Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
File:                     8V__itxu51EnLAqR0F3K_36NLWk.mft (raw, json)
Hash identifier:          RxF1sa+YNhTb9m2W8NavYTo5d/oMxctU2XHR4WV/YNc=
Subject key identifier:   E9:2C:F3:A3:8B:D3:2B:57:7D:F5:C0:D9:34:98:80:61:D1:4C:18:C3
Authority key identifier: F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69
Certificate issuer:       /CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
Certificate serial:       01962E98DD8A4DA5134934AFE19768D49EDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: 8V__itxu51EnLAqR0F3K_36NLWk.crl (hash: g7xf5DFTcjmd0NYwHNkGwt8ptOyfuZzeZoGR2KbTC7I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:dd:8a:4d:a5:13:49:34:af:e1:97:68:d4:9e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=e92cf3a38bd32b577df5c0d934988061d14c18c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e5:67:62:af:64:76:98:29:46:3d:77:d2:11:
                    1b:d8:e9:b0:0e:62:bf:b9:44:01:da:71:54:d6:31:
                    b0:51:46:c3:0c:04:5b:ce:58:e5:5b:42:c4:73:07:
                    97:b7:b9:fc:11:75:e0:cd:43:69:2b:80:d1:17:b7:
                    92:a8:af:a8:16:ce:56:04:57:6d:91:d3:83:25:7f:
                    8b:6f:8f:26:6d:d3:d1:e6:3a:1d:c5:0f:52:0b:2e:
                    fa:41:6b:bc:a6:7f:c0:a6:23:32:62:87:b3:9d:a1:
                    51:40:54:9d:98:23:89:d5:b5:59:af:bf:49:2d:31:
                    5b:a2:28:e4:4f:f9:03:fc:9b:5d:52:61:ea:6a:b2:
                    3a:84:fb:5d:5d:ba:4f:76:bd:9d:1a:0b:38:72:b6:
                    51:6b:9f:61:be:66:69:a8:ab:11:6d:4a:ea:cd:97:
                    b2:ac:e5:43:57:c4:df:38:85:af:5d:97:95:cb:ac:
                    81:69:0d:99:1d:14:78:09:7c:b2:f2:fd:72:e2:e5:
                    c5:ea:d2:f3:6c:15:a6:49:39:43:1b:c4:67:09:6f:
                    49:36:8d:75:83:c0:6c:65:c4:11:98:e6:af:d0:73:
                    38:6c:c0:ac:48:6a:85:9e:a6:61:19:bc:aa:22:7c:
                    c0:3f:94:9a:82:83:f9:a7:72:68:95:29:ed:a0:3e:
                    52:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2C:F3:A3:8B:D3:2B:57:7D:F5:C0:D9:34:98:80:61:D1:4C:18:C3
            X509v3 Authority Key Identifier:
                keyid:F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:3a:4e:82:3e:52:fa:6a:44:6c:cc:8a:51:8e:a2:4c:55:4b:
         68:ee:3e:cc:0b:c4:1f:b4:d1:26:9e:4e:09:be:a3:2d:0c:d0:
         8d:85:c8:c9:92:8f:94:c0:38:80:ee:3f:ad:b9:e0:d8:d1:04:
         ee:3f:40:3f:9f:73:00:9d:1b:73:6f:65:90:38:6f:40:6c:85:
         b5:13:4b:9b:17:0b:69:7d:17:cf:f7:31:a4:2b:5f:c4:67:26:
         4d:a4:35:47:0c:82:8c:d7:b4:e4:f1:88:da:96:28:73:4d:c2:
         69:27:99:3d:ba:bb:b0:b7:e2:67:b9:63:4e:cb:4e:20:04:61:
         09:9b:92:8e:ce:a0:07:f9:43:51:34:e5:56:2c:76:23:17:ff:
         74:05:f7:2c:2a:55:bc:eb:dd:33:b6:29:17:34:29:a2:b2:79:
         c8:17:ee:44:43:93:d2:c6:6a:9a:f6:f3:73:96:74:74:b2:bd:
         ae:63:38:18:0e:56:f3:70:cd:a2:87:96:ad:65:93:86:53:2a:
         c2:10:3b:3f:02:48:ca:c3:b1:ce:db:10:28:20:5c:66:da:32:
         f5:1c:88:27:d9:c7:62:5c:e5:62:a3:b6:f6:da:af:65:63:16:
         28:8c:06:af:00:22:f2:63:c9:b8:31:dd:14:cb:7f:a3:fb:58:
         be:54:cb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----