Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft
File:                     P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft (raw, json)
Hash identifier:          GG3cTOxvcpkw7m/4p+cHo+zCq4tk+uCunNeGIEwmhi0=
Subject key identifier:   8D:D5:FC:88:64:C0:18:26:B9:D6:75:D4:51:06:33:0D:4B:8F:7D:90
Authority key identifier: 3F:C6:AB:EA:E1:B6:22:25:6D:BB:2D:8B:74:51:D2:74:90:D2:74:BB
Certificate issuer:       /CN=3fc6abeae1b622256dbb2d8b7451d27490d274bb
Certificate serial:       01962E2ADDC317FDD6F68ECEC1B9713F508E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P8ar6uG2IiVtuy2LdFHSdJDSdLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft
Manifest number:          01F3
Signing time:             Sun 13 Apr 2025 08:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:23 +0000
Files and hashes:         1: P8ar6uG2IiVtuy2LdFHSdJDSdLs.crl (hash: OYkddKlu8YPr+XI1XBju7NXzqQJm/fw8xflr/c6OXUI=)
                          2: mmWIUy6R5upz2L1YINLOdfsMMT0.roa (hash: wBplVEEyq+VUYs/M8XPCNDfyw39oDDlnudAvkLvbSPo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:dd:c3:17:fd:d6:f6:8e:ce:c1:b9:71:3f:50:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fc6abeae1b622256dbb2d8b7451d27490d274bb
        Validity
            Not Before: Apr 13 08:01:23 2025 GMT
            Not After : Apr 14 08:01:23 2025 GMT
        Subject: CN=8dd5fc8864c01826b9d675d45106330d4b8f7d90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:53:5b:59:ad:45:0a:98:75:50:02:08:41:7b:
                    53:f6:5d:2b:4f:44:21:56:ab:e3:0a:e8:17:75:54:
                    53:e0:5f:c4:3f:d0:eb:b7:12:76:47:c6:1a:89:66:
                    70:cb:d4:1c:71:eb:03:fb:9b:1b:18:d8:d8:52:9e:
                    a4:e5:98:b5:8e:bb:88:18:80:3e:0a:2c:f1:ec:06:
                    97:87:42:d4:02:d5:6a:bb:2b:05:f4:03:96:b0:21:
                    2c:2a:62:d2:c0:fd:de:df:91:9f:ac:c7:38:ce:bd:
                    49:29:c6:24:be:0d:53:d1:4a:c6:cb:49:99:e2:f3:
                    0d:ba:9c:66:70:9a:5a:50:82:12:6b:7b:69:57:08:
                    0c:c5:3d:ac:25:53:e2:25:2d:9a:14:16:55:fc:cf:
                    6b:ee:d9:c4:fd:29:e6:ac:72:54:fb:46:03:74:a2:
                    50:d2:06:77:20:78:d6:98:89:d8:3d:12:82:20:1c:
                    9f:93:70:f0:9f:c2:0e:0d:86:52:b2:46:5e:95:12:
                    79:4a:1f:f5:75:5c:91:ec:51:01:18:e5:36:e4:57:
                    38:70:7d:5b:43:b5:bc:29:02:2d:cf:b8:ec:06:1b:
                    28:7b:67:12:f7:be:09:93:d5:a1:5f:c3:d1:b7:63:
                    0b:a2:57:5f:5f:2b:3c:bd:54:da:a9:72:3a:0e:74:
                    e8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D5:FC:88:64:C0:18:26:B9:D6:75:D4:51:06:33:0D:4B:8F:7D:90
            X509v3 Authority Key Identifier:
                keyid:3F:C6:AB:EA:E1:B6:22:25:6D:BB:2D:8B:74:51:D2:74:90:D2:74:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P8ar6uG2IiVtuy2LdFHSdJDSdLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f3:ce:6c:96:af:44:c2:e1:2a:5d:81:f7:fd:a5:15:40:97:
         b2:e3:75:63:0d:29:37:d2:00:93:56:55:26:20:be:96:b1:bf:
         46:91:90:78:eb:83:9e:0c:23:c6:9d:c4:42:60:67:68:db:5f:
         82:b3:6a:ec:97:c5:ea:95:29:da:c4:22:76:a5:31:f1:ca:f4:
         a7:d6:8b:8a:9a:20:92:a9:bf:35:18:c6:ec:d2:72:87:76:74:
         22:ab:33:2a:4c:67:0d:96:7f:9f:99:6f:1d:89:a1:dc:bd:c2:
         b9:cd:80:f6:e6:ca:90:d8:7a:58:3b:78:9a:d3:4f:6a:00:b7:
         9a:88:d5:ba:5d:22:ba:97:d1:6f:35:e1:46:67:99:b2:17:1a:
         99:72:a8:c7:1b:d0:2e:a6:83:2d:c4:5c:49:cd:13:ab:ee:a4:
         04:ff:0a:14:e7:6a:df:33:f7:81:32:d4:be:41:9a:4c:19:9f:
         73:15:ed:2d:2e:d4:e0:10:43:a7:c9:b9:d8:d4:00:30:8d:3c:
         5c:ec:4a:63:0c:e2:ab:fe:e2:e7:08:59:32:47:19:38:37:a4:
         90:d6:2f:5d:4a:fb:33:9e:21:c7:ce:b8:78:52:40:61:64:30:
         b3:b1:af:8a:1e:6c:59:9b:9f:06:e0:ca:d3:b3:46:cc:71:16:
         d8:96:63:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----