Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
File:                     f0LSfCHahsfp-_RK4OVsmPPS-As.mft (raw, json)
Hash identifier:          H32JTeiOT7sD2mc5MSLzm/7MevhDfflqglheSUO0MHo=
Subject key identifier:   8A:47:EC:D7:1D:4D:81:71:0D:87:E4:00:C8:5B:3A:1D:D9:AE:4E:72
Authority key identifier: 7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
Certificate issuer:       /CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Certificate serial:       01962E61D5E0FCBB97410939F484E99D6BC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
Manifest number:          0C87
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: f0LSfCHahsfp-_RK4OVsmPPS-As.crl (hash: rn2d5DLoseJWXh/Wy7TpJkUMVc27qOVQwUaV4l7Bgh0=)
                          2: ldAiZGhEA6PQQSWSUu13vFbKCqU.roa (hash: sA9s3rJXQHu5BKgisYTJyKuldiob4VBrcuXc+pLot6Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d5:e0:fc:bb:97:41:09:39:f4:84:e9:9d:6b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=8a47ecd71d4d81710d87e400c85b3a1dd9ae4e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:75:59:85:93:09:9b:bb:95:e4:c2:48:b7:28:
                    b3:fd:b7:64:24:c9:29:15:83:57:d4:63:b4:59:57:
                    26:15:e4:d7:61:74:ef:af:c5:69:5e:0a:5b:a6:b0:
                    6c:43:68:f0:4a:87:7d:40:d2:bf:cc:89:7f:88:a4:
                    a4:d2:ef:d6:13:5b:ba:7e:96:ec:73:24:6b:18:2e:
                    e6:67:f5:b9:a2:01:fa:05:cc:6c:14:2e:76:e8:ec:
                    bc:b1:89:a6:e5:3b:4a:28:b4:48:50:14:1e:06:f1:
                    60:07:45:d9:f0:b0:b9:fb:f4:18:9e:72:fa:57:bc:
                    34:59:9d:03:1f:c9:2e:45:78:40:40:ea:70:90:f1:
                    35:b1:9a:ac:ec:ad:fb:ff:b5:10:1c:57:ae:ef:69:
                    2f:16:d1:cb:56:7f:b8:87:79:93:67:ca:98:86:58:
                    d1:fa:1d:dc:79:f2:56:4f:03:31:74:ea:07:22:46:
                    63:14:4c:c0:0b:47:ec:ce:07:fc:86:29:c7:82:3b:
                    1f:78:d0:2a:7f:fd:ca:49:91:de:8f:9b:a6:20:3d:
                    f2:c8:58:86:af:66:d7:c3:59:e1:97:2d:95:2b:ca:
                    3d:40:f4:f9:45:78:90:24:ed:ce:4f:e3:60:27:f3:
                    de:ba:9a:f3:03:77:a7:53:58:ee:c1:e4:e0:de:3e:
                    e0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:47:EC:D7:1D:4D:81:71:0D:87:E4:00:C8:5B:3A:1D:D9:AE:4E:72
            X509v3 Authority Key Identifier:
                keyid:7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:08:6d:1d:8f:ce:1e:88:56:7d:cc:2a:cd:73:7d:d2:a7:0b:
         db:80:5e:48:69:83:2b:b6:36:50:81:fd:d8:7f:db:de:ae:69:
         17:3c:24:f8:5c:c9:8e:c7:05:a0:d7:ce:c3:60:d2:15:99:10:
         01:f9:ab:4a:c5:27:01:91:68:65:fd:83:f2:f9:37:24:d8:c2:
         35:c6:22:99:e8:e1:d1:72:c0:20:7a:17:1a:3d:bc:88:53:fb:
         68:9c:e5:db:68:73:c7:6e:71:80:22:cd:59:0b:4e:71:08:2c:
         3c:b3:22:99:41:b8:72:50:73:36:2b:42:e5:76:68:59:fd:43:
         46:0d:62:c4:2b:5c:c8:97:bd:8c:de:0b:bc:bc:17:46:d6:0d:
         78:aa:55:95:98:8b:c8:81:ac:da:7e:e5:67:1e:fa:5c:9b:39:
         ca:63:53:9b:3c:7c:4d:31:79:58:c5:5b:4c:f4:45:a7:71:ae:
         8b:ca:20:c7:a3:93:28:de:ee:f9:c9:ce:6c:36:3a:b3:40:85:
         5f:f4:2f:3f:f8:55:01:e1:8b:42:45:08:7d:b8:ec:1f:97:9c:
         3b:0f:48:7c:51:72:c3:fe:f9:1a:d0:84:fc:1e:df:83:ae:87:
         fa:e4:6f:a7:9a:ea:c8:50:09:1d:b5:43:86:59:11:32:40:2b:
         12:9b:de:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----