Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft
File:                     8lizqXQbQx177NZChrnmvODpddo.mft (raw, json)
Hash identifier:          8sA0JAy3jeq86H90Fx7zjfqKz8MbpcLY2r5WPn7D/vY=
Subject key identifier:   40:44:26:A3:92:AA:85:4B:9F:C5:12:73:A0:2D:01:AC:2E:B4:B4:A1
Authority key identifier: F2:58:B3:A9:74:1B:43:1D:7B:EC:D6:42:86:B9:E6:BC:E0:E9:75:DA
Certificate issuer:       /CN=f258b3a9741b431d7becd64286b9e6bce0e975da
Certificate serial:       01962FAB1610EE8FA7BEC0EA5FD39CF27BB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8lizqXQbQx177NZChrnmvODpddo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft
Manifest number:          14B9
Signing time:             Sun 13 Apr 2025 15:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:03 +0000
Files and hashes:         1: 8lizqXQbQx177NZChrnmvODpddo.crl (hash: Se384eo7GG+rerRjYdjBmFbf8QxdFrNqnZaB83Kqi7s=)
                          2: LSDLxpYG9vUS-ynb5NuKXC0hxwk.roa (hash: iU/GAJxLreLcqJkb0jyy5NFNWuEEVZB548A5w51V+6U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:16:10:ee:8f:a7:be:c0:ea:5f:d3:9c:f2:7b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f258b3a9741b431d7becd64286b9e6bce0e975da
        Validity
            Not Before: Apr 13 15:01:03 2025 GMT
            Not After : Apr 14 15:01:03 2025 GMT
        Subject: CN=404426a392aa854b9fc51273a02d01ac2eb4b4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:37:26:25:3e:6f:70:d1:dc:7d:ba:ce:1a:2b:
                    d3:24:e0:92:67:fa:6b:78:1c:66:25:3d:75:e1:d1:
                    04:89:21:45:ca:3a:a1:4b:26:01:65:14:dd:4b:cc:
                    e1:4e:74:8f:ca:49:67:d1:06:ac:a4:d6:09:86:91:
                    3a:12:85:c3:53:1e:7e:5e:bc:81:70:99:ed:dc:4a:
                    69:b5:18:76:57:ed:e6:7f:2f:c1:2e:ee:75:99:47:
                    87:18:3e:7c:9a:ef:0a:db:d7:16:2c:cc:a0:90:f6:
                    25:62:6f:00:c6:c6:87:95:05:d8:2b:71:ee:62:9a:
                    96:5a:29:50:ac:37:55:6f:42:7a:fa:9a:7f:08:f0:
                    a3:ff:2f:53:96:92:95:89:61:c4:0d:4c:f4:6b:09:
                    b4:03:22:c5:60:ce:bd:60:ec:29:de:6d:c8:d9:e0:
                    3e:20:70:d5:62:b1:d2:ec:5a:9b:ed:1c:68:db:0f:
                    5f:f2:49:4b:dc:58:6d:b5:2e:06:f6:48:40:58:cb:
                    dc:fd:81:da:60:77:db:7d:0d:bc:f0:aa:52:3f:69:
                    4c:b7:7a:8a:b2:69:f6:d1:b1:c1:8a:d0:d9:0b:d3:
                    e9:ac:74:8f:5a:16:7d:60:fb:fd:e1:59:3e:40:67:
                    b5:05:fb:a0:75:1e:db:a2:c6:5f:f1:1e:72:8d:20:
                    c5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:44:26:A3:92:AA:85:4B:9F:C5:12:73:A0:2D:01:AC:2E:B4:B4:A1
            X509v3 Authority Key Identifier:
                keyid:F2:58:B3:A9:74:1B:43:1D:7B:EC:D6:42:86:B9:E6:BC:E0:E9:75:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lizqXQbQx177NZChrnmvODpddo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c1:a0:f8:a2:97:1e:79:fc:2c:29:96:c9:3a:98:ac:c7:10:
         9a:84:95:89:ed:72:3d:eb:69:e4:5e:57:aa:b7:38:a2:db:36:
         4f:bc:1c:94:2b:00:e9:d0:11:53:86:32:00:59:82:84:bc:27:
         a8:25:42:5e:3f:98:0a:16:1b:d2:52:64:00:9b:46:dd:8c:fb:
         4b:a6:64:d4:36:32:ce:3d:f2:f7:bc:ac:c4:03:f0:27:3b:3c:
         ad:4e:f8:d7:de:f4:d5:c1:ef:e7:6f:01:c3:fe:fe:45:31:97:
         3f:cc:73:f3:90:ff:f6:3b:af:13:02:97:49:88:4d:25:a6:5d:
         84:e8:ef:0a:71:a5:63:75:e0:6f:da:73:2c:b8:ce:e9:be:41:
         31:dc:8b:ce:7e:4e:b7:98:ca:de:5d:8b:c2:93:56:24:c7:4e:
         57:97:61:f7:3a:9e:be:34:ee:c8:4c:2b:d3:b6:88:33:42:b5:
         46:56:88:58:59:0b:a6:c9:09:97:bf:9c:13:93:f6:27:7e:a1:
         03:cf:b0:7b:4a:f2:bb:2d:a5:1d:f2:50:f3:0b:d2:5f:30:b8:
         0e:cb:12:d6:70:e0:68:83:8e:26:bb:5c:f7:10:77:b9:4e:c9:
         96:a3:81:85:de:61:6f:01:01:99:0e:bd:f0:80:f6:2e:fb:2d:
         76:1a:bd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----