Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
File:                     8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft (raw, json)
Hash identifier:          487ghZSVq3i1cwEXsGfqm0JpifOSIIxAySbm1CCrldk=
Subject key identifier:   61:24:7A:26:7B:F1:83:FB:2A:70:5B:77:0F:F1:32:84:E9:3B:F4:9D
Authority key identifier: F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D
Certificate issuer:       /CN=f0d323ad48f5a45bbca9e879883fae9314b58e9d
Certificate serial:       01962FAB2C599714C739D82F57842544A36B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
Manifest number:          A8
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: 8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl (hash: f2t8OEDxIraWv4fWLjPnbhTVZXnHducZZbqhnvsi7r0=)
                          2: vAn1hXUKdqSNmKMN5EpP_udaSvg.roa (hash: KSkyWrBwmDHasLhukMvu07oX0o0MiqrtLLWwQJGc7Qw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2c:59:97:14:c7:39:d8:2f:57:84:25:44:a3:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d323ad48f5a45bbca9e879883fae9314b58e9d
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=61247a267bf183fb2a705b770ff13284e93bf49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b8:63:23:f2:87:31:48:48:91:3b:b3:61:8c:
                    f1:2f:f6:c3:60:49:64:66:92:57:8a:09:b9:df:76:
                    36:de:e4:7b:16:04:0a:d8:a5:b7:0d:af:77:68:71:
                    59:a1:0b:61:b7:17:ad:27:7a:17:0b:85:bc:d1:83:
                    ae:29:0a:6e:90:ab:03:cc:d5:35:0c:6d:ab:fb:82:
                    24:45:bd:e8:d2:24:52:7e:ec:62:a8:ab:b2:6a:35:
                    5a:b2:65:e2:d8:50:0e:d5:30:28:5a:48:03:e7:11:
                    3f:31:c8:aa:0e:fa:35:6d:69:68:b2:21:e8:a6:e4:
                    c3:76:e6:07:e6:8a:b4:19:6d:5d:56:11:4a:4a:68:
                    48:fe:81:28:b8:65:95:c6:4e:6b:c5:6f:5d:d2:0e:
                    24:91:62:57:54:52:f7:db:74:44:60:0c:f0:bb:30:
                    ec:20:34:d6:d8:54:e2:7f:2c:af:b8:39:51:d2:2e:
                    3b:c6:29:8e:1e:88:d0:48:c8:16:06:22:36:c2:f1:
                    a0:30:e7:25:28:9d:8b:13:de:d7:ce:db:14:b4:62:
                    23:8d:91:21:38:e6:11:ac:f6:15:4b:10:8c:11:d0:
                    b8:47:ea:aa:c9:51:6b:06:6f:80:1d:d3:9b:82:98:
                    85:9f:4d:94:1f:86:5f:36:35:73:0e:39:51:30:bb:
                    e5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:24:7A:26:7B:F1:83:FB:2A:70:5B:77:0F:F1:32:84:E9:3B:F4:9D
            X509v3 Authority Key Identifier:
                keyid:F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:53:58:00:fb:52:dd:c3:86:6b:9a:67:bd:cb:31:b2:04:26:
         7a:f8:5d:b2:ac:51:74:86:40:f9:f2:1a:e9:b9:d5:29:37:30:
         27:f1:08:be:b4:a8:4a:1c:b8:b0:2a:a3:19:9f:14:16:e4:5b:
         bc:d3:5a:53:82:75:2f:71:d9:8f:74:b8:4e:3f:48:a1:9e:81:
         e0:23:4b:14:2b:f6:a8:80:ae:c2:39:5a:84:07:51:e0:45:b0:
         2b:f8:03:08:0f:b8:80:14:2f:26:08:c8:96:f0:07:09:63:12:
         20:52:2f:2d:03:12:43:fd:40:85:e6:4a:d8:95:27:bd:d4:d3:
         e2:f2:b0:60:58:e6:a1:b2:1f:d7:81:d0:27:1a:c8:18:71:24:
         ad:12:4a:2c:91:01:94:ab:c4:c1:cb:47:cb:6d:39:bd:ec:cd:
         6b:1d:00:3d:9d:8b:f6:fe:e9:54:e5:9f:c8:d0:f1:90:59:61:
         2a:9c:da:c5:b7:00:d4:51:08:31:0c:06:49:f1:00:d8:ef:f1:
         58:f2:52:f6:82:63:63:3c:d6:1d:c5:a6:53:2f:c1:c5:46:a3:
         db:36:1d:d0:44:43:60:89:60:85:04:8e:05:51:21:ce:96:40:
         be:2f:f9:3e:e9:ae:6d:2f:01:b9:05:e1:2b:d2:29:74:ef:8a:
         04:ce:2e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----