Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
File:                     8uOrazEY4L3g5kiOa-1slpQeDoQ.mft (raw, json)
Hash identifier:          x6x0LoJkNShaDJhvmdCcwiuvY0NcvdxCZMLhB2gW4fo=
Subject key identifier:   4C:1F:B1:F6:3C:0F:33:5A:BF:E2:32:08:2B:E5:5F:AC:83:9C:25:EF
Authority key identifier: F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
Certificate issuer:       /CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Certificate serial:       01962F74A35DDC14426E8CE5AC671517A58A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
Manifest number:          0980
Signing time:             Sun 13 Apr 2025 14:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:35 +0000
Files and hashes:         1: 8uOrazEY4L3g5kiOa-1slpQeDoQ.crl (hash: +KPYaIaGpHRrjMwwVyQI7iPV0KMuFOrRLjYAhadg6kA=)
                          2: TwUAmEwQxO2jeeE0IG7nOUuBRU8.roa (hash: 5uZF7JHC6Cu/tuWa9kusO7lA0+dh5OGQEqs1E5VZ/5E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a3:5d:dc:14:42:6e:8c:e5:ac:67:15:17:a5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
        Validity
            Not Before: Apr 13 14:01:35 2025 GMT
            Not After : Apr 14 14:01:35 2025 GMT
        Subject: CN=4c1fb1f63c0f335abfe232082be55fac839c25ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e3:59:b6:41:b4:c2:85:e3:9e:fd:32:4b:60:
                    b8:a5:32:fc:6d:35:ae:ab:74:db:5b:fd:53:86:84:
                    c6:69:7b:10:e2:6a:f5:b2:17:a4:6a:b9:79:a4:f9:
                    d1:52:92:e0:dc:9f:fe:55:af:da:15:c0:9b:d8:e1:
                    b7:e2:58:6d:4e:e0:1a:80:77:5b:1e:55:12:81:38:
                    59:7f:6c:61:c9:b7:2f:6e:f5:9a:fb:53:09:b7:dd:
                    6d:ff:c3:4c:0e:17:a4:90:a9:b2:92:5f:21:29:e5:
                    47:6c:50:0d:b3:53:30:00:35:7f:89:96:b1:ed:c9:
                    b0:fb:9d:f2:cb:3a:99:5f:46:c3:09:2c:f4:54:88:
                    a0:72:d6:94:ca:d2:38:87:ee:a5:8a:91:57:d7:fd:
                    67:70:d8:89:45:08:5b:ab:a4:56:68:a9:e0:ac:10:
                    85:a1:de:6f:4b:f3:db:74:75:37:d8:01:e2:5a:bf:
                    39:3b:f0:cb:5f:18:9c:fb:e4:fe:e9:8f:03:28:68:
                    7c:6f:b0:3a:05:d7:84:2f:b7:8a:69:97:bd:db:7e:
                    0e:6c:e6:cd:fc:62:21:95:8f:da:ed:98:a2:31:aa:
                    af:2a:61:d0:4e:bc:46:15:2d:ef:be:d4:33:b5:fc:
                    47:dc:e7:5c:ea:fd:22:17:fc:e3:d7:6f:ae:ad:43:
                    1d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1F:B1:F6:3C:0F:33:5A:BF:E2:32:08:2B:E5:5F:AC:83:9C:25:EF
            X509v3 Authority Key Identifier:
                keyid:F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:1e:d2:61:1b:16:fd:4d:67:9c:53:c7:bd:c7:f5:53:d5:cf:
         b9:f4:7a:19:56:7e:cf:70:24:b7:20:da:08:d3:10:c8:8a:33:
         75:48:a9:d1:d0:11:ba:85:42:e4:b4:ca:0a:ca:73:09:9d:db:
         63:d5:ab:2b:b5:30:f0:a5:36:98:97:8d:0b:22:3f:8b:3a:32:
         22:c3:e0:00:fa:70:59:e7:81:81:6b:a5:5f:b4:00:d0:61:06:
         f2:25:ef:1b:52:0d:06:74:5f:70:0a:45:ff:2f:5c:f1:f6:1c:
         ae:01:5f:44:92:2a:3b:d2:48:e0:16:98:42:02:e7:66:61:20:
         3f:79:68:b2:c3:93:5a:f6:37:8c:0c:08:82:0d:10:62:14:9b:
         ef:47:df:cc:6c:4a:4f:3b:d9:5a:38:98:6f:21:56:4b:80:a8:
         76:e0:2e:bc:b1:5a:20:6c:07:a4:b0:64:5c:8e:15:82:ee:a8:
         61:7f:7d:21:25:41:ae:bb:e4:fd:72:bf:7c:d6:73:e5:f5:9f:
         e8:a2:f5:84:e9:37:36:d8:60:a8:04:79:a0:7b:ae:5f:d1:15:
         35:3b:67:86:60:b0:ed:1f:9e:80:a5:5e:8f:c3:c1:2a:a3:03:
         1f:81:29:f6:4c:00:12:3b:85:b1:56:10:97:fe:fa:25:1a:e2:
         cb:a8:41:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----