Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
File:                     i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft (raw, json)
Hash identifier:          gV5cu8Zl0g2gL2DC7Ed5R+b1sJTeXxN0oRHnlBJgMGU=
Subject key identifier:   96:97:EF:ED:8E:16:99:F2:BD:D5:A6:75:A5:6B:F3:B9:D3:ED:71:BC
Authority key identifier: 8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83
Certificate issuer:       /CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
Certificate serial:       01962E619A7DC6B7E881D8AFDE0ADC1C5E6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 09:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:10 +0000
Files and hashes:         1: di6vtJn17ke553wiZoaxDGK1MLE.roa (hash: HpCMH1Ia0lvZ8f3O26OMSYPbId0TPu+1abwCSdtco9A=)
                          2: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl (hash: eRV8vH1tv44vn3yp7NuI4DO+2QhUdFoGL3D86zGXm7g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:9a:7d:c6:b7:e8:81:d8:af:de:0a:dc:1c:5e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
        Validity
            Not Before: Apr 13 09:01:10 2025 GMT
            Not After : Apr 14 09:01:10 2025 GMT
        Subject: CN=9697efed8e1699f2bdd5a675a56bf3b9d3ed71bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ad:c8:e9:86:4c:74:b2:ae:01:74:14:53:62:
                    52:fc:db:7e:ec:ad:c7:31:64:36:f1:51:62:b8:f9:
                    35:fd:48:98:47:ce:42:db:23:11:83:2c:e2:36:d5:
                    ca:54:26:86:a9:e7:96:47:28:73:c5:c1:4b:b5:e6:
                    45:ba:86:b4:18:43:43:81:fc:d9:d4:19:a5:77:64:
                    17:94:04:c7:23:ae:61:76:c1:37:e7:fa:d5:ea:f5:
                    b2:5d:6b:24:0f:30:ee:37:56:79:a9:d0:2e:21:c2:
                    c0:b4:51:91:e3:f6:05:7c:05:cd:6a:f3:0f:33:88:
                    da:d6:89:bf:10:56:b4:e0:38:b9:fa:f1:b8:0c:d4:
                    2b:00:30:c8:42:59:15:5d:a0:2f:64:28:f7:ba:33:
                    0e:24:f6:cd:04:ee:53:28:59:80:21:65:e2:d2:13:
                    ff:4e:4d:ce:49:7d:cb:5a:c1:ba:a8:17:d6:5a:86:
                    5f:3e:65:bb:eb:e1:7f:66:91:bf:f1:15:05:04:4b:
                    f2:0c:cb:de:d2:d0:40:6b:a4:c1:6e:32:4d:8b:e3:
                    e1:cf:a3:55:5e:26:ee:b3:e2:5c:89:2a:11:4b:78:
                    f4:1c:ae:78:8a:18:1e:30:a0:e3:93:47:65:a8:0d:
                    c7:44:ef:bb:4b:f1:37:d8:9e:18:e1:6f:b2:67:45:
                    f7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:97:EF:ED:8E:16:99:F2:BD:D5:A6:75:A5:6B:F3:B9:D3:ED:71:BC
            X509v3 Authority Key Identifier:
                keyid:8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:af:73:65:3d:34:74:6e:9b:15:bc:40:39:56:6a:0a:23:14:
         4a:12:d5:70:fb:c2:88:78:bf:87:51:20:bc:ad:72:3c:35:d6:
         0f:e3:6a:ec:38:d0:62:d9:06:b4:21:20:4f:40:36:6c:8d:98:
         a4:31:c6:53:32:b9:c3:1a:25:62:90:f4:d7:97:9a:db:66:d1:
         87:fd:55:82:1d:a0:4a:6b:d5:d0:5c:d8:db:a7:11:f7:ed:9c:
         d1:fd:84:d7:8c:35:5a:3b:ca:87:7b:a9:10:67:38:30:de:11:
         54:a0:6e:f5:bc:ea:d6:2f:08:ad:15:37:76:fd:7f:87:a4:7a:
         80:f3:f3:c6:b7:9d:0d:ff:27:a2:57:ec:0b:74:6b:83:63:43:
         8a:7f:ff:71:ac:05:67:e6:3e:96:ac:95:a2:f4:f5:1e:ba:d0:
         eb:80:78:2f:6c:3e:46:2f:25:39:02:eb:19:60:c2:6b:30:88:
         51:90:4c:03:21:8c:86:f0:20:f6:7f:e1:ad:e9:55:3d:7c:72:
         05:64:13:ca:1d:3c:44:9e:8e:fc:1e:9a:26:ff:db:cc:bc:5c:
         57:6f:8d:27:9d:f6:6d:23:0d:40:31:39:14:d2:8a:db:56:f4:
         cf:df:83:bf:dc:da:fa:ad:01:03:93:63:66:40:48:e5:58:09:
         bf:41:22:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----