Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
File:                     1-sCJqc1qA3W65JnMBqTKowcbXUw.mft (raw, json)
Hash identifier:          jzsJOfNB2qttQz+ieoBo3i4l5q2KSAzh54PITbQY5ec=
Subject key identifier:   64:11:45:CC:F8:E6:3B:97:76:E4:3B:0B:6A:31:50:F2:A2:69:3E:FB
Authority key identifier: FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
Certificate issuer:       /CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Certificate serial:       01962E99581E13A2D4AD43B209AC201A578E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: 1-sCJqc1qA3W65JnMBqTKowcbXUw.crl (hash: SAkTFnbmUgfpLRZeYmvkaPHs+J7EEoiD5pYfB+8Chk0=)
                          2: 9Gc0nLgQOtGtRNM7UIaRIs_ONW8.roa (hash: 7XUr33w/Uy5ddx5EoTNZGUbNED5TJtOlZQk+2e6Mxi8=)
                          3: wfH5z_Bg4z7tHe6fq0H-30TIL34.roa (hash: VmP56mLP1KsPx5GBmYqlZvdPkuhp1r337TX7Q50d+Qg=)
                          4: yj2XO7X6nmMUvJxwQor2eoTB-gs.roa (hash: SDht8xJ05XM4bxvOhysfN3ceB8zgniuYHVUq4tgjt6c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:58:1e:13:a2:d4:ad:43:b2:09:ac:20:1a:57:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=641145ccf8e63b9776e43b0b6a3150f2a2693efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c9:6d:82:c7:d2:3e:00:9c:d2:18:42:c4:07:
                    44:12:fe:36:86:c0:d1:8a:61:17:67:aa:a5:5b:6d:
                    11:ea:e3:60:d5:a2:04:56:e7:3d:98:2d:20:ee:52:
                    0e:81:6a:a4:46:da:3d:06:3d:0d:ac:b5:48:cc:5c:
                    ab:60:14:06:31:eb:00:ec:7f:67:d5:50:f6:c3:c8:
                    73:b5:e7:18:e3:a8:7b:a2:f4:ab:a3:28:55:2e:fb:
                    76:f3:5a:cc:32:c4:55:5e:37:48:5a:f4:bd:46:53:
                    ae:1b:9f:4b:12:4f:1f:77:5d:67:15:42:e6:62:33:
                    d0:35:78:11:f1:a1:a9:80:7f:b9:ed:63:d6:fe:43:
                    d5:77:81:c2:b3:b9:7a:c7:0d:14:e9:c5:90:53:bf:
                    f2:d9:e9:5a:a7:31:20:1e:7c:27:7b:9d:ff:6b:aa:
                    e4:e8:ee:68:61:8d:a4:26:5e:5a:b7:bb:53:14:5a:
                    07:62:1b:6d:33:11:ed:86:34:da:15:e4:09:d9:15:
                    ff:3a:0e:d6:56:5f:4e:ac:48:7f:12:35:36:50:0a:
                    d2:a8:83:4a:1f:84:fa:b1:c4:79:1e:61:fe:46:fb:
                    ab:41:33:0d:79:25:12:5c:52:31:30:7a:70:5f:39:
                    38:78:aa:cd:39:17:6e:10:2f:f2:c0:ee:71:99:b5:
                    b8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:11:45:CC:F8:E6:3B:97:76:E4:3B:0B:6A:31:50:F2:A2:69:3E:FB
            X509v3 Authority Key Identifier:
                keyid:FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d5:1b:3b:da:86:73:e1:89:7b:30:7b:36:8b:93:bc:4d:dc:
         8a:12:50:7b:8e:4d:9d:07:e1:d4:35:0c:fe:15:c9:01:a6:79:
         5f:4f:17:8b:ee:78:98:e7:b3:a7:ee:ae:eb:bb:d4:55:b9:35:
         58:1f:9b:80:a1:ab:b6:f8:69:85:21:d4:a4:44:e2:12:d9:4f:
         ac:fd:6c:ae:1b:8d:e2:ed:af:04:05:90:fd:62:21:32:d4:1f:
         21:79:4c:bf:5f:29:35:d1:40:45:c2:a7:83:1e:60:61:1b:56:
         1a:31:d3:ed:c8:84:5f:dd:13:13:a9:03:f1:3e:81:65:49:04:
         50:14:e8:64:09:68:b6:77:e9:fe:3b:88:ac:b2:e6:12:2f:6b:
         76:a2:fc:4a:c0:a4:d4:0f:b4:e5:69:59:50:5c:bd:7b:13:b3:
         d4:6a:5f:e0:57:ef:e6:2c:1b:9d:61:3b:0a:04:fa:40:31:d9:
         a5:77:4d:81:60:ad:d1:aa:8f:e7:b2:04:72:47:82:ac:21:d4:
         7b:e9:40:03:b4:f8:a5:2f:19:4d:13:71:00:41:15:e1:6e:b4:
         f2:b6:e6:34:0b:f4:09:3e:32:be:9d:18:ef:f4:99:1d:6d:ce:
         8f:81:9d:1c:bd:6a:97:a3:86:a9:d0:4e:15:29:f2:1a:13:80:
         88:c2:b0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----