Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
File:                     FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft (raw, json)
Hash identifier:          lan2rDZsG8tF1wD/IsDXGOJTC92owuaJBgJPelzDTMY=
Subject key identifier:   52:1F:8F:E0:32:50:55:AA:3F:18:94:6B:9E:C8:EB:9D:C3:DC:67:BA
Authority key identifier: 15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
Certificate issuer:       /CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Certificate serial:       01962F3DE45B0AE0B06229702F9CB06E011C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
Manifest number:          0D70
Signing time:             Sun 13 Apr 2025 13:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:47 +0000
Files and hashes:         1: FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl (hash: +2g3j6U9A1SGle3nG6mIo4AkLWdcw5IibtcXNitUEX0=)
                          2: saR7C8jPhSxxp1U0l0fw1iLpggA.roa (hash: YzILylPp9VZQ/IVzqGiVAC4yp8xtNGEqB65NyOh5ynQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:e4:5b:0a:e0:b0:62:29:70:2f:9c:b0:6e:01:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f215ad274f35b24ac6a060b2f09399711bc17f
        Validity
            Not Before: Apr 13 13:01:47 2025 GMT
            Not After : Apr 14 13:01:47 2025 GMT
        Subject: CN=521f8fe0325055aa3f18946b9ec8eb9dc3dc67ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:17:b8:ee:6b:19:ae:20:5f:3f:84:b8:d6:
                    a7:45:33:0c:3a:17:5d:18:96:fe:7e:3f:f8:f9:19:
                    d0:72:0a:be:b7:29:2b:67:20:67:d0:5e:33:21:77:
                    f8:c4:20:0c:c4:32:b0:c0:73:e9:fe:32:bd:7a:04:
                    6b:8b:a6:48:ef:52:d5:f7:d1:48:34:d6:8e:44:7e:
                    ac:0b:70:91:ec:f6:f2:87:97:c2:6b:a1:c1:9b:6d:
                    1e:07:7c:c6:0b:cc:fe:e6:77:5d:43:d3:5d:54:23:
                    fb:39:fe:50:2e:fe:d6:05:48:8a:49:11:1d:39:15:
                    c0:13:b8:46:92:43:d7:68:16:2e:c7:1b:5a:a7:52:
                    f5:5b:df:d3:f1:e3:3a:d6:e5:4e:2f:4f:fa:5b:8e:
                    c5:71:24:b0:34:a3:8b:96:37:4c:3f:2f:3e:b5:cf:
                    79:95:87:c3:f6:07:90:cf:56:45:34:5a:8d:f0:b1:
                    ff:d6:1b:b8:ea:42:26:53:be:b6:e9:14:92:80:f1:
                    8a:8b:3b:f0:89:95:62:03:e0:3c:5d:d4:7e:a0:a9:
                    5e:0c:38:44:54:24:ac:07:65:23:0b:f8:b7:4e:54:
                    ac:a1:63:13:fe:25:e1:20:fb:37:11:17:d0:24:d6:
                    b3:4a:5c:64:ff:c3:6c:e1:e3:7e:18:c2:c3:f6:9c:
                    06:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1F:8F:E0:32:50:55:AA:3F:18:94:6B:9E:C8:EB:9D:C3:DC:67:BA
            X509v3 Authority Key Identifier:
                keyid:15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:89:03:ef:86:ae:45:1e:f4:46:bf:c1:3e:7b:8a:97:e5:22:
         4e:8d:03:70:10:56:29:34:a5:94:44:e3:da:5f:5f:d5:fe:50:
         d9:cf:b2:d5:3c:fa:b4:33:63:ee:b9:ed:91:ad:cc:7b:3a:60:
         f6:f2:3e:23:a8:5e:d8:32:a3:e4:fc:a1:c8:4a:20:ed:c7:7f:
         95:7a:d4:ca:6c:89:13:c6:6d:97:ca:98:1b:af:56:da:a6:bc:
         dd:ce:22:a4:c4:0c:42:cc:d3:0f:7b:46:ed:27:75:6c:a4:9a:
         a0:89:86:fb:fb:83:01:d0:ed:5a:a8:97:17:49:3b:cc:ae:fc:
         af:a0:ac:0c:5a:89:e3:df:17:b2:2e:91:d5:32:67:8b:bf:e2:
         26:6f:12:bf:e9:5d:98:c3:e8:ef:98:5b:2a:86:a1:cc:04:fc:
         76:3c:87:fa:1a:09:13:53:c2:dc:c1:f7:ed:1c:76:72:59:eb:
         6f:b5:83:bd:e2:ee:d0:ca:52:34:fc:8f:6c:99:e6:63:ba:86:
         06:67:7a:52:76:57:dc:af:ad:7c:b4:e6:35:9f:45:1e:7b:3b:
         8f:4c:8f:45:8d:db:22:12:6a:d7:00:19:3f:18:6c:3b:7a:62:
         2f:91:e0:ae:58:f3:57:de:38:21:98:34:dd:68:a0:7f:94:a6:
         c0:85:83:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----