Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
File:                     8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft (raw, json)
Hash identifier:          R3zQayJ0iS/XC42zMkR16N2QVTV2/tXjTxJWo6P8QbQ=
Subject key identifier:   BC:19:0E:38:B1:C9:29:5A:DD:D5:52:AF:CB:55:84:D6:88:5E:7C:79
Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
Certificate issuer:       /CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Certificate serial:       01962F06E34820145BE3C2953B8A1E05956B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
Manifest number:          0C58
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl (hash: YIdZ51r9LGIi1n692+tCI00of3bPksJe9ud81lIBQOQ=)
                          2: YkEpFHQglRkkx7TW2iOd8M7ku-c.roa (hash: kIeQhyyEYB0FfxtFkPtqVvMk30nvPQUJg2CwKA7jeLY=)
                          3: uq0Ty9FTaErs0rzB7yOaaIcCy9E.roa (hash: cH522XBAhZQR4is+g9SDDOs+Uj5P/+RJANdH54+jdMM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e3:48:20:14:5b:e3:c2:95:3b:8a:1e:05:95:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=bc190e38b1c9295addd552afcb5584d6885e7c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2a:e3:30:53:39:f2:d4:d5:af:7f:c4:bc:6d:
                    7f:f6:0d:89:b3:ee:e6:6c:e0:3c:3d:87:a5:a5:eb:
                    e1:be:22:92:f6:ad:f7:08:0e:5b:62:f7:b7:b6:76:
                    c8:ee:ca:e0:f6:d0:a6:3a:41:35:49:65:75:dc:de:
                    7c:0f:17:bc:bf:6f:b3:4d:5f:f1:3b:c3:00:df:3b:
                    2c:c4:28:98:3b:c5:45:1c:b2:8e:80:91:74:c8:57:
                    f0:20:c3:bb:dd:67:ad:9b:e0:de:0c:b4:22:db:e6:
                    61:62:c9:b3:cc:e4:1d:8a:fa:74:3c:cd:53:14:74:
                    11:35:f4:61:6e:54:ba:17:3e:c3:6c:e1:c2:77:48:
                    15:dc:e7:a7:42:e5:94:7c:15:8a:78:81:bb:b1:e2:
                    57:35:59:44:a9:09:9b:fa:83:26:ae:0a:c9:a7:dd:
                    71:9a:8e:db:be:b0:7a:85:60:24:3d:c8:19:db:9f:
                    48:22:13:2c:d1:62:2a:4c:8d:60:ab:10:06:61:cb:
                    84:d9:a9:f0:44:16:07:8f:55:b2:ba:8b:40:1a:b8:
                    57:b9:ff:ea:d0:78:b1:17:00:ee:88:58:ae:13:07:
                    45:ed:d9:6f:e7:ec:4d:22:d3:69:f7:a6:da:9b:4c:
                    5a:83:21:63:79:4d:41:e9:5b:72:3e:f4:3a:f8:1d:
                    f0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:19:0E:38:B1:C9:29:5A:DD:D5:52:AF:CB:55:84:D6:88:5E:7C:79
            X509v3 Authority Key Identifier:
                keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:12:bc:31:dc:71:b1:63:a3:cf:37:34:ac:a4:27:b8:65:b9:
         ae:b6:bb:ad:1c:13:91:61:66:08:d8:0b:6a:19:5f:2f:84:87:
         2f:de:f1:f8:b2:e6:bc:e0:48:1d:7f:53:47:98:4a:41:e5:09:
         7f:f1:01:68:e3:0e:08:97:54:9d:7e:f0:32:4c:93:16:74:52:
         70:77:0c:a2:32:49:ed:76:7b:c4:5b:b8:b1:04:ab:b2:8e:6f:
         cc:56:dc:5b:c0:6e:99:a5:4c:80:8d:10:60:f4:af:03:f8:63:
         fe:00:dc:ab:47:c4:36:ea:78:0f:a1:7a:95:22:8c:dd:e1:8c:
         4c:42:89:89:e3:de:f7:ba:73:81:0a:30:76:e2:71:4d:8e:f3:
         33:ed:14:6e:ed:bc:bf:22:b4:8b:65:98:56:f2:c5:86:b5:cd:
         88:59:35:aa:68:aa:a4:5a:96:06:c3:55:e7:b1:6f:dc:12:96:
         7b:e3:cc:6f:cc:18:23:23:ee:8e:fc:6d:f3:13:c4:fe:80:fe:
         b2:e2:19:ab:60:77:d1:5c:c1:ae:d1:38:be:8e:70:e6:e8:10:
         d9:99:d1:56:8e:dd:0f:47:4d:cc:f9:79:a9:a5:50:4d:2e:7d:
         6f:8f:9f:e7:d9:f5:f1:78:d5:fd:5e:04:b0:bd:e9:81:9a:28:
         51:ba:95:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----