Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft
File:                     Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft (raw, json)
Hash identifier:          T9dqKSxNUb/I5HaS8Wnhp41t294Htf9V3ZcRwqOCG70=
Subject key identifier:   A1:30:1C:29:C4:E4:C8:81:04:25:C7:B6:ED:97:91:07:38:60:C5:E5
Authority key identifier: 4A:EF:BC:FA:7F:05:9F:F1:07:27:EA:61:9E:59:13:9D:A3:74:18:EF
Certificate issuer:       /CN=4aefbcfa7f059ff10727ea619e59139da37418ef
Certificate serial:       01962E996225C68FA8091053A08996290FDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:06 +0000
Files and hashes:         1: Su-8-n8Fn_EHJ-phnlkTnaN0GO8.crl (hash: xVerWf3/p/eXVI2RDsbt2RcXRwtUQZdbDFucN7VjDwc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:62:25:c6:8f:a8:09:10:53:a0:89:96:29:0f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aefbcfa7f059ff10727ea619e59139da37418ef
        Validity
            Not Before: Apr 13 10:02:06 2025 GMT
            Not After : Apr 14 10:02:06 2025 GMT
        Subject: CN=a1301c29c4e4c8810425c7b6ed9791073860c5e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:b3:81:3e:46:cd:22:b7:ac:72:e1:68:b3:87:
                    21:87:f8:75:fa:bb:61:4c:51:eb:32:ce:30:05:db:
                    2a:b8:03:30:71:35:e6:1f:f3:49:16:4a:f4:88:ed:
                    2d:3f:6e:43:a6:9b:44:9e:fa:73:41:5d:c6:08:49:
                    7c:73:58:43:f6:e0:6d:f0:7a:2a:7a:8f:2f:2a:15:
                    27:8e:66:3c:be:d0:d1:6c:ba:85:3f:09:3f:3f:be:
                    ab:61:1b:60:65:d6:e5:66:29:99:00:3e:52:a6:64:
                    b4:ea:cd:34:70:55:8f:f5:7d:12:9b:dd:83:7b:77:
                    69:74:c1:9f:33:78:a2:43:53:f8:b8:b0:08:5e:0e:
                    96:2c:d9:5d:f4:f1:59:d1:cb:46:08:39:da:ff:b3:
                    cf:87:b1:13:00:55:ba:3f:17:31:61:f0:e6:b1:1d:
                    3c:78:72:b2:b7:21:8b:76:19:b9:c1:b2:a4:6d:bc:
                    0e:52:5d:ac:d3:9a:32:f4:56:f7:4b:37:be:71:7e:
                    83:f2:5b:31:d4:80:fb:61:a1:77:95:97:ae:06:b1:
                    9f:f9:d7:64:98:fc:9d:54:2a:3c:60:cc:e1:5d:e8:
                    1a:3d:ec:25:db:93:75:ce:ee:69:17:f0:2c:7f:ef:
                    a2:b6:8e:84:50:a1:b1:13:c5:a7:58:ca:4b:eb:20:
                    09:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:30:1C:29:C4:E4:C8:81:04:25:C7:B6:ED:97:91:07:38:60:C5:E5
            X509v3 Authority Key Identifier:
                keyid:4A:EF:BC:FA:7F:05:9F:F1:07:27:EA:61:9E:59:13:9D:A3:74:18:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:7f:35:f8:0c:2b:7c:e4:77:6c:23:48:90:aa:c9:06:7f:f3:
         17:3a:ca:a4:e7:2d:72:10:3b:04:d4:3b:e2:9b:3c:8b:21:95:
         91:91:90:21:2f:cf:52:a1:56:2d:4c:b9:9d:54:15:f5:71:e7:
         96:c3:c1:5c:03:55:a8:2c:8c:f9:24:e4:b4:7b:3e:ef:54:85:
         66:95:50:5e:eb:44:d8:67:bb:3e:a6:46:b9:f6:fb:e1:2e:90:
         3e:98:8a:5c:db:4b:3d:d3:26:53:96:e9:2e:1a:3f:fa:aa:f8:
         3d:0d:12:77:57:84:70:51:41:9f:ff:49:52:28:c4:eb:f2:0b:
         ff:ba:a2:e9:a4:6e:16:44:15:16:6f:18:a9:af:c3:a6:fe:05:
         4b:20:e8:6b:ec:86:8c:b8:91:ef:dd:fc:c7:aa:f6:fd:00:f7:
         1e:2a:32:be:23:fb:11:f8:0e:a6:1a:f7:2d:c0:f3:bc:32:a2:
         91:68:b0:7b:89:f2:7e:77:0c:73:c4:90:a3:3f:5f:20:b9:93:
         8b:fa:34:d3:f5:b1:46:98:84:54:cb:b5:40:13:47:8b:26:0e:
         4f:82:b0:5c:f1:dc:b5:57:15:17:aa:d0:bb:62:d6:04:17:5a:
         d4:84:a7:d5:83:5e:2b:bc:16:c7:3b:40:62:9a:56:01:3d:75:
         89:91:38:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----