Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
File:                     8KEScQQ06Frl_m-_Qedr3fk4GM8.mft (raw, json)
Hash identifier:          b6XPeRvjT9ntUFOCrcHAS9tutUX5JPoMpG+4SnorcQA=
Subject key identifier:   4A:95:0C:E5:FE:12:5D:83:49:92:CD:43:63:A4:31:51:AF:52:AD:EE
Authority key identifier: F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF
Certificate issuer:       /CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf
Certificate serial:       01962F74868E14BB091FEFEE131654BEFB93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
Manifest number:          0363
Signing time:             Sun 13 Apr 2025 14:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:27 +0000
Files and hashes:         1: 8KEScQQ06Frl_m-_Qedr3fk4GM8.crl (hash: DhJgGDo6sXSQ71OKXMldxoeZsKpQLOlgI43AdPjdRVA=)
                          2: QxzsJBZ0KnjdWggXNkiPE3mxTiE.roa (hash: wp71B9vMq7Np21xWaUokwt4Wn7Ga2Zz2FhWmCQz4Lj0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:86:8e:14:bb:09:1f:ef:ee:13:16:54:be:fb:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf
        Validity
            Not Before: Apr 13 14:01:27 2025 GMT
            Not After : Apr 14 14:01:27 2025 GMT
        Subject: CN=4a950ce5fe125d834992cd4363a43151af52adee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:96:3b:cf:8e:07:11:9f:76:38:99:03:2a:fb:
                    8f:e9:cd:02:d8:d8:d1:86:42:fe:12:20:f7:d5:75:
                    c4:af:f4:c3:24:4b:11:7d:3f:c9:7d:bd:ca:3d:62:
                    6c:43:67:21:70:37:51:1f:4f:dd:d6:1c:79:c7:96:
                    d3:fe:db:05:2b:36:02:3c:78:64:86:14:ec:01:58:
                    d9:d9:70:f2:9f:16:38:5a:ea:5e:a6:7a:0d:cc:21:
                    94:ab:0b:5e:a7:f3:d5:90:0d:e7:fe:03:f4:f5:18:
                    b0:2d:4d:27:7d:ea:fe:47:45:47:7b:be:37:ae:a0:
                    e2:c5:73:44:d1:a1:d9:d4:ae:2f:f7:63:e7:5c:a5:
                    23:ff:ca:fa:bf:d2:d7:c8:ca:09:42:4a:29:74:d9:
                    57:10:79:7a:22:ea:c8:a4:2a:bd:1d:fe:f4:07:b5:
                    94:bf:29:52:47:52:02:40:91:6a:6c:c6:b7:c1:bb:
                    90:28:25:09:8e:89:48:6a:94:de:28:9d:06:b6:0c:
                    85:c1:4c:1e:4f:15:14:17:a2:e6:9a:11:42:76:bd:
                    8f:70:38:b3:38:3b:bd:4e:05:b1:3a:63:5f:89:6b:
                    84:8a:e3:fd:6d:cd:fc:d5:4e:90:52:11:73:bd:ab:
                    b6:54:30:87:16:c1:39:f2:50:4e:86:d7:af:de:ca:
                    c3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:95:0C:E5:FE:12:5D:83:49:92:CD:43:63:A4:31:51:AF:52:AD:EE
            X509v3 Authority Key Identifier:
                keyid:F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:09:41:5b:a7:3e:e8:07:8a:21:3b:13:9c:4a:96:ca:ef:92:
         b3:f3:4a:bb:1e:a1:e4:70:fd:93:c1:7e:6a:40:ae:68:ff:bd:
         44:ca:c2:2c:c3:ce:c7:11:c2:12:fe:b8:92:12:73:82:ae:eb:
         bd:81:84:1e:d1:28:ac:c8:f0:37:67:fd:c1:a1:0d:c8:c1:a4:
         b0:6b:ff:8e:91:3f:7d:06:49:1b:f3:0a:81:99:9d:f8:05:34:
         2c:2d:eb:15:34:7b:74:3e:4d:88:a6:83:31:e0:40:40:f4:52:
         71:cc:00:62:5c:44:16:c1:04:a5:58:e7:8f:de:32:4c:8f:c5:
         4a:fe:85:a0:32:3b:ca:dc:43:d2:81:9f:c4:ba:f7:09:3d:0c:
         dd:65:f8:6a:a7:fd:a4:49:1d:be:c4:c2:f4:7b:2d:b0:81:8a:
         ed:0a:25:3c:3f:ea:f0:b9:62:33:3b:a5:4a:7a:1e:0d:ae:06:
         09:89:a2:f2:e9:66:6c:04:10:a1:8f:41:38:49:4e:7e:47:7b:
         2c:d7:62:bc:d3:88:00:96:07:be:1c:e0:cc:88:62:0a:f6:cd:
         c9:7b:2f:40:c2:e7:47:4c:73:9f:f6:62:c1:f4:ae:5b:29:44:
         bf:80:83:79:bf:88:00:35:01:d5:fc:06:5c:72:d7:7d:90:8a:
         4f:c1:fa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----