Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
File:                     8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json)
Hash identifier:          aAh5V51D5HdzA5zdhAFMUSMrMczsnZCWr0hcnlc08E8=
Subject key identifier:   50:47:96:51:71:B7:0E:54:31:E3:B4:EA:20:EB:60:A9:57:1C:13:C8
Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Certificate issuer:       /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Certificate serial:       01962E991F332A3E427C0EAC36A9C66A2FF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 10:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:48 +0000
Files and hashes:         1: 0vpioq7e7IBvU0f7txi-wExHAPw.roa (hash: lCvUWIuH8RdERCkztaN1NhfYOchJDmj9ywnhD1WG0qs=)
                          2: 1-t-clxlx4vHi76xBwGIh0Y5orug.roa (hash: WGphFqEzeHYQfivrVaHRtOvOzzhN/PDKxrZlm3FuIDA=)
                          3: 4CCEdgNV-fGWUC_aGHxQwbUsOKQ.roa (hash: zTRmkFZkHzwf+QYURy5/v5Sjyovq0HLSmOwtNQ48L/c=)
                          4: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: ev43BCIuo5Ig6Zier0jWpgeGzzIK7KTBljVXx3f9Qx4=)
                          5: 9oOMh0CjqydkdSKEbK66nXXsu4E.roa (hash: qQJNJWud5A2R6q9LElC5WdsYynVdzga12kQWDH61mWo=)
                          6: AoQYABlbiRY1s0Gu3McHV58zrpk.roa (hash: 9zDAXKdytFg/3YwoUton7cniFW2Ja9ArE5tJ2skkn+c=)
                          7: OdGF_e17lYBOCmXmsk6hkXdf7b4.roa (hash: mFKHbPekFFY75D3Eu+1fU9mzEnOZ9+rJaeHup24zW3Q=)
                          8: PFyByii-LGzRSy90jiJ5mw1207A.roa (hash: gIS/3e5ejAqBGpUPti4f7RxoNdrem0KAE6vwjMubh3s=)
                          9: Qkq_75MjyviWe2NqgT_-Mwn9gnM.roa (hash: wJb9fi2vDIIR6voDYxFFRDUWuFkEQa98zP1PFmkzpXs=)
                          10: ScwFXX2rYjT7naQciVMaotJ-UfM.roa (hash: X8Vp96ZEvVObF+OkcOx9P04g9HBNU6my6Pc/b9LR72Y=)
                          11: rh7_88ku0NVEacOTg4kYRNyhUIs.roa (hash: Uz863y1lKUf+O+OGV8gNQDxIpi4RBI83I9R9FXt5Xp4=)
                          12: u37q8oxj6d2YnoBLY1VE3CqS2g0.roa (hash: QV9HVDjMgl4TBfOFPjFKF+CTfrUEm6XmvkI/fobJGaM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1f:33:2a:3e:42:7c:0e:ac:36:a9:c6:6a:2f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
        Validity
            Not Before: Apr 13 10:01:48 2025 GMT
            Not After : Apr 14 10:01:48 2025 GMT
        Subject: CN=5047965171b70e5431e3b4ea20eb60a9571c13c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8a:44:59:37:be:10:1c:d2:d9:5b:11:77:07:
                    4f:22:21:4d:5c:f5:c4:25:c8:2c:97:b5:17:05:4f:
                    f8:69:f6:3a:54:12:84:ff:f4:81:81:c4:ca:ad:4d:
                    95:ea:88:3b:23:54:9e:50:78:30:84:ce:fd:23:90:
                    38:a2:a0:54:7d:12:02:79:30:86:97:05:eb:7e:e2:
                    82:14:3e:47:4d:a5:82:d0:23:05:87:86:86:19:f3:
                    80:3b:8b:89:a4:e1:b1:e5:94:e5:46:6e:5c:71:d6:
                    68:74:75:de:bb:eb:c5:b5:c5:07:08:e2:fc:2a:b1:
                    81:1e:1f:2c:c6:99:83:0a:0c:42:d2:4b:c9:e1:f3:
                    53:d3:86:75:71:8e:25:75:35:05:d1:ed:df:de:05:
                    c4:bb:4c:b2:2b:72:fe:18:7a:1e:e4:2f:71:25:80:
                    3c:42:5a:02:34:10:40:a3:93:b2:0c:8a:00:92:de:
                    b4:b6:d7:13:b8:e5:83:cb:11:f8:f0:64:85:15:4f:
                    de:9a:6e:73:9a:b8:05:72:31:37:31:06:a4:ec:e2:
                    7b:2f:be:ae:fe:9e:9b:a2:e6:47:9e:7f:2b:c5:59:
                    cd:28:b4:13:3f:2a:45:cd:2d:5c:ec:a0:1f:bf:28:
                    03:47:bc:80:87:48:0f:81:07:df:ac:b9:e3:d9:4d:
                    83:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:47:96:51:71:B7:0E:54:31:E3:B4:EA:20:EB:60:A9:57:1C:13:C8
            X509v3 Authority Key Identifier:
                keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:88:4a:32:65:28:9f:9c:32:0f:ba:1f:c8:da:0a:5e:e1:c5:
         10:a0:e7:10:a8:9e:db:d2:15:4d:8b:b0:bf:95:4f:7a:16:79:
         87:35:39:9b:de:c7:9c:ae:88:23:f2:6a:6e:6e:fd:02:4c:44:
         88:46:c4:28:88:d1:13:ef:f5:33:ef:d0:69:31:0a:8b:93:64:
         01:1b:ee:82:28:bc:a9:f8:5c:22:b0:fa:da:41:4b:84:a2:e2:
         49:4b:8b:6c:27:f3:ae:f5:77:c7:22:27:f2:ea:77:fe:46:da:
         60:99:ec:6e:6d:17:64:ef:d9:df:b3:51:60:73:c4:b6:55:bd:
         5d:d3:ca:6e:8e:b8:39:ca:55:9f:92:8a:73:b9:ea:59:92:17:
         fc:f5:3b:d1:d8:24:61:97:e4:34:cb:13:59:9b:7d:6d:c0:c8:
         65:75:08:a7:4f:26:0c:ad:51:e9:e6:40:d8:f3:d6:64:57:fa:
         e7:ef:3d:7f:08:64:6b:ce:93:b1:e8:dc:f7:cb:3e:a7:aa:41:
         52:b6:59:4b:d8:62:74:71:7f:1c:e0:59:d7:71:9f:76:c4:b2:
         6a:b6:26:f2:ac:7d:b0:24:f2:15:0e:c1:8a:20:3f:d0:c3:66:
         67:b7:f3:de:2b:10:3c:73:92:c4:0f:7b:dc:86:eb:0e:1f:fe:
         54:3d:9d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----