Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
File:                     x8JN6ZEB-v33S8opP9bZUGDVCmM.mft (raw, json)
Hash identifier:          99ErvLe5OOP4c8pIxXyNKpfOyX3UupvOVlHir6eOkEA=
Subject key identifier:   CB:8D:11:01:5B:97:4A:27:7B:E2:59:7C:1C:58:D4:78:4B:07:22:01
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Certificate issuer:       /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial:       01962F74B03C7C5637392C0E353DFDA11D5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
Manifest number:          0FFF
Signing time:             Sun 13 Apr 2025 14:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:38 +0000
Files and hashes:         1: 6Cj8H-p47dvCNhMHuB2pJCnFujI.roa (hash: etPYOFcz4B7xl7Yvi1fe6awoP2aM1hrkcXjgzl1XW2c=)
                          2: iNe91R6y78p-QSDXxoxxAjDA_Og.roa (hash: HR8YO++Y/qB7B+dcbqN5/SgR3c8dd7aULLQGyyrd4j8=)
                          3: tK6dqORitjCE9QSeqzn0Dd8QVZY.roa (hash: d9AZ6zPbtFV6hygn8HjICm+c22UNHE83e16IdW/3Zl4=)
                          4: uHPtlU3qdVrOCAD4M6mdiGrDzqE.roa (hash: AeMGCTul+AJixElOuUQNIP59RKHExeTwQIkWiWRzSzs=)
                          5: x8JN6ZEB-v33S8opP9bZUGDVCmM.crl (hash: E7wtZYgnKyMO89ZBpMOQI2RzOXo4ioSXF8lgiE/Cjao=)
                          6: ydG33gjsDAOMifL-LMV8iBUmj5I.roa (hash: mGme2Sxc1/UzWWlnkXXzLuxU/TszYoE3oiJl3a+U4Tg=)
                          7: z131uKF1Jpc6EpB3kAHYRRM7XIQ.roa (hash: Z5tMUZHaMA8Bu87tPX511k88Z6BiQWZ5tSalbDOuIEw=)
                          8: zbII4RxH17JoDR9ukyJuiEde7IM.roa (hash: xBWfldiZFP31dGe7bTsuSEU+4Mx9LEr9W5jDRfUDGfA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b0:3c:7c:56:37:39:2c:0e:35:3d:fd:a1:1d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
        Validity
            Not Before: Apr 13 14:01:38 2025 GMT
            Not After : Apr 14 14:01:38 2025 GMT
        Subject: CN=cb8d11015b974a277be2597c1c58d4784b072201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8b:0a:62:4d:a7:ed:c1:53:e9:a1:af:6c:dc:
                    ee:5d:39:87:3b:bd:13:af:6c:03:28:60:01:d6:3f:
                    9c:a1:de:4d:8b:1b:71:1b:99:37:f5:4d:bf:38:65:
                    22:99:3a:a2:87:02:8a:9b:15:af:dd:35:ec:1a:61:
                    4f:70:0e:08:c3:58:9b:65:11:a2:b5:43:8b:35:dc:
                    f8:60:1e:c9:a3:44:13:15:33:fd:be:95:60:6b:0e:
                    71:4e:4c:f0:84:12:fb:7d:e4:cd:9e:40:ee:c6:96:
                    94:97:a9:d0:0c:2c:53:32:91:68:2e:82:69:5d:63:
                    bb:e4:32:b6:ae:76:1c:79:51:24:49:ac:bf:d4:43:
                    0f:4e:09:94:d4:17:3d:8d:bc:0d:f4:49:e5:a6:99:
                    84:37:e7:77:89:54:c9:da:11:41:be:3c:48:94:5a:
                    67:bf:7e:61:eb:94:73:0d:5e:6b:f2:3d:2a:cd:07:
                    ea:a1:b5:ee:46:d9:ba:23:83:f6:50:e9:bd:31:00:
                    89:d1:90:3f:85:f9:1c:b4:0d:0f:bb:78:a9:a2:a9:
                    11:af:c5:00:8a:5d:6b:c0:38:41:a6:34:f8:19:c3:
                    d0:93:22:32:d0:20:a4:9d:b8:6b:9c:b5:8f:01:15:
                    ec:c9:95:81:ca:72:da:1f:bd:3b:27:a1:7e:c2:5a:
                    d4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8D:11:01:5B:97:4A:27:7B:E2:59:7C:1C:58:D4:78:4B:07:22:01
            X509v3 Authority Key Identifier:
                keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:5a:85:8e:e4:be:1e:78:26:d8:96:e7:df:f2:15:5d:bc:66:
         06:3c:7a:e9:1d:43:94:c8:0b:6d:6c:d1:3c:ed:ab:d5:41:3c:
         21:0f:65:03:5b:dd:73:09:75:ab:6c:74:ae:f0:ff:db:9a:77:
         e0:e7:c3:68:e4:e0:c7:10:20:82:e1:b2:59:a7:d0:90:10:09:
         84:1a:24:05:ad:09:34:9b:10:d8:5e:b5:43:fd:7d:a1:4d:24:
         88:f8:b2:f6:80:2f:3d:45:1c:63:60:44:a6:60:88:f9:31:94:
         32:79:1f:64:a6:d3:83:30:1a:10:a4:2c:a3:b9:aa:ca:c7:dd:
         a0:dd:a8:08:d3:02:c1:b6:50:0b:6b:c4:40:67:1b:18:1c:0b:
         16:ab:20:a8:fb:46:93:6b:53:c5:02:28:e3:ea:61:76:68:93:
         01:a5:01:20:96:21:48:31:35:e8:12:a8:11:69:36:c8:2a:df:
         84:1c:e2:c6:0c:1d:b6:ca:97:04:79:fa:53:55:07:89:81:03:
         c6:45:65:18:26:e6:41:e1:34:cb:38:b3:cf:57:3c:35:b0:71:
         29:e5:de:27:f9:6f:79:8c:ae:41:8b:6a:c1:2c:ee:25:b5:ab:
         0d:01:51:74:a7:e7:87:20:3d:f3:92:ed:f1:98:d9:5d:f7:ae:
         4d:5c:1d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----