Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
File:                     8L-tMcFMk9qlNEugT0tSNUaW368.mft (raw, json)
Hash identifier:          xbg1ZTdBE8Y//+0rqtAM81howpfwH5siGCX2IsWVt78=
Subject key identifier:   50:83:91:52:02:BC:6D:9A:04:96:9C:E9:BE:90:75:2E:51:70:50:7C
Authority key identifier: F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF
Certificate issuer:       /CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
Certificate serial:       01962FAB9AFC0C4879D6587F6DED754C8456
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:37 +0000
Files and hashes:         1: 8L-tMcFMk9qlNEugT0tSNUaW368.crl (hash: JFDvbvFDwddrxGfE/MLyjka52hkaRLW2NCIA3+TUw7c=)
                          2: UW4EyDU9bcfR_a5RruA-KGiV3Uw.roa (hash: yNneGYRFbH3ZhAuncPonvd3a6cecW1xrZDzoeBjGnHI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9a:fc:0c:48:79:d6:58:7f:6d:ed:75:4c:84:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
        Validity
            Not Before: Apr 13 15:01:37 2025 GMT
            Not After : Apr 14 15:01:37 2025 GMT
        Subject: CN=5083915202bc6d9a04969ce9be90752e5170507c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e8:74:96:1c:45:52:a9:53:32:bc:06:7d:ae:
                    6e:ad:67:75:c5:b3:e3:f0:9d:85:42:30:4d:b2:d6:
                    71:02:9e:51:c2:dd:b4:05:12:9f:bb:79:30:0f:57:
                    1c:98:7a:63:b9:10:bf:6f:07:13:c2:82:0c:54:8b:
                    a6:89:22:80:35:97:e1:be:e8:d6:34:6e:9c:61:75:
                    ec:58:89:45:89:d8:76:81:38:b9:b5:1b:db:8e:b1:
                    eb:f4:e1:62:13:c2:4f:4b:0d:2b:46:0a:ca:11:c8:
                    0d:0f:47:17:31:34:da:3b:fc:13:e5:d6:69:89:a6:
                    ef:51:ae:9a:c7:76:87:be:39:3a:99:3b:6c:d8:34:
                    26:a0:a8:e8:fe:a9:88:94:01:a6:6b:51:f1:97:2a:
                    0a:3b:95:cc:2b:9d:41:cf:75:4a:c7:76:75:5f:f5:
                    49:24:ac:b0:0e:d0:32:ca:c8:98:c7:76:7d:b1:53:
                    24:dd:cc:c5:6b:11:35:76:ab:d2:27:e3:d0:e4:e7:
                    99:bc:3e:4a:bf:c7:d7:a1:87:9d:54:e5:56:49:7e:
                    da:cc:f7:6d:98:d4:b7:c9:46:ea:5a:74:dd:d5:4a:
                    14:63:4e:bb:37:36:8e:57:53:56:2d:31:d5:b9:b7:
                    e1:01:c5:c4:0f:a7:ac:71:08:6f:76:cd:f0:77:53:
                    dd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:83:91:52:02:BC:6D:9A:04:96:9C:E9:BE:90:75:2E:51:70:50:7C
            X509v3 Authority Key Identifier:
                keyid:F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:a0:8a:7d:d0:be:88:75:fd:60:e4:8b:07:f4:d7:f9:88:a3:
         75:3a:b0:08:92:7b:32:f0:3e:4a:a8:d5:6b:62:58:9b:be:17:
         2b:e9:44:16:71:8c:03:f3:12:cd:54:06:a0:0f:2d:4b:7c:da:
         5e:74:ec:38:0d:14:a6:92:78:13:11:35:82:9d:e6:eb:9e:55:
         4c:a2:47:dd:ab:f0:ff:03:16:6d:f5:ac:7c:d6:98:3b:75:29:
         95:3a:d6:07:52:1b:43:3a:a8:eb:c4:a1:27:11:3d:b6:b3:22:
         6e:1d:76:98:7d:f7:38:d6:4d:07:02:f8:e2:11:e2:67:7c:9f:
         a6:72:bc:7b:8e:42:8c:10:5c:80:a0:a1:43:d9:56:da:c2:b7:
         6e:a4:a1:1e:61:4d:9d:d8:54:a8:c2:0d:44:32:41:3c:c1:82:
         fe:8c:8f:0c:27:d5:76:e0:5d:88:58:82:6a:c6:89:95:46:51:
         b5:df:d8:c1:40:ff:59:23:60:12:24:88:2b:12:77:be:14:e8:
         36:8f:32:70:73:d7:9a:6b:8e:55:be:87:84:b8:14:2a:b6:3b:
         4b:cd:71:a8:6a:1c:23:36:9c:5f:94:fe:85:1d:b5:ec:cc:5f:
         14:46:61:4f:86:f8:50:e0:39:f1:e6:fc:2c:d0:ff:b1:e5:cd:
         49:f5:a8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----