Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
File:                     8NREvH1TNNoU3oBRcrJiXpgwdj8.mft (raw, json)
Hash identifier:          RcdGw0A9yLcSad1Qlrkttx3mFxHVmTlXcWtGUzKU6qg=
Subject key identifier:   C0:35:50:43:20:BE:CB:E2:50:35:AD:70:70:B1:FF:94:D9:DC:0E:CF
Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Certificate issuer:       /CN=f0d444bc7d5334da14de805172b2625e9830763f
Certificate serial:       01962ECFCDB4619E51A005C9D62C34D9EDF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
Manifest number:          046A
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: 8NREvH1TNNoU3oBRcrJiXpgwdj8.crl (hash: 2NpPUvuO1w+w2eqhz/Y+4eBpbOlXf7/4CJaqjSwp/YA=)
                          2: CGcYt6qx267X0glJTA7aL9VX3lc.roa (hash: C7Akg4uPsnwTrDUVpipPgKYJ70rbAz3rIOj8sk4nXFE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cd:b4:61:9e:51:a0:05:c9:d6:2c:34:d9:ed:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=c035504320becbe25035ad7070b1ff94d9dc0ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:18:e7:da:67:75:3e:5b:42:38:e9:2b:7a:b6:
                    06:f9:4f:17:17:0c:e2:db:77:3d:37:d7:ac:f4:78:
                    4f:7c:71:3a:3c:f5:84:09:72:eb:5b:50:62:37:63:
                    2f:90:e9:b2:1a:02:d6:21:bb:d3:37:a6:70:70:f0:
                    12:95:c2:74:0b:c2:67:9a:62:08:9b:bd:9e:5d:a6:
                    eb:28:67:dd:dc:d6:1c:f1:52:14:61:85:b0:c5:3b:
                    df:7a:07:79:c7:8f:f3:99:43:96:ad:0c:91:75:4d:
                    47:dc:b9:07:b3:d5:34:f3:26:91:31:c0:c8:54:9f:
                    f7:1f:75:35:52:1d:ff:15:16:59:de:88:18:3b:93:
                    18:cb:06:ce:fe:a4:27:89:96:3b:34:fa:a1:9f:e3:
                    0f:23:48:22:b8:10:45:4b:d6:6f:7f:72:e2:ce:df:
                    ed:d7:69:4d:92:e0:4e:db:e1:7e:7b:9a:01:26:8a:
                    10:60:94:cd:4d:79:ca:42:11:b1:42:f7:f7:53:1b:
                    1b:09:74:d3:41:e7:1b:c1:b4:a2:b9:15:56:de:9b:
                    4a:ac:ce:ea:6b:99:e5:67:d9:cb:f0:ba:16:c4:42:
                    28:95:94:83:93:93:da:f9:3a:93:6b:71:62:9f:60:
                    c7:50:70:0c:a7:b3:9e:a2:1f:3e:11:c1:a8:65:75:
                    19:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:35:50:43:20:BE:CB:E2:50:35:AD:70:70:B1:FF:94:D9:DC:0E:CF
            X509v3 Authority Key Identifier:
                keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:8d:ee:d4:7b:57:eb:9a:03:67:fb:a3:da:ee:21:f2:9c:dc:
         15:cf:fc:18:c7:88:29:e5:ec:02:b3:f4:ad:10:54:3b:04:13:
         31:b1:64:e0:0c:13:b6:32:49:cb:41:10:31:a7:3d:1b:9a:dd:
         98:fc:2f:2d:b8:07:48:50:62:5d:6d:ab:55:ef:01:d0:2b:89:
         93:67:47:01:f7:d4:d1:de:7b:58:13:e3:fa:55:cb:49:24:a3:
         e0:50:94:42:a6:d0:ce:6f:fc:e6:9c:9d:c7:44:74:6d:b7:1b:
         14:76:2c:ce:80:64:a9:a5:19:23:f2:80:38:77:4b:1c:28:b4:
         d4:7f:90:c8:18:b2:5c:51:77:2d:2e:e0:ce:72:13:01:e5:b6:
         1b:19:5a:16:dd:e7:46:b3:40:3e:a6:ab:18:cc:bf:59:77:eb:
         c5:87:5d:bf:5a:19:40:91:bc:25:40:2f:dd:e2:9b:82:94:12:
         3a:77:bd:83:a8:1c:42:09:46:47:d3:5e:67:c3:26:e3:c3:58:
         00:04:fd:50:35:cf:55:7c:f5:df:24:e8:87:f8:95:02:1b:c6:
         6e:bc:25:7c:51:e3:f7:48:a2:0c:fc:0e:c7:d9:20:cb:70:09:
         b0:21:72:03:c3:95:30:07:d7:e8:4d:22:4f:84:94:f6:45:b2:
         71:26:2e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----