Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File:                     hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier:          wCd7E1K5J5QpXpLXmyKZInc/ssHY8B08bYjoX8+FOIE=
Subject key identifier:   38:1E:2E:B2:45:3D:B8:7A:00:C8:24:B5:99:34:E4:63:FB:1A:96:6F
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer:       /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial:       01962F06B51B1CFC5F59278BA9ACECFC839D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number:          106E
Signing time:             Sun 13 Apr 2025 12:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:30 +0000
Files and hashes:         1: eYEds7FDx_xUoPL2I316_VuKY8Q.roa (hash: 6jycAZRy3tzHGHbqvOTBaF0biLwY1IgSfYJO3j2HlNo=)
                          2: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: sZ34+B38jEOwIutju9cWoG0+7AaWkmZSUP92W8UnXlg=)
                          3: zDK4uAw5mPfAHDc_-CPlpx-pNLs.roa (hash: FqisInA8WAgK5pDKePE9gltA7tZisv2Ptzza8Sx9lYw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b5:1b:1c:fc:5f:59:27:8b:a9:ac:ec:fc:83:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
        Validity
            Not Before: Apr 13 12:01:30 2025 GMT
            Not After : Apr 14 12:01:30 2025 GMT
        Subject: CN=381e2eb2453db87a00c824b59934e463fb1a966f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c6:94:65:73:10:e2:18:e9:d5:aa:31:d1:88:
                    fb:e8:bf:6b:28:10:39:bb:26:57:90:aa:a4:cb:0d:
                    c7:53:88:62:d7:e9:13:6d:38:8c:67:ab:42:fe:d1:
                    df:85:36:a7:be:62:71:6b:6e:2c:f7:03:8b:d9:0c:
                    95:a2:96:f1:d2:d7:d3:fd:79:c2:bb:78:ff:d3:cb:
                    62:dc:3b:76:07:e4:fc:74:59:09:93:95:f4:97:7f:
                    07:c3:08:d3:a3:2f:ca:47:d0:b2:78:01:f4:6b:7a:
                    e3:e9:51:d8:19:cb:10:c8:5d:75:35:f9:e3:3e:38:
                    e9:19:0e:dd:d3:fa:a3:e3:00:2b:18:cc:a0:8c:d9:
                    9d:0b:45:3b:46:43:14:f0:23:77:a9:d0:03:70:f3:
                    3f:69:81:df:ab:d8:da:c2:19:b1:83:da:ef:5f:6f:
                    8a:a0:10:62:06:03:8e:58:78:41:6c:59:e1:a1:60:
                    4c:b7:20:ef:04:48:c6:c8:9e:03:34:d6:af:20:55:
                    12:53:0c:31:3d:0e:37:94:4b:12:d9:09:42:64:f6:
                    d4:b4:cf:d5:5f:27:dc:c3:8e:08:82:58:db:26:b4:
                    c4:e6:cb:3b:11:4c:0b:a9:2f:a3:49:8e:2c:de:93:
                    e4:fe:97:99:e7:1e:66:28:b3:80:23:13:7a:fa:c9:
                    74:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1E:2E:B2:45:3D:B8:7A:00:C8:24:B5:99:34:E4:63:FB:1A:96:6F
            X509v3 Authority Key Identifier:
                keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:8f:5b:03:5e:d8:54:05:9b:c8:12:d2:cc:6e:43:1e:68:97:
         d1:23:2b:1f:c6:a7:11:3a:dc:81:9c:7b:db:0c:e3:3e:71:65:
         36:72:86:a5:16:3a:ca:73:9f:40:d0:04:97:8e:03:10:a6:44:
         8d:c4:d3:08:85:96:04:66:bb:4e:0a:07:ae:88:2e:02:38:87:
         67:7e:9a:8a:7c:49:c2:a8:45:e0:a3:f9:c7:a6:b8:45:1d:54:
         00:f9:43:6b:32:c9:f7:87:de:08:64:3e:4c:0e:fd:49:0e:78:
         44:ba:a8:08:1c:a0:09:a1:93:62:f4:33:cc:a9:81:47:da:f7:
         6c:d9:94:7d:f1:26:28:37:35:05:2a:cd:f0:3a:99:f2:30:14:
         d9:3c:aa:f3:34:4c:bc:61:7d:ef:53:56:76:40:94:aa:1f:57:
         69:ec:86:c8:b0:88:b3:43:75:c4:3d:2c:f6:11:48:af:a3:77:
         ee:49:a5:86:06:a7:30:59:65:dc:f7:9b:81:d9:c3:09:b5:d0:
         85:26:7b:c1:f7:f7:f0:fb:94:b3:f9:09:2b:d3:29:b7:17:ad:
         8f:47:81:80:a4:2d:d0:1c:fc:53:c3:e3:d3:74:71:1e:49:2b:
         67:32:02:15:4e:2e:00:c5:4f:36:15:7b:9c:cc:ac:7b:48:f6:
         9e:df:7b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----