Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
File:                     8R8omgChsRW386TRuAEb-Q0aL3I.mft (raw, json)
Hash identifier:          NyejOs+AMHTnwc5pj4KCV2/IrDOfD3S5QK45gD9sOrU=
Subject key identifier:   AB:A2:84:66:E3:65:27:E6:0B:E7:3A:07:9A:9A:8A:6F:A5:EF:1D:EA
Authority key identifier: F1:1F:28:9A:00:A1:B1:15:B7:F3:A4:D1:B8:01:1B:F9:0D:1A:2F:72
Certificate issuer:       /CN=f11f289a00a1b115b7f3a4d1b8011bf90d1a2f72
Certificate serial:       01962E98A3F4518BAFAF34B54D6E02655603
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
Manifest number:          08B9
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: 8R8omgChsRW386TRuAEb-Q0aL3I.crl (hash: 9NdM93GQ7RWBpmDV8BZ9RC564jThRSSq1bGjCmlT1/Q=)
                          2: tRxgXr9YQwTbEh2NqyL9M68npkQ.roa (hash: QcuVE9jeWpJsMM52+9+6n7mFIjZuC9lNEDcWkB7O3NI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a3:f4:51:8b:af:af:34:b5:4d:6e:02:65:56:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f11f289a00a1b115b7f3a4d1b8011bf90d1a2f72
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=aba28466e36527e60be73a079a9a8a6fa5ef1dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ec:e0:f1:cb:06:3e:cb:24:09:15:87:63:7a:
                    3d:e9:ee:b4:ee:06:a5:69:13:f0:17:f6:61:7e:76:
                    09:90:bf:2c:3d:6b:92:22:ae:10:81:a0:cc:9c:2d:
                    d8:ef:b0:61:6f:09:97:51:c9:7f:69:c5:f1:36:05:
                    c3:c9:db:ee:2d:1a:42:b6:ba:b3:02:a1:55:43:3e:
                    19:52:e5:c6:db:69:13:e7:51:c6:46:b2:1f:60:3d:
                    0c:6c:cf:24:9b:62:9c:66:10:6f:df:99:c9:fc:87:
                    bf:b0:49:b2:3d:ad:74:6b:a0:32:e8:c2:8e:59:50:
                    c3:29:51:51:78:83:d2:64:76:df:79:99:a8:12:ae:
                    c5:31:52:52:47:38:3d:78:8c:6d:f7:a9:4c:60:07:
                    31:bc:3c:74:64:16:63:f6:ff:4f:89:47:f8:e4:cb:
                    77:2f:e2:be:6e:1b:f5:13:7a:2d:b8:06:29:72:3e:
                    a1:aa:6b:88:93:79:d6:8b:0f:d7:45:9b:fa:c0:02:
                    ef:61:99:d7:90:4d:f7:74:c7:ec:9e:25:9f:16:41:
                    05:b5:ab:80:fc:41:54:d9:29:f7:ab:4d:5a:49:7f:
                    87:79:a6:f7:24:12:e1:f8:5f:61:ab:25:16:f3:ff:
                    d6:69:4c:12:02:b1:ff:21:1b:d5:85:53:00:f3:69:
                    a5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A2:84:66:E3:65:27:E6:0B:E7:3A:07:9A:9A:8A:6F:A5:EF:1D:EA
            X509v3 Authority Key Identifier:
                keyid:F1:1F:28:9A:00:A1:B1:15:B7:F3:A4:D1:B8:01:1B:F9:0D:1A:2F:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:7a:65:38:df:d4:7e:d7:c0:a8:f9:c2:47:0d:51:59:a5:ff:
         c5:7d:36:36:95:95:8f:67:ac:47:ce:d5:31:41:2b:77:98:99:
         8b:1d:4d:48:77:22:ae:46:2e:23:9b:e2:95:95:71:c8:5b:7a:
         72:67:d4:19:22:ee:9f:f9:ae:21:a8:74:46:ed:51:4b:ef:a2:
         68:7b:f1:17:ef:f7:d7:f9:10:a6:12:7f:d8:2f:95:20:4c:40:
         35:bc:50:d0:f0:2d:a3:2c:5c:f2:ad:31:06:6b:c9:bd:02:ee:
         b6:af:c2:81:15:98:76:cc:d7:c8:d7:75:cb:30:60:45:87:df:
         25:b1:b5:33:80:33:a7:a6:a7:01:51:c8:2b:f9:4f:a7:9d:57:
         88:0c:b2:ec:06:a4:20:3f:83:39:b6:a1:d9:f3:08:11:f0:e5:
         7d:87:80:8c:e9:db:5f:aa:9b:3b:19:7e:1d:78:01:28:55:da:
         ce:59:b6:8f:7c:24:cb:99:0e:35:2a:1f:18:03:f0:00:4b:cd:
         d3:d5:9c:66:72:ea:03:30:e3:9e:ae:dd:b6:93:78:6c:2b:5a:
         b7:d5:e7:8f:7e:ba:05:21:22:e2:10:b3:d6:8b:ce:50:28:8b:
         80:d1:9d:da:f2:73:03:c5:ef:fe:f4:53:d3:7e:05:2d:33:83:
         49:29:8f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----