Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
File:                     8hWid5SXEbLAHNxmnkDhcTlYVbs.mft (raw, json)
Hash identifier:          DAvcsSTDuPoq7QNiDELpJ0edGyIK/+6sehJU+ruU4Vk=
Subject key identifier:   2A:47:68:EE:12:BB:F9:6A:AF:E9:27:2A:2A:11:2B:8B:12:2C:85:84
Authority key identifier: F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
Certificate issuer:       /CN=f215a277949711b2c01cdc669e40e171395855bb
Certificate serial:       01962F74E788BE319E818D96E76CE1B76FFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:52 +0000
Files and hashes:         1: 8hWid5SXEbLAHNxmnkDhcTlYVbs.crl (hash: ZQwzgq+J8RQjg8vr6CO1WHdgtNVit0+ECglhuBSWm1E=)
                          2: e9rn6bxSsUmtvRo7sJ4lEtK6S2Q.roa (hash: lsA08XTxVJOQQYnez6W7EOdFIkHihRjO9Y7qKfekirQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e7:88:be:31:9e:81:8d:96:e7:6c:e1:b7:6f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f215a277949711b2c01cdc669e40e171395855bb
        Validity
            Not Before: Apr 13 14:01:52 2025 GMT
            Not After : Apr 14 14:01:52 2025 GMT
        Subject: CN=2a4768ee12bbf96aafe9272a2a112b8b122c8584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:86:91:3d:a0:15:27:bf:7f:a2:a1:84:e7:77:
                    d9:e0:61:49:a4:3e:b9:66:5e:5e:69:fb:57:c1:cb:
                    55:28:8f:25:10:c3:f5:9a:75:11:42:a4:eb:e7:30:
                    88:ad:72:dd:2d:90:7d:d2:af:4d:f1:41:70:1f:55:
                    a1:18:ca:31:08:58:78:79:1f:76:c9:0e:b1:b9:ec:
                    6b:27:d2:41:d8:fd:d8:69:66:94:2b:b8:cb:fd:3f:
                    c6:41:e8:4a:e9:38:d7:b1:ec:fb:3e:20:a7:87:b4:
                    97:aa:45:2d:d0:af:e6:58:b8:73:72:34:6e:1a:2c:
                    72:2b:45:6c:ce:c5:ea:f1:98:ca:da:bd:20:81:bc:
                    30:34:3b:dd:d9:79:be:a7:d0:e9:c7:56:a6:7b:5a:
                    53:10:47:a7:df:f7:a7:94:62:c2:a4:2c:10:4d:c7:
                    84:b1:c3:b4:d2:80:b8:0b:68:55:2e:2b:c9:8e:75:
                    14:89:8d:af:9e:68:3b:f4:52:b1:d7:e6:ad:1c:d5:
                    7e:ea:52:09:c2:e3:20:78:69:44:e0:35:04:95:01:
                    c2:4e:d8:0a:3e:fc:82:7c:da:2e:e7:9f:fb:08:84:
                    b5:f5:44:a7:92:ac:30:c2:77:63:f2:e8:9e:1f:85:
                    74:37:8d:e8:33:4a:70:5f:3d:64:99:75:f0:7a:93:
                    6d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:47:68:EE:12:BB:F9:6A:AF:E9:27:2A:2A:11:2B:8B:12:2C:85:84
            X509v3 Authority Key Identifier:
                keyid:F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d2:68:62:5f:40:e7:40:a2:cb:dc:aa:59:f2:b9:e9:ea:04:
         60:e2:90:e4:25:ef:df:ef:22:5e:42:0f:04:61:ed:bb:36:61:
         c1:c6:ec:59:d6:0d:84:68:a4:6a:ba:da:3a:ad:6a:d5:7b:88:
         a8:fc:71:dd:2e:01:c2:1f:a4:7b:2d:32:3f:8c:69:a5:6e:0a:
         41:34:23:f2:6c:ff:bb:a1:cb:c4:63:d0:1a:c1:9b:54:b2:1f:
         a1:ea:11:a2:1f:62:3e:c0:f5:9b:a5:7c:26:63:28:df:44:cc:
         e4:30:09:c4:a5:95:d3:ed:2e:e0:66:f7:5a:c2:42:c4:25:4e:
         c6:58:74:72:a1:33:9a:eb:b4:10:1a:9d:75:7a:32:06:b5:eb:
         ce:6e:ae:f9:79:93:9c:5d:5c:6d:a7:df:96:c0:55:83:30:20:
         45:ca:50:12:ec:6a:f5:04:28:a5:fd:1b:73:63:93:e0:2d:0d:
         75:f1:32:47:f3:0b:27:cb:f0:8f:c2:69:95:e1:4c:8c:0f:74:
         b5:e2:45:c2:4a:52:54:61:7e:f5:ff:4e:5a:05:6c:8f:5e:47:
         e3:f3:aa:4e:36:a7:2c:80:99:2a:ba:c6:8a:b1:03:ce:49:ce:
         d2:f3:fe:47:d7:0b:ae:02:78:f7:d7:3d:36:94:12:41:45:55:
         32:9f:ff:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----