Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File:                     D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier:          Xl9dqe44ej9rpQvrZRMz/m08gNVq2HE0sI2PbuYhIO8=
Subject key identifier:   FB:8C:A7:C7:97:9A:58:C8:15:8A:E9:33:4A:BB:A1:EA:30:BE:89:BA
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer:       /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial:       01962E9951740BA6C1F74420134CE1BCCB09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number:          1229
Signing time:             Sun 13 Apr 2025 10:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:01 +0000
Files and hashes:         1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: hNmwaFGS2BI93V/g+vslbNkvrOypcGZZOo6HjUV/R6w=)
                          2: Md8iGia1MbUzqtIWwDExWkmRVgM.roa (hash: 9TNv7T0YESkDbmJU8WmVBlvb3hJYh8sZp0R9zt0P83g=)
                          3: zzfWrdnIm-Z-w7o1PR68Qstk9VY.roa (hash: kTwVtQXhrNaWPZylIvh+tacEo9MdRsMxrNowU5p51wY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:51:74:0b:a6:c1:f7:44:20:13:4c:e1:bc:cb:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
        Validity
            Not Before: Apr 13 10:02:01 2025 GMT
            Not After : Apr 14 10:02:01 2025 GMT
        Subject: CN=fb8ca7c7979a58c8158ae9334abba1ea30be89ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fa:3c:a8:8d:11:74:87:0c:89:c5:37:27:0c:
                    eb:47:30:a9:db:f7:aa:ce:a2:4b:6a:57:b1:ed:ce:
                    ff:32:9e:f6:f6:b6:39:c9:29:1d:c5:2d:b1:3f:cb:
                    10:e4:32:a3:95:d5:ce:c8:25:84:bf:3d:0f:eb:03:
                    9f:6c:52:d2:d5:56:c2:c6:83:a7:a6:9d:51:a0:3b:
                    9c:3c:e2:d5:93:41:00:8c:e9:02:06:05:f9:df:44:
                    ab:be:3e:4c:e7:8e:55:9e:3d:6e:f5:09:16:5d:c4:
                    43:96:6d:ba:f0:51:ce:be:8f:f7:7b:93:d6:56:8c:
                    0d:f5:0f:1c:2e:5a:cd:23:e3:13:9c:28:de:1e:2c:
                    16:16:77:4b:31:66:3d:06:a9:de:6d:e2:95:7e:79:
                    7c:33:d6:30:48:a2:bd:05:d5:8a:2e:36:65:b3:6e:
                    ee:55:cc:23:26:c8:ab:86:a7:cf:eb:4a:05:a0:f1:
                    9b:25:73:45:5b:1a:12:33:03:b5:0b:e1:8a:74:a6:
                    08:a2:75:32:33:42:09:c7:7c:f9:3c:bb:55:80:ef:
                    8a:68:5a:4c:b8:27:45:e8:e7:52:ee:5e:6b:53:6e:
                    43:ee:7f:6c:5c:07:64:eb:f7:ff:d3:d2:74:4e:02:
                    83:01:b0:16:3f:39:9a:3f:72:49:6d:d3:4f:20:de:
                    08:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8C:A7:C7:97:9A:58:C8:15:8A:E9:33:4A:BB:A1:EA:30:BE:89:BA
            X509v3 Authority Key Identifier:
                keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a1:f6:c3:fe:e7:12:92:b3:ab:af:b3:27:03:0c:e1:43:44:
         d1:71:4e:ca:4c:b4:af:f8:01:62:d2:8e:11:d5:f0:b6:b7:63:
         8a:7c:17:b3:7d:4f:0b:85:3c:81:ad:2d:1d:72:a4:ad:ae:5b:
         51:bc:34:32:51:82:66:fe:1d:c2:17:43:eb:0f:5b:39:63:41:
         ce:30:2a:b7:10:87:29:0d:b1:a9:f4:e6:8e:20:6e:27:48:78:
         93:75:38:ff:56:d3:67:92:2c:c4:93:e0:dd:c7:1c:4a:7a:80:
         ba:ca:44:cb:c4:cd:48:a8:8d:70:f2:28:72:08:bc:96:7e:69:
         a7:c6:dd:0d:8c:93:1e:7c:c3:ac:8c:c0:85:3b:4e:b3:c2:f8:
         f2:06:13:72:ed:07:0b:1c:de:58:5a:b5:81:9c:a3:20:f2:32:
         a5:61:84:4c:b8:90:a6:a6:d9:ba:a9:56:21:3f:46:ea:6e:96:
         f0:17:a4:7f:04:f5:d8:c3:a9:7d:3b:c3:67:04:44:3b:d7:3a:
         7e:d9:9e:e4:83:1a:d1:df:34:10:df:51:1a:66:62:61:ae:02:
         fc:09:2d:d8:1b:9d:af:de:4d:d3:6b:df:ce:e9:12:16:eb:e0:
         4f:f5:cb:26:c1:77:03:74:20:f2:30:b4:bc:32:ac:67:bf:00:
         c6:01:a0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----