEp9IfdpTVmdU+2Uly1ejVeeDkLflgAL2GD0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2c:fe:60:f5:00:d4:e1:c6:a1:e1:03:ef:db:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
        Validity
            Not Before: Apr 13 08:01:43 2025 GMT
            Not After : Apr 14 08:01:43 2025 GMT
        Subject: CN=3b353ab9ce9d2d7bc465f3206f2e820fd6154745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f0:53:a2:b1:dc:3a:26:b0:10:9c:7d:e8:80:
                    cb:13:f8:93:54:90:85:81:b1:36:6d:98:64:96:d4:
                    40:cf:72:d4:b0:a7:04:92:01:83:3d:9d:f2:b0:6b:
                    48:f9:ba:d1:b4:f9:da:d3:a0:cb:62:47:c1:79:7c:
                    b7:9c:68:01:b7:07:0b:35:c4:d6:82:b2:af:e2:f0:
                    56:39:6e:fe:48:0f:1e:0d:38:2c:7d:03:65:be:b7:
                    8c:f9:e4:a9:b7:d7:08:ae:ae:9f:07:1c:79:8d:6e:
                    c0:81:15:34:3b:4c:03:e9:41:11:c5:b2:1f:8c:53:
                    19:64:48:e9:9e:1d:20:95:97:af:06:12:0b:53:70:
                    74:d5:c4:da:03:ab:94:49:07:f3:f3:2c:54:e6:c9:
                    62:f1:df:ac:ba:3a:f7:75:7c:4f:95:97:e6:6e:ca:
                    7f:64:fa:e2:75:0d:b4:29:7f:ec:47:d7:a4:fa:d8:
                    04:42:93:e5:bf:e5:67:6d:4c:3f:0e:91:3b:24:7f:
                    73:e4:d1:17:71:cd:4d:e2:19:05:75:3a:23:24:fe:
                    06:4d:52:15:40:5f:68:42:d6:73:16:e3:c6:7d:c3:
                    f3:1a:e8:e3:ef:91:dc:c0:22:5a:f8:ab:0c:d2:a2:
                    c7:4f:7e:80:cd:63:e4:16:ca:e8:c9:ac:7d:73:dc:
                    02:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:35:3A:B9:CE:9D:2D:7B:C4:65:F3:20:6F:2E:82:0F:D6:15:47:45
            X509v3 Authority Key Identifier:
                keyid:E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:09:13:c0:73:6d:83:45:58:76:8a:a6:26:4e:6b:09:bf:66:
         8d:2b:04:23:5f:4c:23:c9:a6:80:79:4e:80:db:79:c7:83:dc:
         6a:9d:2a:1f:f3:ba:24:f1:36:58:7b:3b:3b:5e:cf:66:b5:1b:
         5e:b4:ae:4d:77:56:c4:b2:c3:06:e4:0a:79:5a:3c:79:c8:b6:
         2f:8a:5b:95:21:d7:59:13:38:8c:f4:ed:7e:2a:a7:26:ef:ea:
         65:4e:5e:87:54:e5:d2:12:55:3b:5c:e1:99:06:93:e9:e2:47:
         04:cf:6a:c2:2f:6d:86:07:3f:9b:d8:52:76:b1:6a:8b:ee:fa:
         67:3a:e9:ec:b3:54:6a:3d:45:f2:cf:cc:d2:b7:cb:72:d1:4b:
         e2:21:32:5a:75:a0:ad:3b:22:94:33:3b:c5:77:d9:d3:08:a2:
         85:24:b2:52:84:18:3b:68:7b:be:58:a0:18:de:a0:64:46:74:
         44:07:c6:1e:9e:a4:d2:37:ee:91:95:ca:14:40:54:0b:e4:27:
         5d:82:5a:2f:36:57:de:d2:5f:58:bb:6d:5a:17:30:39:d1:c4:
         42:c5:f8:02:85:31:7a:55:54:87:51:97:ec:21:dd:6b:0a:48:
         0b:1b:67:94:61:49:66:1f:a6:07:9a:b3:6c:af:c6:f4:81:7c:
         37:4a:5a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----