Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
File:                     8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft (raw, json)
Hash identifier:          HPa7lXCqUtyy8i7Hw/SfeaizBnSNwlQMGZi9GGpR2Q8=
Subject key identifier:   57:37:4A:3F:7B:62:22:FD:F9:A5:90:BB:A1:CB:00:D4:A8:9B:A1:27
Authority key identifier: F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
Certificate issuer:       /CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Certificate serial:       01962ECF9233F54D9A95801ADA254862CF81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
Manifest number:          0C6E
Signing time:             Sun 13 Apr 2025 11:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:17 +0000
Files and hashes:         1: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl (hash: DXgoQsN1MFJNr4QoejVJ73lz23zCJoCfF5kBYXiK7rs=)
                          2: GGAjioujqBIqTrQAhNRgglPPRkE.roa (hash: 1FpErs46KltIuhJLiOWBLzSL1Xf0hQCI/1w1QmIm60Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:92:33:f5:4d:9a:95:80:1a:da:25:48:62:cf:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
        Validity
            Not Before: Apr 13 11:01:17 2025 GMT
            Not After : Apr 14 11:01:17 2025 GMT
        Subject: CN=57374a3f7b6222fdf9a590bba1cb00d4a89ba127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:35:3b:8c:62:a1:7c:ea:bd:83:72:3a:03:ac:
                    1a:a5:72:d2:b2:3d:e0:0a:4b:dc:d3:25:73:32:cd:
                    6e:15:15:49:c1:19:9e:07:6c:e7:ec:b6:40:e7:b4:
                    1a:c9:e9:fe:84:95:bf:c3:7f:5c:bd:85:94:04:a6:
                    f2:44:48:e5:97:66:85:b7:08:ef:0f:46:4c:9a:83:
                    f9:e5:f4:a3:41:a3:61:8b:3a:ee:d9:4f:11:dd:3b:
                    9c:64:44:37:12:2b:99:d2:63:d2:91:88:4e:db:0a:
                    01:c0:64:93:ca:0b:6a:d2:60:c6:13:64:1d:8b:2b:
                    fd:04:6c:05:2d:b3:ff:19:80:7e:41:87:a1:60:16:
                    68:88:0d:9b:68:b7:c8:1e:c0:00:d6:b4:bb:6a:05:
                    d6:1c:0b:0e:0a:91:e1:54:0b:6a:72:4a:45:7e:cc:
                    cf:93:06:72:0f:9f:0a:c9:9a:e9:3b:7a:d4:be:ed:
                    33:32:5d:bb:9b:c7:72:db:c6:c1:1d:6e:b0:43:1c:
                    b4:cf:4b:eb:20:96:36:d2:f3:59:b5:17:88:e6:a0:
                    2e:37:5a:1a:9d:62:6b:d4:d2:33:e1:24:7f:f0:52:
                    bc:5f:b9:e7:da:fa:9f:92:38:37:61:e1:67:a3:4b:
                    9b:cc:11:99:3d:90:d4:4c:8c:82:c2:aa:0b:58:0e:
                    8a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:37:4A:3F:7B:62:22:FD:F9:A5:90:BB:A1:CB:00:D4:A8:9B:A1:27
            X509v3 Authority Key Identifier:
                keyid:F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:1f:75:57:0a:b7:2a:5f:21:c2:7d:aa:e8:88:95:f2:1f:2c:
         da:6e:ef:4e:1f:13:ad:c2:d1:73:b1:fe:14:2e:53:af:c5:cd:
         84:fc:46:d8:47:e6:3e:8f:46:0f:cf:b7:64:c1:23:ae:30:51:
         19:6d:89:06:d5:7f:33:d5:ad:84:02:1f:04:15:62:28:69:e8:
         c3:08:81:16:1d:78:f9:74:21:35:75:64:65:dd:d1:ce:ba:5e:
         2a:02:65:e1:48:53:ed:9a:ef:51:07:b3:cc:b3:70:9e:79:f7:
         1c:9b:a9:6f:56:18:58:7f:d3:c4:a1:22:d0:e9:a2:7c:2c:0f:
         6c:43:76:48:93:70:29:81:dc:49:ee:d2:e1:cd:36:cd:59:fb:
         d4:15:8b:5f:f0:6d:14:b8:3b:93:ee:35:cd:81:f8:f8:21:fd:
         f3:63:eb:6c:03:75:e8:ff:3a:02:d6:9d:22:cc:e3:49:20:34:
         64:f9:12:3e:7b:d5:d1:23:94:39:f4:a7:bf:72:18:50:4d:1c:
         ba:ec:16:81:41:63:98:64:26:38:58:6e:c9:50:f2:d5:b0:47:
         ca:88:4e:7d:5f:65:37:f8:92:02:96:19:4c:4c:a6:e9:dd:82:
         24:ab:49:28:b9:ff:c7:e4:1f:6e:9d:05:56:af:0e:3a:a3:95:
         a4:72:9c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----