Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
File:                     8xDFDSzIe9v6W7URoYoid7oAumg.mft (raw, json)
Hash identifier:          7BC5ZOl+SRVF5AUM14k2fCY5yveNC1XVTeBAaLmSxYQ=
Subject key identifier:   D5:B8:DD:EC:C8:AF:4F:00:8C:5F:91:73:28:D9:CB:A8:68:D0:97:09
Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
Certificate issuer:       /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Certificate serial:       01962F3D7AC35EAB003DB64CEFEE25D79592
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
Manifest number:          115E
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: 8xDFDSzIe9v6W7URoYoid7oAumg.crl (hash: 8M6OQxMNaJYK4iNs+SkAPRhxvHWkGaXtSvrImPzA/xM=)
                          2: xInS4OBZE4XZhCIYPtcEJ4L0sW0.roa (hash: KkBHzYhuSu08Rz0qev1AtQ0vsja7TfnwTOncPO/urxk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7a:c3:5e:ab:00:3d:b6:4c:ef:ee:25:d7:95:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=d5b8ddecc8af4f008c5f917328d9cba868d09709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f7:29:d2:a0:b5:a8:9a:5f:8c:a0:e5:f3:33:
                    e2:9a:5e:3d:91:e4:af:6d:42:19:af:cb:48:ff:70:
                    04:d2:ba:97:7c:b5:f6:bc:c8:13:28:5a:e1:c5:78:
                    3f:22:b3:34:84:5e:4d:2f:d4:a9:26:23:52:0a:c4:
                    11:3c:bd:ba:75:4e:d3:8a:b0:d8:af:94:3c:e2:ba:
                    a8:9b:b7:d8:57:4c:d7:d0:10:21:e3:c4:0d:15:f0:
                    5a:2d:50:0f:5e:6a:8b:3a:10:a6:0c:fa:b6:a4:0e:
                    3d:d7:01:e0:c2:3a:53:f4:a3:f0:75:a9:12:39:df:
                    bb:04:48:45:41:6a:11:e3:0b:8f:b5:53:f4:63:f3:
                    c9:cb:c3:05:d3:20:ca:23:de:52:2f:24:55:94:e8:
                    ef:3e:61:e6:73:89:0d:00:76:29:e7:11:f1:13:e4:
                    00:e6:c0:89:1d:5c:73:1a:6a:45:71:d4:02:79:14:
                    c7:c9:40:4e:52:58:be:a3:c8:c2:89:8b:52:a4:ba:
                    81:4d:8d:08:94:8f:34:cc:b6:cb:39:f7:34:12:c2:
                    88:04:16:a0:a0:10:2c:9d:98:12:08:e1:81:0e:09:
                    02:d5:95:31:a8:3e:aa:e2:b3:3c:e5:a6:36:f3:15:
                    51:ad:b5:f6:d6:7a:a9:74:a7:cd:1f:de:a6:4c:78:
                    1a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B8:DD:EC:C8:AF:4F:00:8C:5F:91:73:28:D9:CB:A8:68:D0:97:09
            X509v3 Authority Key Identifier:
                keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:57:ce:b9:16:fa:81:3b:35:1a:06:91:22:3e:ec:31:d7:ab:
         d7:b3:0a:60:d2:96:b7:6d:61:8c:55:e0:1e:5f:e0:05:e1:53:
         cb:90:6b:84:16:24:ca:39:ea:52:61:f8:36:32:c6:33:2e:f1:
         d3:ef:8c:ef:cb:e0:d4:22:b9:c6:0a:39:5f:f9:6d:30:65:5e:
         be:c7:ba:5a:d0:81:be:8d:98:af:b9:2b:1d:23:13:b6:bb:d4:
         1a:63:78:93:30:f8:cb:cc:f9:1e:71:6e:e3:01:d2:55:c1:49:
         f2:c5:e4:d4:30:96:90:31:58:9c:14:08:a1:41:d6:d0:78:ae:
         52:f2:f0:62:54:5a:79:2b:d7:04:fb:4c:94:d6:47:94:ea:e6:
         ee:39:9c:26:11:e4:6b:af:46:77:bb:4d:15:0f:15:d7:55:28:
         c0:94:92:0f:64:da:6d:91:07:90:27:99:c5:82:80:0d:c0:f5:
         46:fa:9e:20:e0:ea:17:21:78:ea:45:af:d4:f4:72:87:a8:ec:
         04:fb:c3:e0:f6:d7:29:41:dc:31:ee:7f:41:fd:f4:3e:db:64:
         ef:cd:64:01:14:82:b9:5c:83:fb:78:02:a0:9a:33:85:43:cc:
         fd:3c:d3:92:5f:5f:f2:2f:f2:92:12:fc:d1:a6:28:a5:c3:d5:
         72:48:76:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----