Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
File:                     yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft (raw, json)
Hash identifier:          jd6cyriBIlUoj69UlKFnToep4Dp0PR9St5fFZVakUPg=
Subject key identifier:   69:58:2A:E8:4F:5D:47:E5:95:4B:62:C8:48:45:A7:DA:C4:46:82:7B
Authority key identifier: C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD
Certificate issuer:       /CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd
Certificate serial:       01962FAB3E5E2947A425F9266F08E4DF16F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
Manifest number:          8E
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: bh_jxWLWM4ERu-tO2W_vtiAaR34.roa (hash: q67OJI4bSTnxGyWpXxOC2jeYAfoLHFvQvpzctzRe0VE=)
                          2: sibHr2FGPjo5CfPD_x82IFZOyjI.roa (hash: 5o3OHC/8KmGr6JnUosFKoE0TLY9c878SbcJe1V+5e/c=)
                          3: tthzNj1Ph4KhPBGu_Ij-vA_jDKI.roa (hash: dYA2gqzlNnRY/+Z83i04orn08vaFeOTWTefS4wKcEJw=)
                          4: yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl (hash: UZImiun41TEDXmqXegvrbybdIpPgGJjfarzDRTZ2xO8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3e:5e:29:47:a4:25:f9:26:6f:08:e4:df:16:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=69582ae84f5d47e5954b62c84845a7dac446827b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:96:eb:5a:d3:d4:d3:32:f8:39:3f:f8:ee:09:
                    7b:38:62:10:be:9c:5f:cf:e0:b5:45:83:8f:aa:5a:
                    12:19:fb:b2:10:dd:b5:2d:f9:db:50:fd:5e:aa:9a:
                    cc:9c:1b:2f:a9:ae:eb:e0:8a:f2:cf:fd:a0:23:04:
                    d2:96:67:73:22:49:07:17:ff:df:5b:1b:51:57:30:
                    c1:46:32:2f:d2:0a:a0:9f:37:20:af:58:5b:da:20:
                    9c:8c:cc:0c:4a:24:c9:15:c8:25:08:38:23:f5:c3:
                    5b:5b:bd:47:4b:79:e3:4f:49:a3:cc:d6:88:67:f0:
                    57:22:84:0f:82:cb:68:cb:48:29:ab:1b:63:48:16:
                    17:d6:12:e0:ae:06:ae:f1:1d:ce:37:d7:67:f2:8e:
                    23:23:24:c1:b0:ae:25:07:9f:d6:eb:f1:4e:6d:24:
                    89:09:51:75:00:11:23:22:e2:1b:0a:28:a0:e2:16:
                    2a:b7:09:75:c1:27:0d:4a:9c:74:08:b8:2e:54:c3:
                    9b:52:6d:25:24:6b:dc:be:1e:8b:2b:9e:50:70:a4:
                    67:42:c9:b3:b5:7d:7c:82:33:b2:80:90:f4:ec:e5:
                    bc:b8:69:94:5e:39:51:ff:64:53:0f:c5:54:29:8a:
                    d6:95:3c:61:84:ce:ae:58:74:59:7f:04:20:02:6d:
                    4f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:58:2A:E8:4F:5D:47:E5:95:4B:62:C8:48:45:A7:DA:C4:46:82:7B
            X509v3 Authority Key Identifier:
                keyid:C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:06:22:c8:1e:e0:05:a7:a5:66:f2:7b:b2:87:cc:4d:97:be:
         2d:08:10:9f:7c:24:55:ad:75:ff:ed:90:86:d6:b0:d7:70:cd:
         2e:78:18:17:05:32:b0:8e:65:df:15:13:a1:86:67:89:13:dc:
         ea:fa:6c:95:af:2d:23:6b:5a:0b:4c:49:f7:7e:c4:fa:c1:ec:
         e3:bf:d0:63:cc:a7:1f:58:05:5c:ac:f1:a8:8c:47:7f:a7:b5:
         fb:b9:3c:b0:41:fb:63:22:eb:60:2b:f7:86:b4:ac:53:a0:67:
         03:4d:a3:74:36:0c:5c:ec:f9:07:01:33:6a:e1:b3:e8:6d:75:
         15:54:b0:bc:02:3f:6c:39:93:06:af:48:8b:d6:99:6d:b8:64:
         d5:9f:67:f2:04:f2:5d:99:64:9a:2f:ee:d3:e9:4c:2c:10:2b:
         55:58:ba:1a:d3:fd:a3:90:aa:71:3d:b9:7f:f3:69:be:69:f6:
         b2:bd:bf:10:a1:69:bf:51:32:6e:2d:b1:06:87:64:07:fe:e8:
         ec:91:52:97:90:05:4d:ec:1f:71:ab:15:db:71:b8:17:4b:78:
         82:c1:00:4c:31:9a:2f:58:cb:e4:3c:3b:fb:93:c7:37:a1:08:
         56:03:4f:71:a7:56:9c:ee:5b:bb:39:1f:13:88:45:c6:61:8b:
         5e:3f:40:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----