Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/25923b-f64e-4798-a37a-da3a3dee05d4/1/8GHbS-aV6klaKDu-MwIqvSidXqg.mft
File:                     8GHbS-aV6klaKDu-MwIqvSidXqg.mft (raw, json)
Hash identifier:          7nGNtGmnd4gqiO64Qe1ImUiVlX22GjQWCeHlrI0pfrg=
Subject key identifier:   07:B2:7E:F8:5D:E8:6A:B8:5C:39:77:1F:46:CE:87:A4:AE:97:11:B9
Authority key identifier: F0:61:DB:4B:E6:95:EA:49:5A:28:3B:BE:33:02:2A:BD:28:9D:5E:A8
Certificate issuer:       /CN=f061db4be695ea495a283bbe33022abd289d5ea8
Certificate serial:       01962E98945926E9C08F2B74AAA46BE64F83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8GHbS-aV6klaKDu-MwIqvSidXqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/25923b-f64e-4798-a37a-da3a3dee05d4/1/8GHbS-aV6klaKDu-MwIqvSidXqg.mft
Manifest number:          0F40
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: 8GHbS-aV6klaKDu-MwIqvSidXqg.crl (hash: SDesKiLN1Ka8QVRA7PkQFIBrvmqX05IfNWII9NFjWsM=)
                          2: zmLbz4eEw5NbODVzG7rLheEZc3E.roa (hash: I9hEe8qaNqq2mLBTSfEYmFwWzcg7/EdSdxzM8S+noz0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:94:59:26:e9:c0:8f:2b:74:aa:a4:6b:e6:4f:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f061db4be695ea495a283bbe33022abd289d5ea8
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=07b27ef85de86ab85c39771f46ce87a4ae9711b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:70:0d:b6:00:14:c1:5e:e7:ee:f4:00:aa:23:
                    0b:06:99:46:a6:06:ab:35:d6:a7:5b:22:6f:08:2c:
                    81:3d:3d:e8:e1:39:ae:5d:fd:f5:8c:29:bc:89:31:
                    60:8b:54:f7:00:e2:a5:87:52:e7:a2:28:8f:36:09:
                    5f:d3:e7:31:bd:e5:42:4a:b0:0f:c2:17:18:17:32:
                    d9:5c:47:cb:f5:6b:94:45:1c:89:89:b1:d7:4a:29:
                    b4:47:dd:29:3e:e8:5d:86:a7:0b:b9:df:be:09:92:
                    01:a0:67:c7:67:b4:be:c2:d7:1d:73:d6:81:66:05:
                    9e:78:8f:87:d5:f8:38:9b:69:55:34:13:7b:08:09:
                    eb:84:30:cb:83:0b:9f:56:de:42:02:78:f0:4c:bd:
                    7e:b5:ef:a1:09:17:01:b7:e1:ce:f7:79:e7:fa:b5:
                    07:c6:31:2c:fe:a6:a9:d4:46:ca:40:ff:74:3f:14:
                    7e:69:21:83:7a:9b:e3:73:6e:66:f5:42:fe:b8:ff:
                    3f:8a:e5:f9:93:51:68:57:1c:a2:1b:6d:53:75:a3:
                    2c:31:39:f5:8d:61:13:21:8d:24:fe:b3:18:12:5f:
                    f3:96:5c:96:3e:98:30:14:18:ed:2f:ad:c8:b7:4d:
                    ad:3a:d1:6d:01:95:41:46:e9:6b:71:d5:d4:b3:c0:
                    ae:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B2:7E:F8:5D:E8:6A:B8:5C:39:77:1F:46:CE:87:A4:AE:97:11:B9
            X509v3 Authority Key Identifier:
                keyid:F0:61:DB:4B:E6:95:EA:49:5A:28:3B:BE:33:02:2A:BD:28:9D:5E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GHbS-aV6klaKDu-MwIqvSidXqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25923b-f64e-4798-a37a-da3a3dee05d4/1/8GHbS-aV6klaKDu-MwIqvSidXqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25923b-f64e-4798-a37a-da3a3dee05d4/1/8GHbS-aV6klaKDu-MwIqvSidXqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:ac:6e:d0:f5:a9:d4:c5:46:70:2a:16:ee:60:ec:06:75:84:
         71:6f:17:07:42:8c:10:a2:0f:c9:42:ad:83:7b:55:6c:e1:31:
         cf:cc:a5:8e:65:c3:b5:8c:84:76:0b:f7:ae:ac:d3:e5:a8:b9:
         33:be:8e:42:a7:39:bb:c8:a1:d0:b9:a7:12:87:70:4b:f5:3a:
         00:35:9f:0e:7b:d1:c0:b2:3c:6b:b9:31:b1:62:76:a6:d4:79:
         99:6a:e0:87:ae:9b:51:0b:34:44:52:24:cd:cd:2c:42:b5:01:
         93:29:d4:5a:3e:17:0c:7d:1d:31:d2:45:50:7e:35:ca:06:94:
         ba:98:62:d1:68:ad:16:ca:fb:61:0d:15:0f:e8:3b:76:8a:41:
         a6:eb:a1:e0:d6:58:a0:96:f7:5e:74:4d:e0:47:68:87:80:22:
         b0:dd:88:f2:38:33:a7:ee:0b:fa:b0:73:92:ca:1d:ec:fc:e0:
         46:18:dd:d6:a1:a8:57:4b:ff:a4:7b:1c:c6:86:e0:83:04:d3:
         c5:16:62:39:96:53:53:60:31:1c:6b:1c:22:ab:3a:17:1a:a9:
         0b:57:06:0e:d3:28:c7:20:68:40:b8:a6:f3:13:b2:f1:38:f6:
         82:f3:d7:46:f1:c3:59:84:35:58:b1:26:7b:86:fc:3a:2a:58:
         87:86:50:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----