Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
File:                     yOx8SlcVXOjexbHNYv-oQBexb1g.mft (raw, json)
Hash identifier:          5AJqEKF1DSQ1h/Ili8fGj3vdy5f5WooiIo80fMO7SIM=
Subject key identifier:   36:6A:C3:5D:4B:8B:AB:C3:1A:0A:F6:8F:BB:05:67:A8:D7:DF:C8:DA
Authority key identifier: C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
Certificate issuer:       /CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Certificate serial:       01962E9936C45CBFA48E62AE9AF817F72DE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
Manifest number:          040D
Signing time:             Sun 13 Apr 2025 10:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:54 +0000
Files and hashes:         1: PkfIS5G435_5emRi_COnc1WyLBs.roa (hash: IOA4UWzzxA3Jqfg26gD/3jtgnYFnAYPzln5ueD/sEOk=)
                          2: yOx8SlcVXOjexbHNYv-oQBexb1g.crl (hash: 3XlskIdaHb3eUk/7X/0aWNauh73tZ5BI3sCLLP36Nuc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:36:c4:5c:bf:a4:8e:62:ae:9a:f8:17:f7:2d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
        Validity
            Not Before: Apr 13 10:01:54 2025 GMT
            Not After : Apr 14 10:01:54 2025 GMT
        Subject: CN=366ac35d4b8babc31a0af68fbb0567a8d7dfc8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:08:3a:6e:d4:7d:cb:2e:7d:e5:ce:2a:0d:5e:
                    2f:da:65:d9:6b:ff:e1:8b:cd:11:23:b9:da:ca:b3:
                    4e:f9:3d:c5:9e:c1:b1:2b:50:f7:4c:6a:cf:4c:e6:
                    4b:16:ac:cd:0e:66:90:1c:4b:88:fb:1a:30:5b:23:
                    0f:79:e0:e0:ae:27:66:2e:4e:a0:fe:e1:28:f3:0a:
                    12:d1:09:86:f8:0d:9a:f2:87:8c:60:ab:fb:f2:2e:
                    b8:3d:a4:7e:ac:f3:a8:4d:54:0a:93:be:d5:40:46:
                    b3:ce:2c:ef:3b:20:20:78:f0:51:6a:ba:72:d4:e5:
                    21:e5:cc:4c:95:dc:0c:fa:a9:21:94:c6:e1:72:b0:
                    a2:8f:57:69:8c:bd:86:99:ff:24:1a:bc:22:db:3e:
                    75:ad:8c:62:15:7d:eb:f7:39:3c:95:b0:55:36:93:
                    af:b6:0f:9e:e1:31:94:51:ab:2e:d7:ab:40:ad:d3:
                    bb:e9:96:d9:70:2c:17:f5:a5:ae:62:68:9a:41:d1:
                    41:ae:e2:0e:cb:ab:6e:c9:5e:19:4b:b1:72:e1:a1:
                    26:54:a3:68:08:65:d4:9c:46:b2:44:0c:a2:5e:bb:
                    7a:08:0c:d6:fa:d5:b8:05:74:6f:69:bf:98:99:a1:
                    61:95:0c:54:f7:31:b9:fe:2d:63:58:9b:a2:f4:74:
                    00:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6A:C3:5D:4B:8B:AB:C3:1A:0A:F6:8F:BB:05:67:A8:D7:DF:C8:DA
            X509v3 Authority Key Identifier:
                keyid:C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:7d:aa:5c:da:e8:7c:58:f9:98:e3:75:08:86:53:69:e3:5d:
         59:4c:cd:0a:9b:bd:2a:0d:e5:df:76:be:6e:cc:18:51:7a:82:
         f4:f3:60:8b:32:97:33:4a:72:2e:a5:66:42:03:8d:d6:96:44:
         55:17:14:0f:24:14:57:24:fe:83:90:6d:f4:de:4d:68:89:e9:
         cd:ee:66:48:a3:78:83:80:c3:59:a5:c5:de:d1:02:e5:3c:96:
         cc:98:60:9e:48:25:3e:18:51:7a:23:e3:9b:04:30:e9:46:76:
         7c:a1:ea:67:4a:5c:c6:dc:72:d3:48:6a:ba:b5:d5:7b:cc:54:
         f8:b6:60:0e:8f:a0:bb:3f:d2:23:d3:50:d9:d2:d6:6f:5d:97:
         d5:b1:15:72:95:33:5d:4e:f9:f1:a7:39:32:c5:e0:e1:ee:5d:
         ab:26:23:91:ff:d2:30:79:2e:83:dd:53:c2:54:10:b0:cb:ad:
         13:67:76:28:3d:ef:05:b8:6c:6b:df:7f:86:0a:67:51:38:51:
         35:50:0d:34:b2:9a:48:f7:97:01:48:96:a1:10:b9:d0:b6:28:
         9a:f3:43:3a:0b:df:47:07:48:c7:84:e5:9a:aa:98:2f:26:ed:
         62:fc:3f:a5:38:41:d1:10:1c:29:c0:0f:ee:0c:12:d3:f2:84:
         55:42:08:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----