Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
File:                     8v_48bgcLGFPw-lOsXy6CUAhGgE.mft (raw, json)
Hash identifier:          SsZVPvYYRgr3AaWLJ4Z+71rQkqYUQuds3w3nr1tdoiA=
Subject key identifier:   8E:CB:80:AD:50:6E:2E:F3:F7:FB:29:D7:4F:D4:83:32:EA:E1:B9:11
Authority key identifier: F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
Certificate issuer:       /CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Certificate serial:       01962F06593CD61077884EF9FCAB65FB0606
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: 8v_48bgcLGFPw-lOsXy6CUAhGgE.crl (hash: fLYgIuEYLqMQSZ2K4Eyj5q569plvNcgCeMrtdz3t/hM=)
                          2: vf_PL7Z26am-bUWHqusGVLE57ns.roa (hash: lq/qQHwmZ7jgnqMZo6s1jASjE57LJ9Te+YbA+3H42GE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:59:3c:d6:10:77:88:4e:f9:fc:ab:65:fb:06:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=8ecb80ad506e2ef3f7fb29d74fd48332eae1b911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:af:95:97:4d:e6:7a:fc:12:3a:e9:22:ef:f7:
                    ac:e8:32:b8:83:dc:ee:ce:0a:0b:64:4d:ca:87:92:
                    ee:b0:3a:35:13:b2:a5:d3:a2:21:d2:d1:30:89:02:
                    1f:61:92:76:c9:50:cd:41:de:d5:41:ad:17:30:78:
                    72:b5:16:55:ae:1b:7f:2a:53:8e:a4:e1:bf:95:d4:
                    cb:d0:a5:9f:56:f7:6a:20:0e:0b:7b:4e:ad:75:b9:
                    15:31:f4:23:37:0f:5c:50:19:b0:e9:6b:b0:da:7f:
                    ca:b5:dd:00:55:fc:63:a9:20:8a:f6:e2:50:a4:12:
                    bd:54:a0:d9:9e:a7:55:22:7f:5e:95:c1:e3:59:8f:
                    6b:99:f0:42:0a:ff:57:3b:5c:e9:82:26:40:2c:c2:
                    e4:54:a3:df:10:70:3c:05:6a:1e:2b:91:47:95:4a:
                    13:8e:b7:f2:45:6f:7f:6b:77:a6:02:c3:bd:dc:02:
                    37:e3:d0:b4:24:3b:48:ee:ea:a5:4c:b7:d5:fb:cd:
                    fc:f1:34:3a:97:1c:01:b0:7d:d1:c5:a7:78:75:05:
                    2e:61:35:ac:d3:29:a8:49:c9:36:2d:e9:8d:1a:6a:
                    7b:db:f0:de:f2:6f:5a:0f:8b:4d:d2:b0:74:e5:07:
                    fe:69:c3:5f:e4:6b:a7:cc:4c:3a:24:ed:b6:ed:53:
                    b2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CB:80:AD:50:6E:2E:F3:F7:FB:29:D7:4F:D4:83:32:EA:E1:B9:11
            X509v3 Authority Key Identifier:
                keyid:F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e8:43:d2:0b:8a:5f:9f:af:40:75:57:ab:0a:ee:2b:91:ac:
         82:99:5e:1c:7f:d8:0c:78:e4:a8:58:ed:b1:f7:41:e5:f3:f4:
         64:11:e9:6d:47:9f:7f:3f:61:c7:70:78:87:37:2c:28:43:a4:
         46:75:25:bf:e8:e1:d9:f7:20:13:dc:61:59:8f:4b:13:38:e1:
         b0:65:0d:34:68:6e:a5:70:3a:ec:09:cc:52:c9:a0:d0:7d:18:
         4e:7a:a8:70:01:e1:c7:71:4c:de:ab:b5:4e:78:45:36:38:f1:
         84:7c:3f:1c:4a:8e:1a:ce:0b:1f:01:1d:8a:f3:68:80:34:9f:
         4e:1b:99:34:1e:f9:cb:6b:f4:ff:31:25:a6:58:79:d4:d1:27:
         c4:af:70:ce:df:af:61:23:36:b1:ba:e6:4a:9f:61:14:88:86:
         d6:f4:b4:ba:79:f4:7e:6b:03:dc:84:5c:ed:59:91:b4:cc:e5:
         24:6b:d7:3f:39:77:d2:61:31:d5:31:38:57:ba:ef:4a:61:76:
         73:75:0e:f5:ab:b6:d6:64:b3:6c:90:2c:39:35:40:78:d2:a6:
         b1:4c:8c:67:31:ff:e5:83:97:77:d9:7c:9a:9f:e8:0c:48:f2:
         9f:b6:57:d3:05:1b:e4:9c:a4:c4:95:12:d2:3b:36:22:7f:f0:
         90:76:04:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----