Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
File:                     8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft (raw, json)
Hash identifier:          87FEu9JqMY//7snifCkXkGzAxA6RC2XoiG4wepFKD4I=
Subject key identifier:   C0:14:08:D6:46:E8:44:47:C3:22:FC:19:0C:F8:45:74:87:06:19:2A
Authority key identifier: F2:61:FA:1F:E6:DC:09:FA:54:D1:AF:59:C2:E1:00:CD:14:12:C7:F0
Certificate issuer:       /CN=f261fa1fe6dc09fa54d1af59c2e100cd1412c7f0
Certificate serial:       01962E98AD7737D849F14FB9A45215F6EF71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:19 +0000
Files and hashes:         1: 8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl (hash: ndWsbHjicfTbbbzju7WvagJ0aNlEpyb1kfwWbVcthr0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ad:77:37:d8:49:f1:4f:b9:a4:52:15:f6:ef:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f261fa1fe6dc09fa54d1af59c2e100cd1412c7f0
        Validity
            Not Before: Apr 13 10:01:19 2025 GMT
            Not After : Apr 14 10:01:19 2025 GMT
        Subject: CN=c01408d646e84447c322fc190cf845748706192a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b3:04:48:72:c1:5f:9d:be:5d:7e:20:28:7c:
                    be:13:7d:2f:91:a3:90:8d:c2:53:22:94:1f:50:4f:
                    83:5a:cb:ce:98:f4:bc:94:d8:64:12:08:e5:86:24:
                    ee:30:3a:73:29:21:47:3a:c3:22:a5:03:16:30:72:
                    f9:85:39:79:81:9e:70:b3:14:d2:c7:58:79:02:48:
                    12:d3:b9:93:30:4c:c6:63:21:f6:60:27:5f:63:f2:
                    bf:84:ef:e9:19:28:75:a1:bb:de:13:5d:ec:8b:99:
                    44:18:59:ed:06:40:97:b5:d6:36:10:8d:67:c3:60:
                    7f:24:52:b6:43:3b:4d:48:52:4f:95:7f:69:c5:3e:
                    3d:de:4b:9a:2f:63:b0:25:01:ad:c6:23:19:75:ac:
                    82:f3:8c:e0:23:eb:73:55:fe:05:7c:60:47:3f:d9:
                    b0:94:fb:75:b4:19:87:80:3d:56:17:fe:27:5f:32:
                    53:7c:72:d4:d2:d3:11:6c:7d:11:e3:ae:6b:3d:42:
                    16:4d:c1:9c:7f:ce:7b:c3:21:99:42:32:09:88:42:
                    d3:11:34:7e:bc:5d:1e:8d:ca:c9:4a:90:f8:5a:26:
                    c1:65:41:33:66:57:e1:92:b2:6c:dc:74:05:60:3d:
                    31:f1:8c:50:1d:02:06:d6:69:46:3f:d1:3f:9a:89:
                    92:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:14:08:D6:46:E8:44:47:C3:22:FC:19:0C:F8:45:74:87:06:19:2A
            X509v3 Authority Key Identifier:
                keyid:F2:61:FA:1F:E6:DC:09:FA:54:D1:AF:59:C2:E1:00:CD:14:12:C7:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:0a:42:75:2c:47:44:5a:dc:5c:32:a0:a2:4b:8e:72:13:d0:
         39:a1:81:6a:29:da:c8:99:9a:ee:4a:9d:fb:c0:1f:10:4a:74:
         a1:80:20:aa:8a:3f:c2:37:9d:26:2b:6c:55:97:f7:86:68:44:
         cc:36:ad:cd:aa:ab:49:31:11:fc:f1:61:26:7f:7f:bd:0a:0a:
         cb:f6:22:d6:de:c5:bd:67:ae:5a:af:b6:f7:a6:fa:17:d1:61:
         4d:91:33:a9:30:1b:4f:f0:ca:bd:81:1c:6d:aa:1b:57:43:48:
         c0:1e:8a:ae:ea:6f:01:cb:52:ae:ea:04:40:85:83:37:16:8c:
         46:d3:ac:cb:db:49:e9:d3:3a:f3:75:b5:3d:0d:70:ec:62:0d:
         05:24:0c:e3:be:4b:0c:47:b7:14:b5:4e:e6:3c:3d:e5:ae:27:
         51:cd:41:dd:03:9a:9b:0f:b8:29:d0:63:20:4a:31:d5:85:fc:
         65:c8:6c:69:21:b0:97:ff:9d:60:9f:ea:b3:ca:da:36:d9:1a:
         de:72:17:c7:c5:1a:fe:0a:8d:86:5c:9e:c8:6a:d0:2f:e3:b6:
         b2:e7:15:81:83:cb:03:a6:33:c7:08:ac:bb:87:97:7d:22:24:
         fe:fa:2e:05:e3:df:70:fd:59:a6:10:62:13:3a:d3:62:d0:75:
         cd:5c:43:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----