Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
File:                     R8CqLp6CAO7mcCaUKixSSIAvM7g.mft (raw, json)
Hash identifier:          nNvUl+jiEQPjT09V3jYyJBgzUXyrkQgdjyaYvhMVfbE=
Subject key identifier:   FF:98:08:FE:9E:66:D2:A1:86:51:1B:B0:C0:8F:5A:82:A6:D8:9C:81
Authority key identifier: 47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
Certificate issuer:       /CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Certificate serial:       01962DF424127EAB54389EA12F8EA42635A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
Manifest number:          12DE
Signing time:             Sun 13 Apr 2025 07:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:36 +0000
Files and hashes:         1: R8CqLp6CAO7mcCaUKixSSIAvM7g.crl (hash: rRda+h3desnPgWOmXbWYJRDfQq3/YHHGx0G3ijUaZ5Q=)
                          2: qkYxxaIiN3jcZulu8UiMqofxjLE.roa (hash: cRshqAIAXgfUlz/OBpedkq/8h7RRrBNX/FMXdEVJZFQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:24:12:7e:ab:54:38:9e:a1:2f:8e:a4:26:35:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
        Validity
            Not Before: Apr 13 07:01:36 2025 GMT
            Not After : Apr 14 07:01:36 2025 GMT
        Subject: CN=ff9808fe9e66d2a186511bb0c08f5a82a6d89c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8e:7a:49:80:95:67:89:1f:ae:e8:ef:d3:b8:
                    4d:e0:55:7c:b8:5c:e0:c0:b8:c7:76:14:6b:49:02:
                    6c:8b:5b:b4:67:df:29:c7:e7:65:38:fe:27:4b:63:
                    00:ec:6f:f1:57:c1:fa:c0:40:8d:7e:51:4d:d1:1a:
                    01:c5:6c:20:c1:e3:44:97:80:03:7d:f0:73:46:32:
                    fa:3a:d7:ba:f0:d8:86:d8:85:f4:bf:b3:79:fa:02:
                    47:f8:6a:54:47:44:6c:a2:1e:b2:3e:0e:82:ec:3a:
                    b6:fb:59:f2:f0:27:dc:21:33:a4:1d:b6:c1:35:d5:
                    f2:fb:3e:03:0e:df:35:16:62:91:f7:28:5c:fe:cd:
                    6b:b2:17:2b:05:52:b2:4f:b0:dc:68:a2:54:7f:3f:
                    74:d7:9c:c7:32:9e:57:ec:81:dd:a8:62:0f:b0:4c:
                    a7:c5:9d:43:0a:b9:c4:45:5a:1a:14:17:c1:df:fd:
                    0d:72:00:d2:86:03:02:b9:6f:6b:c5:dc:cb:ee:f2:
                    1f:2a:06:cb:5e:57:23:40:01:01:b2:cb:17:41:eb:
                    e0:3e:5b:42:bd:13:a6:42:82:1a:b7:b3:4a:1d:f9:
                    ba:b9:18:6b:16:4f:74:e7:30:15:a3:97:a8:6f:ff:
                    e9:15:ae:d7:4a:cb:92:e1:9c:fc:06:dc:5b:63:f2:
                    ed:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:98:08:FE:9E:66:D2:A1:86:51:1B:B0:C0:8F:5A:82:A6:D8:9C:81
            X509v3 Authority Key Identifier:
                keyid:47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:59:84:49:97:fc:95:06:ba:1b:b9:c7:66:1b:e2:ba:90:61:
         09:d6:62:c9:48:36:4d:7d:2f:64:44:2e:59:e0:ed:92:e3:69:
         ce:b9:f7:42:47:dd:76:e7:81:02:42:3e:21:bb:9f:39:63:f5:
         fb:6c:6f:55:48:59:0d:e0:38:8f:3f:e7:d9:d7:59:4c:c8:b7:
         17:15:fd:ff:2e:d1:72:58:63:63:c6:ba:73:9d:72:f5:c3:1c:
         86:7b:42:16:03:24:0b:67:fd:9a:ce:2c:16:fb:1a:6b:3a:22:
         6c:da:a3:3a:f7:df:e2:7c:1b:f4:74:d9:b9:b3:40:4a:37:33:
         7b:cd:df:9b:b3:63:d8:fb:4c:e6:4d:4a:1b:34:06:44:0c:ca:
         5e:bf:f5:5e:78:52:7f:bb:84:dc:ba:e2:4a:28:e7:79:41:6c:
         bf:d4:ac:6f:24:56:38:64:e8:ad:0e:7d:53:04:e4:94:96:e0:
         0b:0d:0d:73:4e:7f:4f:e9:e6:b8:28:5a:a0:8e:f4:ac:89:e1:
         e9:fd:fb:e4:52:3a:35:4a:b9:2c:c2:d4:9f:9b:06:60:8e:a2:
         7d:14:df:c6:3e:5d:8a:b3:ce:af:4d:b9:3c:c2:4b:4b:64:38:
         42:04:3c:ac:f6:f3:4d:64:7e:dc:b3:b2:f5:54:84:cc:57:42:
         e5:ac:3a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----