Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft
File:                     r8GT7hHlRxYWn5TI-THq4fyFSSE.mft (raw, json)
Hash identifier:          OWRdxzUAJ4uicoX1/co8O0BItadkVt2RL6gtq+870Zs=
Subject key identifier:   C9:DA:D8:12:27:52:BB:6E:96:39:F9:9C:2C:90:78:18:09:0F:80:42
Authority key identifier: AF:C1:93:EE:11:E5:47:16:16:9F:94:C8:F9:31:EA:E1:FC:85:49:21
Certificate issuer:       /CN=afc193ee11e54716169f94c8f931eae1fc854921
Certificate serial:       01962E98DF0210650ADFC308B4A01CB29038
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r8GT7hHlRxYWn5TI-THq4fyFSSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft
Manifest number:          0A3D
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: AaiQ-SNQmt6l5xOeIk4PwVHWfh4.roa (hash: 6CQTrWnDAV45WpOAHO1NfVL9iDI/ELlZY8vizp+bA9s=)
                          2: r8GT7hHlRxYWn5TI-THq4fyFSSE.crl (hash: 1Z1S3gKJBOJOzhZQZwIwcCsdNg0zU7DHGCXYviKceVE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:df:02:10:65:0a:df:c3:08:b4:a0:1c:b2:90:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afc193ee11e54716169f94c8f931eae1fc854921
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=c9dad8122752bb6e9639f99c2c907818090f8042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:db:0a:2a:30:6c:c0:7d:c2:aa:5d:11:7d:c9:
                    8e:b0:fa:d5:f6:c6:6a:8d:8d:61:1d:54:8f:bb:7d:
                    11:08:fc:5d:f7:bf:24:e5:e3:89:1e:27:fd:a3:f7:
                    d0:b7:3a:92:c4:b2:e8:e1:92:fa:6d:5f:b3:bd:55:
                    bf:41:d7:f1:75:dd:fd:69:ac:97:12:f5:b5:e2:85:
                    92:c0:6a:4c:8a:4a:0a:f7:e3:47:21:ed:a2:ff:56:
                    8e:77:85:6f:e4:5f:05:a1:4a:26:cd:2d:9f:e4:ee:
                    88:71:a2:1b:85:a5:18:41:21:cb:db:21:e3:f0:f6:
                    6e:fe:e6:6d:f3:49:b8:8a:3b:8d:e8:5a:bc:b6:1b:
                    96:49:61:85:66:c0:a3:4e:ee:1e:36:87:05:ed:5e:
                    93:c4:da:d8:4e:39:e0:2f:0c:86:ed:d1:ee:a5:62:
                    12:fe:83:10:52:c5:44:8c:6b:09:7e:35:64:f5:00:
                    47:50:a8:a7:17:d6:98:f1:12:41:f2:09:d2:70:21:
                    81:ab:0d:5f:a8:73:09:be:86:39:f7:7f:ef:0e:7e:
                    e4:5c:69:1d:18:d9:3c:6e:c8:49:b3:21:73:99:07:
                    37:59:78:97:3c:f5:59:ab:cd:3f:7d:c4:da:1a:04:
                    f6:71:7b:15:1d:e2:7d:d8:68:eb:7e:e6:80:97:11:
                    86:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:DA:D8:12:27:52:BB:6E:96:39:F9:9C:2C:90:78:18:09:0F:80:42
            X509v3 Authority Key Identifier:
                keyid:AF:C1:93:EE:11:E5:47:16:16:9F:94:C8:F9:31:EA:E1:FC:85:49:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8GT7hHlRxYWn5TI-THq4fyFSSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:64:ec:5e:c5:77:66:7c:7a:50:16:96:be:0f:6a:c2:bc:d4:
         bc:59:36:99:20:f5:fa:90:c8:69:db:db:d3:05:36:c6:e5:03:
         e3:39:08:70:6b:aa:da:2f:66:3a:25:01:c2:b7:68:73:46:78:
         79:0b:94:d4:3c:fa:24:e1:0b:a0:48:32:4a:e4:53:a6:4f:68:
         cf:38:df:37:17:1f:21:93:21:31:23:4a:1f:2e:58:02:e8:80:
         37:c4:b7:6d:d7:83:4d:35:6c:dc:59:9e:95:f5:a8:39:d2:01:
         5d:33:3b:7c:9d:1d:85:9e:5a:02:25:46:b6:dc:57:41:47:32:
         28:c7:00:e6:48:3f:2f:83:cc:a3:18:7d:d2:7b:f5:d3:59:f8:
         24:ff:c5:c6:ab:c1:94:3f:7b:2d:61:de:0e:49:ba:7d:4c:ad:
         c8:2f:50:63:6e:d3:46:4c:1d:43:ee:5e:d6:31:0b:d2:da:0d:
         c5:fd:99:7b:3c:ac:da:a2:d4:ab:db:0f:77:71:20:22:c0:27:
         3f:f0:a4:9b:75:47:7c:5e:b2:57:8f:e6:b6:f1:c9:36:6b:d2:
         d6:e3:6a:23:00:7b:88:3f:c9:15:f2:e3:ea:2d:38:36:d7:4d:
         57:b8:a4:43:63:c0:d9:f1:22:5f:0d:96:4a:ea:9d:bc:fd:ba:
         01:27:12:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----