Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
File:                     irYGzqebWr6BaDpjN5s5KJssq5M.mft (raw, json)
Hash identifier:          uF1ZK71P/Mc/3kMaQRii/z0kxH+ze45jsa0eybImhI4=
Subject key identifier:   23:71:73:86:20:D1:5E:51:FE:D2:57:19:65:FA:82:9D:43:C0:2C:80
Authority key identifier: 8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93
Certificate issuer:       /CN=8ab606cea79b5abe81683a63379b39289b2cab93
Certificate serial:       01962FAB2C3EFF65F9DCF7D1B01E42C43269
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
Manifest number:          066E
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: Ol66WOHM5O0qZSOG9y7yOIgJsCo.roa (hash: tBXkTjKhKw+qp8WtoR3ZkzeeWQpNfDqudYVdDHWc62c=)
                          2: irYGzqebWr6BaDpjN5s5KJssq5M.crl (hash: Kb/vB2pUm6Ektws6N2YbGfQ5qOL2RYfooVenylJvA90=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2c:3e:ff:65:f9:dc:f7:d1:b0:1e:42:c4:32:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ab606cea79b5abe81683a63379b39289b2cab93
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=2371738620d15e51fed2571965fa829d43c02c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bb:60:c7:aa:01:8e:76:bd:ef:3f:01:79:04:
                    64:5f:33:fc:fb:6e:20:af:8a:aa:a5:aa:c1:c1:10:
                    9b:43:35:a1:ee:86:69:27:82:5d:2d:90:63:69:36:
                    2c:72:49:42:6a:dc:43:6e:a9:15:e0:ce:d9:2c:8a:
                    9e:9d:f1:7f:e0:22:88:83:c3:48:4e:f7:6b:64:ae:
                    a6:b7:70:ab:37:47:a2:10:59:28:7c:05:a5:c3:f7:
                    ee:f8:06:61:c0:e3:6a:3b:1d:77:8a:e9:68:84:08:
                    78:75:51:73:08:9f:f3:8c:09:cb:9b:69:a3:cf:2e:
                    05:a4:ef:65:2c:29:0e:5a:cc:11:d3:50:4d:3f:35:
                    9e:f0:07:16:13:54:a5:dd:e8:31:67:60:d2:8f:5d:
                    21:b8:66:ca:4b:2d:81:8e:72:57:ac:f9:8b:b1:89:
                    6e:68:b5:79:01:cc:6d:53:fc:af:4d:96:fd:3b:71:
                    61:6f:18:45:be:80:43:9f:fd:10:87:99:d8:ca:e6:
                    8a:7c:23:5e:bd:9e:b2:46:b7:c9:2d:fb:39:a3:2a:
                    e7:a0:68:a5:a5:2d:53:9c:aa:55:a4:64:97:4b:1c:
                    2c:de:09:6c:ac:67:4f:e2:57:06:39:ad:a4:d1:93:
                    b8:e4:0c:e7:9f:9d:ee:d4:9a:74:fc:d2:c0:a3:fd:
                    e6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:71:73:86:20:D1:5E:51:FE:D2:57:19:65:FA:82:9D:43:C0:2C:80
            X509v3 Authority Key Identifier:
                keyid:8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:dc:5b:99:a0:a1:e0:ec:6e:42:36:e8:f2:0e:2a:fe:5e:e4:
         51:af:6d:a5:08:7e:8b:f1:e4:13:97:12:42:93:f4:ae:fc:76:
         9d:74:9b:96:8e:61:1a:0c:21:10:37:f1:13:8c:04:30:47:56:
         0a:dd:47:1b:0d:18:95:ad:a0:e5:36:0f:3d:84:2d:a7:96:50:
         a1:53:20:5c:ba:7b:20:61:db:64:ba:a9:e7:16:b0:d6:24:b9:
         8d:a0:3c:6a:6b:de:c9:41:06:bc:54:91:37:c5:00:6b:23:5b:
         f2:6b:2b:af:19:e5:e6:cf:6b:5c:aa:b2:8e:c2:66:cd:8f:06:
         a8:3d:e5:18:cc:af:98:64:52:0b:c5:82:55:a4:cb:56:a4:38:
         05:be:f5:05:fa:d8:c7:1c:42:f0:e9:1b:77:b5:5b:dc:12:60:
         bd:90:80:67:a0:2b:3d:2a:32:e8:25:52:52:ef:57:58:20:a7:
         5a:fa:00:45:92:2a:35:5f:28:d8:c4:e7:2c:52:31:40:ff:20:
         01:1b:85:cb:17:f2:97:b9:d0:60:2e:c5:0a:30:83:55:54:4b:
         7b:c1:77:b3:78:e7:19:03:a8:52:a4:1f:af:d4:87:f4:0b:f4:
         92:da:84:a4:fd:74:e5:71:84:ad:60:84:8a:78:38:9b:e4:e9:
         ba:8a:ba:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----