Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.mft
File:                     toF3Ytn8jxGwHPUjS25DHPvsG80.mft (raw, json)
Hash identifier:          8XEItyEojwElb2zHzTydcsV0OAZwUu4ooEq36tG5x64=
Subject key identifier:   08:91:5B:B8:58:CB:A1:36:FF:44:98:77:E7:36:18:74:2D:81:2C:95
Authority key identifier: B6:81:77:62:D9:FC:8F:11:B0:1C:F5:23:4B:6E:43:1C:FB:EC:1B:CD
Certificate issuer:       /CN=b6817762d9fc8f11b01cf5234b6e431cfbec1bcd
Certificate serial:       01962ECF6C5678E5F8F03BFA67DA8658BD97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toF3Ytn8jxGwHPUjS25DHPvsG80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.mft
Manifest number:          084A
Signing time:             Sun 13 Apr 2025 11:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:07 +0000
Files and hashes:         1: iFeMzfeEdL5eLiPhJVZH9fOR9os.roa (hash: Hluf44L3umjh9a1sEhuox24mM0+jKftFeuevrlqeW6M=)
                          2: toF3Ytn8jxGwHPUjS25DHPvsG80.crl (hash: 9mgI4ZfS7oH86NHzLfs/Y1WBTE2PmEms9ZIIxpNTN0k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6c:56:78:e5:f8:f0:3b:fa:67:da:86:58:bd:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6817762d9fc8f11b01cf5234b6e431cfbec1bcd
        Validity
            Not Before: Apr 13 11:01:07 2025 GMT
            Not After : Apr 14 11:01:07 2025 GMT
        Subject: CN=08915bb858cba136ff449877e73618742d812c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:17:25:60:bd:c8:8a:87:b2:2c:5d:c6:1c:8f:
                    3d:40:28:18:41:f6:a7:aa:da:19:0d:fd:a0:0d:18:
                    e2:be:fb:23:10:d3:6d:39:a6:12:24:55:c3:7b:bf:
                    0f:9a:99:0b:6c:6e:67:5f:41:0f:df:9f:20:f8:c2:
                    af:9b:db:b1:e8:d9:fd:72:1a:ff:3e:be:fe:0f:b1:
                    ac:b1:98:e8:94:44:ca:5e:6b:0c:55:8e:73:83:6b:
                    b3:1f:6a:89:b6:fe:c4:26:f7:72:af:fa:c8:c6:8a:
                    fd:ca:92:bb:ce:8a:63:7e:dc:0f:5a:89:2a:04:bd:
                    08:f2:bd:f5:80:92:59:59:4d:08:5b:8d:ca:10:74:
                    75:74:d3:01:44:56:77:2d:73:33:40:76:66:fd:1e:
                    b5:fc:6e:5d:e2:97:00:cd:56:40:35:92:01:61:33:
                    c7:82:af:3d:30:0c:87:85:cd:51:4a:8a:e5:2d:89:
                    4d:d7:04:ac:c3:9f:98:76:d5:d7:b1:59:04:50:18:
                    fd:8c:57:d8:5a:08:ed:6f:14:70:d1:02:ed:9e:fa:
                    be:85:3f:ee:2a:92:29:df:34:ae:d4:af:29:6e:91:
                    86:d2:bd:66:15:12:5b:f5:2e:32:e3:aa:dd:51:ca:
                    f0:2c:05:86:fd:19:f9:c3:83:27:2d:13:62:db:ef:
                    a7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:91:5B:B8:58:CB:A1:36:FF:44:98:77:E7:36:18:74:2D:81:2C:95
            X509v3 Authority Key Identifier:
                keyid:B6:81:77:62:D9:FC:8F:11:B0:1C:F5:23:4B:6E:43:1C:FB:EC:1B:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toF3Ytn8jxGwHPUjS25DHPvsG80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:31:7e:8a:c4:1c:74:23:76:29:43:e8:f6:94:d2:8c:16:3b:
         7d:e1:fd:a2:a3:4b:01:60:d5:c0:8a:73:9f:7e:cd:f2:9d:a8:
         14:15:6e:95:c3:2e:19:92:1e:f9:03:15:2d:ca:70:69:c7:65:
         1e:fc:a3:ba:7b:07:0b:b6:f1:48:2b:2e:89:09:04:b5:68:31:
         66:7e:71:4c:a5:07:bf:66:49:6d:d9:6d:a6:2e:ed:b6:89:09:
         b4:9f:5e:2a:79:fc:92:08:5b:35:26:c9:81:44:24:cb:a9:9c:
         bd:9a:1d:57:25:65:f5:12:58:01:43:11:30:28:2a:d1:c1:c5:
         0c:5e:4c:dd:60:61:0d:7c:a7:56:c4:3a:71:2e:72:04:40:39:
         99:cf:2d:19:fd:86:a4:a1:9d:db:ba:ed:6c:a6:b6:0b:d7:63:
         54:49:5c:db:79:4b:ce:24:b5:11:5c:0c:77:27:26:72:0d:88:
         fe:e0:b1:f5:7b:6c:92:92:36:f6:20:bf:8e:a4:e3:4d:b9:5d:
         0b:8d:31:5c:b7:82:8b:bd:3e:de:cb:17:5a:3f:a7:2e:09:7f:
         c3:8e:b4:26:33:41:01:b5:6e:4a:52:55:80:b8:d6:ec:f0:67:
         f9:f7:34:b4:27:fa:90:23:b5:f3:f7:dc:98:c5:4b:36:06:e3:
         92:79:e9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----