Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
File:                     i8qzttz8va_XYxEPhmqCgV3qRGM.mft (raw, json)
Hash identifier:          PUOeVL3GjZaITxADnRFReEZUIP3ciM5Hu1+U0qjvWqA=
Subject key identifier:   90:3E:9A:CB:2D:2E:80:42:82:FA:BD:69:8E:E2:D0:7E:16:4F:8A:2F
Authority key identifier: 8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63
Certificate issuer:       /CN=8bcab3b6dcfcbdafd763110f866a82815dea4463
Certificate serial:       01962E99123DAC4704A995940AADAF4C122E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
Manifest number:          015D
Signing time:             Sun 13 Apr 2025 10:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:45 +0000
Files and hashes:         1: XDaCGcZealj-spshbO6gPk6HDcA.roa (hash: nsrfqrdgPjlaid22aLgk/rpbmAlJVh+pY8pGwnfkSSY=)
                          2: i8qzttz8va_XYxEPhmqCgV3qRGM.crl (hash: 8bbgk/EuprR+AolcwmbETBes0S4kxYMn+2CCJGmri/o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:12:3d:ac:47:04:a9:95:94:0a:ad:af:4c:12:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bcab3b6dcfcbdafd763110f866a82815dea4463
        Validity
            Not Before: Apr 13 10:01:45 2025 GMT
            Not After : Apr 14 10:01:45 2025 GMT
        Subject: CN=903e9acb2d2e804282fabd698ee2d07e164f8a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:42:3f:b9:70:ad:ee:9e:68:8f:bd:f7:56:53:
                    f3:24:68:6d:40:ac:b1:31:15:0b:26:a4:74:95:4b:
                    bf:aa:11:7e:04:03:46:27:e2:84:4b:cf:91:fb:94:
                    34:db:7a:66:b8:2a:d7:7d:69:9c:29:91:38:e5:71:
                    2e:ee:da:4d:37:b0:88:a8:07:95:e1:33:46:73:b5:
                    65:bc:8d:eb:8c:83:55:94:6c:6d:74:e2:6f:07:ae:
                    24:7e:b2:da:21:7d:1e:bb:ab:db:7f:48:fe:7e:e4:
                    4e:f9:b1:18:bb:09:e1:3d:62:4a:6d:c4:bd:1b:c2:
                    93:73:5b:57:e0:9c:64:d4:4d:41:82:09:a4:3f:a9:
                    03:2d:46:01:98:27:95:de:29:34:6e:8c:29:72:eb:
                    6f:26:79:cd:55:a3:c4:f4:11:fe:03:0a:e9:cc:3b:
                    f2:f2:60:cb:d9:9b:d9:8e:ed:b1:0a:41:c4:71:9a:
                    6a:b3:e2:69:1a:e5:4d:df:79:c4:cf:6c:cc:77:ba:
                    4e:e1:60:eb:b5:50:24:94:11:e7:93:18:4f:da:75:
                    4b:ed:43:dd:db:2c:60:f0:8d:d2:e4:66:ea:ce:c7:
                    d6:4b:7c:fe:19:6a:a7:71:90:5a:3c:c4:03:8d:10:
                    60:b4:bd:f6:07:49:25:49:e4:a2:c0:bd:49:40:8a:
                    9f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3E:9A:CB:2D:2E:80:42:82:FA:BD:69:8E:E2:D0:7E:16:4F:8A:2F
            X509v3 Authority Key Identifier:
                keyid:8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:f1:0f:1d:08:ab:0e:e7:72:e7:06:37:b2:2e:71:65:2b:c9:
         1c:ad:52:c8:6c:cf:ed:32:74:bb:c2:d6:87:35:db:4b:bc:60:
         67:dc:a5:4f:2a:eb:9d:dc:8c:47:74:b4:de:a4:18:b9:b0:03:
         db:74:6e:58:7c:1d:34:08:a8:b4:5a:23:8e:98:00:5e:50:ff:
         21:ed:96:6c:37:b9:a3:e2:ab:85:80:ad:78:af:5c:5d:92:51:
         09:aa:bd:d3:cf:56:5c:70:39:1d:49:ad:ff:cb:98:fa:ba:f8:
         2a:2d:5d:fc:50:e9:b4:78:1a:af:53:e9:a7:fc:28:2c:2c:46:
         e2:01:40:e4:b7:fe:f2:69:51:94:ec:d4:eb:28:7a:8a:9a:96:
         f0:6d:d5:7a:f4:a7:ea:63:6e:3d:ec:6a:6d:4a:13:89:9a:f4:
         55:00:eb:5e:0e:92:b3:3d:75:c6:c6:83:97:fe:41:14:7f:b5:
         e3:bf:3d:c2:09:97:ca:dc:d6:d1:4e:13:02:95:25:d0:75:b1:
         20:b5:b0:b0:f8:b9:36:e6:e9:27:28:ee:cd:3e:12:4c:df:74:
         9b:d8:8b:39:4f:1e:18:c4:28:9f:23:4d:55:c3:de:ef:d8:06:
         b0:52:bc:12:87:8c:a3:82:76:15:6c:5c:3b:a8:be:0d:61:23:
         89:7f:8e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----