Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
File:                     8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft (raw, json)
Hash identifier:          R+JXA1M3K3MJx5pBCMrX1yl9D7HnARXC/N5Ie5VYwHM=
Subject key identifier:   0C:F1:95:3B:1B:8D:65:3B:E9:4C:E4:DC:73:B7:8D:C6:D2:A7:79:9A
Authority key identifier: F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
Certificate issuer:       /CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Certificate serial:       01962F065075CA0B412E3DF2DC08F9C2B5FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
Manifest number:          0BF8
Signing time:             Sun 13 Apr 2025 12:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:05 +0000
Files and hashes:         1: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl (hash: nF+J5qN9giNkylDBf/cEMEaej+7JLuXAT53LBvcwZYc=)
                          2: otWydKJIblYoFDAZjlf3bz3XaMM.roa (hash: xwlrdUyrXAa6g8e84xQqVsN9ku3EVyiSX1A/Nu5VNrY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:50:75:ca:0b:41:2e:3d:f2:dc:08:f9:c2:b5:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
        Validity
            Not Before: Apr 13 12:01:05 2025 GMT
            Not After : Apr 14 12:01:05 2025 GMT
        Subject: CN=0cf1953b1b8d653be94ce4dc73b78dc6d2a7799a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:18:fe:2c:20:8a:09:bc:f4:c6:11:95:01:8e:
                    e8:19:f0:64:d3:02:07:c3:61:a1:2c:94:dd:14:22:
                    51:04:a9:1f:05:a7:ed:66:dd:39:2a:9b:c9:3c:e0:
                    b7:2d:2a:2f:5f:2f:9b:7c:b6:42:2f:f6:0b:7f:48:
                    75:e7:67:f2:ff:ed:16:af:95:75:61:a3:3b:e6:2d:
                    0e:25:e1:3f:fd:32:52:60:20:88:c3:c8:16:f1:c2:
                    f5:a5:d0:00:da:8f:ef:cf:8c:77:c8:86:ae:65:78:
                    27:a2:38:a0:53:d4:3f:4f:5a:59:7f:de:1b:0b:be:
                    62:72:44:98:4d:28:b5:6d:cc:c7:67:b6:ef:2b:e6:
                    a2:ed:88:6c:48:9e:ea:b6:4d:5b:1e:18:36:c9:5c:
                    d4:a3:63:7c:bc:98:c7:da:2a:77:a3:47:eb:58:b2:
                    12:12:c6:fb:cb:1d:72:b1:91:5c:70:fd:2e:c7:e5:
                    bc:45:14:93:1a:dd:e0:9c:d3:5c:6a:18:aa:82:40:
                    31:75:8e:16:29:8f:a5:49:4c:16:17:74:fe:b7:8d:
                    82:32:34:c1:57:63:c5:97:ab:ec:62:bb:70:39:fc:
                    b3:0b:3d:f3:f9:1b:6f:de:20:23:9e:d5:52:50:0c:
                    48:66:08:90:d8:8a:2a:49:54:ef:27:19:98:6f:0f:
                    8f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F1:95:3B:1B:8D:65:3B:E9:4C:E4:DC:73:B7:8D:C6:D2:A7:79:9A
            X509v3 Authority Key Identifier:
                keyid:F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:be:cb:9e:b2:88:ed:7c:7d:66:5e:14:4c:32:f4:d4:89:40:
         28:4f:47:97:0d:25:9b:c5:28:e9:89:3e:f7:6f:44:f9:b7:28:
         c8:2e:9b:43:62:ce:bc:be:23:57:ba:05:6b:d9:d2:3e:76:b4:
         b6:30:93:7d:fc:ad:38:a6:d9:b5:75:d0:5b:92:30:bc:15:df:
         bd:4f:fc:d7:c2:70:f1:a0:e9:21:53:c5:a2:d0:87:0e:3d:2e:
         16:82:7c:41:9b:dd:6b:2c:bc:4c:34:4a:6b:f6:03:3e:72:bc:
         6b:71:5f:ce:ec:6e:e1:83:0a:58:07:0d:82:09:23:56:76:eb:
         cd:0d:d6:e2:e0:d0:66:da:ee:a0:16:cc:61:36:3f:6b:c7:f5:
         ea:ee:2c:92:cb:6e:4f:25:61:48:96:bf:42:11:a2:53:dc:8c:
         1f:00:e7:d5:d6:13:ed:5b:8a:29:00:0f:07:70:ec:22:a0:17:
         a8:d2:fa:f2:5a:0e:de:ae:d3:a6:5d:5b:3c:fe:d8:bb:95:d0:
         9f:14:36:1a:2d:1b:b2:b0:46:1e:5f:c9:71:36:eb:93:b9:ca:
         01:f8:2d:03:a8:a2:e1:3d:11:62:6b:f2:9a:71:b0:b1:e5:d3:
         cc:65:c8:9e:57:4f:72:00:82:ee:a6:20:a9:cd:a5:26:db:37:
         ee:98:5f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----