Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
File:                     8M0rO57YMSbUXboSAD1sbjWms4A.mft (raw, json)
Hash identifier:          wCbZAa7RC27rUK73EllBtwBAQAiHNuexDUVp/L7SSRI=
Subject key identifier:   77:84:49:3C:D7:74:73:64:A9:3B:26:67:6B:05:45:07:A4:20:B4:06
Authority key identifier: F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80
Certificate issuer:       /CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
Certificate serial:       01962DF44779C0247C32ED5DE228A3FC678C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
Manifest number:          1210
Signing time:             Sun 13 Apr 2025 07:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:45 +0000
Files and hashes:         1: 8M0rO57YMSbUXboSAD1sbjWms4A.crl (hash: yXhjWmiZsDZhFmXxFFms5zoUdZ1ee0rghFBKwq3LN44=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:47:79:c0:24:7c:32:ed:5d:e2:28:a3:fc:67:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
        Validity
            Not Before: Apr 13 07:01:45 2025 GMT
            Not After : Apr 14 07:01:45 2025 GMT
        Subject: CN=7784493cd7747364a93b26676b054507a420b406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:45:b9:9f:c8:f0:77:99:72:81:50:c5:51:44:
                    87:63:a3:51:f5:b9:f7:61:d1:53:cb:38:a4:dd:d7:
                    3e:d7:a0:0b:78:ed:08:e3:ce:e0:b3:53:25:81:fb:
                    93:da:f7:e3:7a:de:53:e5:3e:ab:29:af:44:9a:1c:
                    56:47:90:00:d6:77:16:71:1c:59:2c:f1:b3:38:58:
                    52:b8:23:54:e0:ba:52:ee:c4:7c:f1:69:82:06:95:
                    26:21:6b:90:d8:d4:e9:ef:8e:27:be:b6:1b:d8:41:
                    b1:fa:5f:92:b9:12:96:03:8a:f7:b3:c4:07:cd:f4:
                    e6:ec:94:91:bc:d3:39:af:49:eb:f1:72:98:b6:15:
                    20:86:c0:5e:f5:67:0e:c0:55:6b:7c:05:de:ad:00:
                    eb:ae:ea:c4:1b:bb:20:3d:e7:09:04:13:fc:8a:cd:
                    48:27:2b:50:cd:3e:87:46:c4:6d:df:4f:6a:7e:22:
                    73:85:3c:ce:25:45:46:ee:f5:65:d7:13:37:9a:95:
                    5a:a1:fb:6d:3f:21:42:d7:96:b9:80:30:c5:44:63:
                    77:b5:15:93:3a:ca:90:3d:bd:96:ec:e4:a5:00:09:
                    bb:33:86:fa:91:cd:73:c4:53:2b:40:96:60:27:37:
                    fb:c7:97:f8:98:b2:26:8d:76:95:03:8b:aa:22:b4:
                    87:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:84:49:3C:D7:74:73:64:A9:3B:26:67:6B:05:45:07:A4:20:B4:06
            X509v3 Authority Key Identifier:
                keyid:F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d1:26:39:ca:38:21:3e:93:8f:ab:6c:d8:5f:f0:a2:a4:9c:
         49:e4:28:67:e0:7d:af:75:9e:fe:65:96:b1:1d:e2:81:f8:c9:
         78:6f:b4:3b:6b:1d:b1:72:51:9e:d3:40:d6:69:6e:09:74:7a:
         a6:3e:c4:40:3b:c4:26:e2:55:a9:9b:64:07:2e:33:ab:d9:f1:
         d5:ee:68:14:8a:be:a6:23:da:38:7a:63:92:9d:8f:31:15:3e:
         c4:9c:cf:dc:2f:af:e1:cc:3c:62:58:09:98:a5:3f:a7:8b:40:
         63:d5:68:12:4c:ff:dc:22:b9:0c:36:ed:58:a8:08:ee:fc:72:
         fb:ba:eb:99:7d:16:f9:eb:07:1a:d8:43:d7:2d:48:94:62:27:
         e7:be:1c:fe:24:37:98:ef:bf:c1:43:e4:9b:b1:09:e1:fd:9e:
         55:fd:2e:07:7e:ea:89:21:da:d2:56:23:0b:ac:5e:57:38:28:
         49:b8:ac:e3:33:9f:9c:ec:82:e7:da:bf:db:20:6b:10:5b:28:
         db:71:30:62:88:fd:35:a9:43:21:41:9a:28:4a:c0:b9:c9:0e:
         ea:1e:aa:65:88:4e:d7:89:14:2e:b6:78:f8:fb:c0:d2:26:df:
         25:ca:77:c0:82:10:d8:6e:78:a6:52:6c:2f:2d:d0:32:46:af:
         8a:60:93:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----