Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
File:                     j8Yziy6SHZEmxTYwPweMnruah1I.mft (raw, json)
Hash identifier:          2jqRXfJbwIrzvJHIAsr0zyy7gWVMYZkqYvCQi7adBcE=
Subject key identifier:   FF:E3:74:F9:D8:DA:FF:5D:96:15:C8:05:DF:43:E0:97:F8:D2:72:22
Authority key identifier: 8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
Certificate issuer:       /CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Certificate serial:       01962DF40E382A43AA2523B5996FD535855F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:31 +0000
Files and hashes:         1: E9E2NhUKJP_3TXPCgDM1hcFl3-A.roa (hash: aBze8FprGa3p4/CGvI/TFD3mAyVwA/i5ic5RvbopQHs=)
                          2: j8Yziy6SHZEmxTYwPweMnruah1I.crl (hash: Pf8OjKEmSqfq1gk0XeoNwXK0liepGBw0Xe9RfF265EY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0e:38:2a:43:aa:25:23:b5:99:6f:d5:35:85:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
        Validity
            Not Before: Apr 13 07:01:31 2025 GMT
            Not After : Apr 14 07:01:31 2025 GMT
        Subject: CN=ffe374f9d8daff5d9615c805df43e097f8d27222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4c:0e:1c:01:3b:70:d0:82:5f:d7:bb:d1:79:
                    78:7f:fb:03:5d:a2:84:66:9e:ea:2a:7d:4a:93:47:
                    49:a7:c3:f4:87:7d:f0:2d:e8:ea:42:05:72:22:7c:
                    bd:73:81:cd:8e:6f:2a:7b:3b:4a:7e:a5:49:f4:6b:
                    e9:7b:17:f7:a8:91:5f:ac:73:9d:4d:14:70:b6:60:
                    f4:5a:d2:71:08:55:c8:78:ad:87:5f:51:bf:b9:69:
                    f5:b3:c6:f2:46:d2:02:be:d3:03:e7:b7:e2:ce:26:
                    f9:5f:72:0f:6a:39:95:04:2c:3b:8d:ef:02:1d:f5:
                    84:23:f6:0c:39:59:39:39:13:40:1c:09:4d:95:64:
                    6d:79:fe:92:3c:b7:95:b9:4a:70:af:c1:9f:50:de:
                    0a:80:41:c3:05:da:92:1d:d0:41:22:d4:2e:ee:67:
                    96:28:3a:db:39:75:ee:89:a4:e3:1e:9c:4b:52:bb:
                    3a:49:71:99:90:72:eb:b8:bd:9f:a5:f8:2a:f5:0f:
                    b8:cc:03:f5:07:fa:0b:82:1f:a0:93:ed:c9:25:fe:
                    66:bd:38:ba:a3:ac:45:f9:ff:bc:71:d3:5a:c8:72:
                    77:35:de:98:93:04:9d:68:94:69:12:a6:9f:78:63:
                    b6:87:4a:81:39:67:0b:fc:08:74:e6:87:a8:0f:4f:
                    0f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E3:74:F9:D8:DA:FF:5D:96:15:C8:05:DF:43:E0:97:F8:D2:72:22
            X509v3 Authority Key Identifier:
                keyid:8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:1b:bc:b1:67:42:70:7c:bc:b5:e4:2f:d7:a2:72:91:a8:74:
         9a:80:2e:73:30:91:00:8a:64:e0:5e:ef:59:1d:a2:db:25:97:
         c4:f8:ea:88:38:27:93:be:0b:b7:d4:ee:58:c1:60:80:1b:99:
         d9:32:96:88:c5:67:61:a2:f4:2e:9c:03:f8:47:43:b9:94:6e:
         68:1c:23:c6:8f:25:7a:47:2a:7c:8f:b7:0f:ae:18:c3:ef:60:
         23:20:94:2c:bc:64:6d:94:37:46:53:66:32:22:2a:c0:c0:40:
         b1:f6:f6:73:0c:2a:9c:77:ba:80:a5:de:87:10:8d:c3:ff:12:
         90:b9:53:6d:63:62:20:9a:7a:f4:7e:48:26:ed:0d:b7:de:b2:
         dc:90:95:fc:30:d1:67:07:0a:0e:a8:b7:cf:df:17:87:fb:f1:
         29:7c:f5:dd:85:8e:8a:4a:f1:30:6a:2b:bf:02:a9:93:4c:aa:
         6b:74:ad:40:37:65:44:a0:18:41:42:08:1d:41:38:e2:8c:1c:
         2c:c1:0e:fd:03:59:e9:18:82:1b:aa:44:e1:ef:f4:ad:e2:2b:
         c7:ad:69:93:af:ad:f1:d3:3c:16:de:d0:70:dd:74:59:ae:72:
         9a:63:8b:66:dc:ef:55:cc:69:b8:c8:22:1a:7f:c6:0a:b3:b9:
         d0:e8:52:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----