Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.mft
File:                     8MFXiVlhvE-EwCh7KZu-H4ql9ho.mft (raw, json)
Hash identifier:          PLGskjcCtVkvPC8J9hHhNicT2HOg7DLYSPNF/oZVSWw=
Subject key identifier:   39:90:F7:49:A7:7D:09:CD:80:6F:0B:FE:AF:51:44:67:93:7A:B2:89
Authority key identifier: F0:C1:57:89:59:61:BC:4F:84:C0:28:7B:29:9B:BE:1F:8A:A5:F6:1A
Certificate issuer:       /CN=f0c157895961bc4f84c0287b299bbe1f8aa5f61a
Certificate serial:       01962E99710B42B91F143A702B156F4F06C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8MFXiVlhvE-EwCh7KZu-H4ql9ho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.mft
Manifest number:          05F0
Signing time:             Sun 13 Apr 2025 10:02:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:09 +0000
Files and hashes:         1: 8MFXiVlhvE-EwCh7KZu-H4ql9ho.crl (hash: +Ay33rNA87RtViX0oIwsrRGSsHOIcFPmYSV5FQEtTy4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:71:0b:42:b9:1f:14:3a:70:2b:15:6f:4f:06:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c157895961bc4f84c0287b299bbe1f8aa5f61a
        Validity
            Not Before: Apr 13 10:02:09 2025 GMT
            Not After : Apr 14 10:02:09 2025 GMT
        Subject: CN=3990f749a77d09cd806f0bfeaf514467937ab289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9b:25:6b:60:f3:8b:a1:da:56:9f:5c:5a:f9:
                    24:e2:18:60:da:1b:89:28:17:55:a5:b2:57:82:d8:
                    0d:8b:5a:3a:6b:a2:89:af:9d:9c:5a:e8:7a:35:d3:
                    89:b1:42:64:99:89:32:cd:03:69:db:55:b2:98:e7:
                    86:79:88:f9:6d:67:34:e3:33:54:fb:3c:33:1b:3b:
                    60:8a:b2:a1:59:84:85:e5:84:fe:ea:97:ed:81:47:
                    37:de:b5:11:2e:b4:e2:69:ea:9e:08:f1:18:da:f9:
                    8c:50:a6:5f:99:b7:5b:3a:69:e9:1a:0f:52:c3:16:
                    54:21:5f:a0:c7:01:88:b4:09:38:45:55:3e:97:4a:
                    35:76:66:fa:bd:cb:4b:5f:2b:49:0d:73:58:c7:c7:
                    03:d2:33:e6:64:3c:f1:0b:7a:9e:9b:31:f5:36:d9:
                    75:ad:0a:1d:2a:45:d5:c7:a7:65:2f:eb:29:55:c9:
                    a5:f3:a4:13:5f:56:7a:58:86:a4:fe:e2:fd:11:14:
                    42:ed:c4:9e:85:bf:a2:26:87:cc:be:f3:1d:98:3a:
                    b0:b8:1c:77:1a:99:ad:01:96:f4:d6:4a:a4:84:b2:
                    15:48:98:f7:bb:c4:cc:53:51:c7:f9:ff:8c:6e:68:
                    52:b7:55:20:7c:d0:28:41:06:e9:bd:1f:31:ec:eb:
                    a9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:90:F7:49:A7:7D:09:CD:80:6F:0B:FE:AF:51:44:67:93:7A:B2:89
            X509v3 Authority Key Identifier:
                keyid:F0:C1:57:89:59:61:BC:4F:84:C0:28:7B:29:9B:BE:1F:8A:A5:F6:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MFXiVlhvE-EwCh7KZu-H4ql9ho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:34:b6:64:3f:c1:5b:b4:2f:ce:95:dd:ae:69:81:73:b9:f9:
         3f:58:af:e2:18:ba:54:72:da:d4:fd:0c:d7:7a:6f:63:93:d6:
         c3:30:62:f3:ea:c6:da:ed:42:3d:7f:2c:17:d2:2e:28:f2:12:
         7f:e7:1e:55:7e:35:ef:48:75:e7:d3:61:3f:fe:a9:94:91:9e:
         b4:65:57:47:80:c1:20:f2:c4:60:20:03:48:18:56:39:71:09:
         13:d1:ac:32:dd:5a:bf:66:ea:46:7c:c8:c9:10:33:ab:e8:47:
         5a:6e:50:57:88:6e:7f:aa:73:62:00:fe:84:2f:11:91:31:b1:
         bf:20:be:a6:43:3e:d2:9f:45:08:0a:32:3d:ff:6e:fd:b1:fa:
         64:16:d7:fc:67:d9:94:c3:9d:0f:05:f5:3c:0f:a7:1b:0f:03:
         c5:66:74:9a:f6:7c:39:77:42:66:14:8e:33:ff:7a:8c:ca:20:
         74:9b:73:ff:f9:08:5e:2c:bd:ac:01:f0:3c:bc:44:02:af:3a:
         2b:6c:23:fa:7a:0d:d0:c8:f6:81:d7:52:d0:eb:82:a4:c8:01:
         ae:8e:09:3f:74:df:a6:b8:de:19:05:9f:fe:c2:7a:7b:af:45:
         0e:01:0a:6d:f9:a9:3f:a2:77:26:04:84:68:2c:b1:07:85:6b:
         2c:30:b5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----