Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
File:                     8DBljxbS2I00FkWS_NTeExMfFpU.mft (raw, json)
Hash identifier:          H2vMrCoIVe1iVaaIKKzRO1tS/S9aszn/Oy4WUxh+K4Q=
Subject key identifier:   6E:EF:FF:DF:4C:D4:FF:55:27:7F:6E:CB:74:6E:E4:A4:72:EF:09:F5
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Certificate issuer:       /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial:       01962DF3E8212B5C5634526D3F85671DE499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
Manifest number:          0AB0
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: 7__iS0PC1sPpziieUf7cPR0483I.roa (hash: WMdPgkVAgvH1xgF/iLZlNWqwQWtXShkyRu4TdlhutJM=)
                          2: 8DBljxbS2I00FkWS_NTeExMfFpU.crl (hash: tUTnnmhj8G1T//vhKsJvU4apuuK6DRhhN+5VZO9K9O8=)
                          3: F7yuxB3rSQXv2e3QR7lP2VYZOl4.roa (hash: Hb0YQdZj2T1tpCI4BSwoqOiW5xXUYr05ZCOvDEHOELk=)
                          4: N9l24h9HyK6kAtkXD09UL27Eum0.roa (hash: Xv+8Dv2RI7WnHgqmAi/VbFX+HLMpAXUADpkW2PUX/hM=)
                          5: TACuL0mRuuSZ00EUuEDQYYgL9nY.roa (hash: EEbhhtJ6TUNmkVK+nqQofMESLsYodUnzqvKr3ODtYdA=)
                          6: f0YSDbM5Fp4SqEnB7Svlvk1Cg-M.roa (hash: 3R84lvwDdPg0KG2eSA0cCdxuOFb1Dl8Y/DbEXSQVXcw=)
                          7: gz7229OR-UwSeE8Mrmip6_lWRzM.roa (hash: HqILwLXjV1tcVlx0sNjeuEAQfPHai/C6EYXvfZ4gHY4=)
                          8: v2HXLCZWsI0s9KIXOuBOD4NKWbo.roa (hash: /mndx1AHWJXPlNn93oMmIR/duKvVFpLSwcZoOaPa0GM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e8:21:2b:5c:56:34:52:6d:3f:85:67:1d:e4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=6eefffdf4cd4ff55277f6ecb746ee4a472ef09f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:88:03:15:a8:d0:29:aa:15:34:0b:a1:75:bf:
                    a9:2f:f6:a0:23:df:8e:48:bf:88:13:bd:78:d0:0d:
                    99:9c:c6:71:e8:41:16:23:7f:eb:15:3d:62:46:bd:
                    c8:11:ae:58:bc:2a:69:d7:30:60:15:89:9b:c1:28:
                    3c:08:c1:3a:f7:55:19:82:d7:6e:b9:f1:b6:e2:0d:
                    a0:f3:4c:b7:ab:3d:b2:48:71:ae:49:e3:7a:46:0a:
                    e0:32:80:cd:8f:e8:c4:ff:ca:58:75:87:60:02:d8:
                    40:30:d9:a0:fe:27:b8:54:6b:36:28:2e:58:cb:e4:
                    09:b3:aa:a8:a2:0c:47:24:6d:ae:32:50:d6:49:36:
                    d0:a0:f0:a0:bd:e9:0a:25:c8:a1:8a:8b:10:eb:29:
                    13:02:61:e8:2d:01:58:cd:81:14:5d:2b:5f:bd:a6:
                    24:63:ad:c6:70:fb:38:69:e3:e9:f7:a3:5f:7e:60:
                    76:c5:34:40:42:1b:54:ee:03:75:d4:63:f9:f1:d4:
                    b4:8a:38:91:00:6d:bd:2b:ad:f3:8c:2c:77:a9:f0:
                    21:00:91:9f:e8:08:8c:3e:77:3d:43:2c:88:ef:b9:
                    33:8e:2b:01:9f:33:df:5c:8b:02:2d:7b:de:db:93:
                    40:32:11:68:2a:ff:d4:fc:c7:dd:78:57:d0:a6:5e:
                    ce:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EF:FF:DF:4C:D4:FF:55:27:7F:6E:CB:74:6E:E4:A4:72:EF:09:F5
            X509v3 Authority Key Identifier:
                keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b0:ab:e4:c8:85:23:76:1d:9d:b3:dd:76:4b:b7:8d:4c:a5:
         2e:8c:b0:0f:e4:c7:76:25:45:b2:ab:c6:bd:3b:7b:f4:e3:00:
         4b:4a:88:45:11:37:fb:ae:07:6c:e6:ac:2a:86:73:35:a1:f0:
         41:f7:68:16:99:45:be:14:81:fe:a0:09:3b:0e:90:2b:a7:7f:
         e7:65:fe:48:0a:08:11:5a:b1:2f:ec:d2:a9:6c:06:b4:b2:fa:
         1d:bb:8b:22:09:78:66:20:33:5d:87:cd:e1:06:1d:a9:2a:93:
         0f:8e:7a:f8:ca:d5:5e:3a:51:04:45:4c:35:20:ed:da:aa:66:
         c2:2e:35:92:6a:b9:43:39:4e:b0:ac:b0:44:b2:af:7a:73:f6:
         70:89:a1:3c:2d:bb:c5:de:7e:ed:94:02:28:26:24:99:1a:16:
         a7:33:8f:32:6f:f0:dd:9d:5a:ec:41:47:8d:9d:15:07:f6:7f:
         f3:3b:2d:36:9c:7f:fe:cb:04:41:d2:8e:f7:c3:88:ef:53:52:
         54:0c:c3:03:6a:2b:9c:ef:c7:be:5b:09:42:bf:b7:fa:3a:b1:
         cd:c2:cd:58:4a:3c:c5:aa:2d:e9:81:9f:60:8f:b1:93:31:28:
         08:de:be:5f:6c:51:da:e4:08:74:f3:93:60:34:82:f9:95:6f:
         16:8d:78:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----