Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft
File:                     i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft (raw, json)
Hash identifier:          rMGKPzfGnR34GZGZ0k2Jv1C9L5ZRMKYbr5AaBHl1YIU=
Subject key identifier:   A0:54:53:D3:70:E0:CD:A8:49:52:0A:8C:18:BC:A4:3F:2F:5F:8F:6C
Authority key identifier: 8B:C3:94:8D:8B:93:A2:1E:6D:57:D9:C6:55:4D:5E:DD:10:7D:09:AF
Certificate issuer:       /CN=8bc3948d8b93a21e6d57d9c6554d5edd107d09af
Certificate serial:       01962FAB492BFD3DC07CDB9A77B207FDEDFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i8OUjYuToh5tV9nGVU1e3RB9Ca8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft
Manifest number:          EC
Signing time:             Sun 13 Apr 2025 15:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:16 +0000
Files and hashes:         1: fvjwad8hv5M8RT1bW6F3smOFB2Y.roa (hash: at0gl2Sa+um/oWDDDgR4biQkEbCFJi5QlnnXaGwjc0g=)
                          2: i8OUjYuToh5tV9nGVU1e3RB9Ca8.crl (hash: lCz8ntzwdH58bg8XcN14sH/4z05ZqKn7V9xIvqc1+wc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:49:2b:fd:3d:c0:7c:db:9a:77:b2:07:fd:ed:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bc3948d8b93a21e6d57d9c6554d5edd107d09af
        Validity
            Not Before: Apr 13 15:01:16 2025 GMT
            Not After : Apr 14 15:01:16 2025 GMT
        Subject: CN=a05453d370e0cda849520a8c18bca43f2f5f8f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0e:e8:3b:b8:cb:e6:78:50:00:b3:8c:32:57:
                    02:7c:87:20:f4:a6:74:1c:88:07:c7:df:0f:25:b2:
                    ea:bd:b7:71:29:e2:9d:eb:b7:6b:40:65:f7:0b:ca:
                    d4:fb:6e:a4:cc:0f:cc:12:a0:fd:2c:95:a0:68:a0:
                    7b:64:71:42:49:cb:1c:d4:79:9c:9a:13:9b:d5:a8:
                    d5:d9:16:d4:46:93:bf:d3:cc:64:6c:d1:1c:25:df:
                    45:93:b7:4b:3e:c1:29:ab:41:b0:4e:53:65:d1:55:
                    b8:38:e3:c0:04:e5:05:7e:1d:6c:77:1e:a1:8d:7e:
                    d0:fb:c0:b4:ea:76:ca:b6:73:43:ca:66:da:28:88:
                    8d:89:66:f4:50:7c:5f:25:8d:1b:f0:fb:96:df:b9:
                    d6:3c:bc:e8:1c:48:f2:1f:96:c2:c2:17:49:62:9f:
                    2c:ca:39:c4:38:b7:76:fa:d9:fb:02:96:8e:c5:cb:
                    fc:8c:77:ba:5c:58:8d:38:3a:3a:c9:47:29:d7:1e:
                    5e:ff:9f:02:b5:39:39:8d:a2:89:49:82:96:f2:92:
                    e5:06:d4:97:58:29:fd:ca:08:fe:5c:90:a8:40:f1:
                    70:ba:c0:5a:d0:ac:a4:de:95:0f:17:5a:8b:a7:84:
                    57:00:f6:36:4f:40:4f:e4:b8:cb:66:5c:5e:f4:10:
                    a7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:54:53:D3:70:E0:CD:A8:49:52:0A:8C:18:BC:A4:3F:2F:5F:8F:6C
            X509v3 Authority Key Identifier:
                keyid:8B:C3:94:8D:8B:93:A2:1E:6D:57:D9:C6:55:4D:5E:DD:10:7D:09:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8OUjYuToh5tV9nGVU1e3RB9Ca8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:8a:e4:15:9d:b3:48:f4:ff:ee:06:4e:c3:95:fb:bf:9a:19:
         9e:f5:f6:07:5c:7b:e0:fa:e6:c6:ac:c8:95:2c:ab:40:7f:3d:
         7e:89:58:5e:a7:80:c7:4d:8a:ad:46:9b:9f:fd:28:f7:b3:05:
         0b:47:0c:31:20:6f:da:f6:75:52:ab:59:5b:68:fd:c5:e0:c4:
         be:a3:5f:17:75:dc:db:3b:c8:d8:3b:07:1d:d0:93:b1:81:6a:
         67:26:22:a7:1c:b7:fa:72:34:1f:a2:de:8a:03:24:cf:c2:17:
         89:57:aa:2a:ed:dc:6b:b4:48:9c:68:1d:63:e0:00:54:33:a9:
         7f:89:7c:e8:ae:60:2c:be:7d:c8:f4:6b:ab:a4:58:d1:4d:16:
         30:db:79:f1:69:05:7c:99:fb:99:fd:8c:3d:fe:74:a9:d0:b2:
         f9:8d:7e:50:65:ae:87:77:07:26:d6:54:c1:5d:43:99:54:54:
         63:e7:65:63:65:41:27:bf:6b:f9:50:f1:8d:2d:58:aa:b5:3f:
         7e:0d:d6:a3:6a:2c:51:c8:5e:3f:71:4f:e2:90:b5:2d:f5:ee:
         c5:88:39:df:aa:c1:c0:51:08:f8:b0:60:30:75:48:5d:e4:dc:
         a0:f1:58:c6:b2:8d:7d:ed:e9:cd:49:97:3b:5a:9b:c2:a3:89:
         05:6c:28:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----