Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
File:                     8NXf3eTWeccRzOBu30A2yk5cwQM.mft (raw, json)
Hash identifier:          U+dgmzb3M+x1BllA2xfnsy69meaKOmnFYrEm3z9DPtQ=
Subject key identifier:   15:F4:3D:AF:BF:4A:98:C1:CF:27:FB:1E:5E:F0:82:98:5F:9D:99:D7
Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Certificate issuer:       /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Certificate serial:       01962FAB0A74AF2EA85A5CB35E2D13937860
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
Manifest number:          0C78
Signing time:             Sun 13 Apr 2025 15:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:00 +0000
Files and hashes:         1: 8NXf3eTWeccRzOBu30A2yk5cwQM.crl (hash: /3fMR8689IYcq1n16iMfUIoWN5IZfwlk+pA87A176c4=)
                          2: Nh04CLMcck1XHS9AATe9hyD29NE.roa (hash: KRd9oxirDVyH2M186/c3VQHXMTtIMq/vRs5kMb4jBs0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:0a:74:af:2e:a8:5a:5c:b3:5e:2d:13:93:78:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
        Validity
            Not Before: Apr 13 15:01:00 2025 GMT
            Not After : Apr 14 15:01:00 2025 GMT
        Subject: CN=15f43dafbf4a98c1cf27fb1e5ef082985f9d99d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d7:7f:20:eb:df:72:bc:ce:e5:42:8f:01:40:
                    21:6a:3b:4b:58:f8:4e:2b:1b:08:a8:fc:2a:fe:30:
                    5d:4e:53:92:15:5c:9b:9a:ca:a4:88:53:3b:ca:ca:
                    6d:e3:9c:bb:6b:bb:35:ec:f1:9c:40:44:e4:de:8e:
                    63:75:79:27:eb:1d:a0:ed:ca:17:55:1f:c7:5f:a6:
                    9c:89:0f:96:66:8f:68:4a:a9:5a:57:65:25:14:f3:
                    cf:11:30:b9:1e:54:12:9d:fe:ad:7e:64:da:43:18:
                    8e:e0:c8:08:5b:3c:6b:aa:d3:5a:2c:e2:8c:06:74:
                    6d:dd:8c:b2:d2:88:1a:13:47:00:69:b1:30:56:57:
                    3c:38:ff:9f:8f:3a:a7:45:02:8a:43:55:db:46:9e:
                    78:41:a3:e7:2e:4d:5b:bd:7c:14:54:1a:34:ae:66:
                    6f:0e:35:c3:31:1e:91:9a:09:3a:7f:a8:91:39:56:
                    b9:54:69:45:df:54:ce:d0:28:99:cc:7a:3e:f0:ad:
                    6a:e0:62:89:40:c7:99:00:dd:0d:16:e4:96:5d:22:
                    00:ca:83:82:d6:2f:4c:6a:9b:52:f1:e8:26:fb:90:
                    7f:c1:16:71:4e:40:1e:2e:4e:ee:a3:68:15:ac:f5:
                    fc:6a:d8:03:29:a8:79:37:e9:1a:5d:c9:d2:78:be:
                    7e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F4:3D:AF:BF:4A:98:C1:CF:27:FB:1E:5E:F0:82:98:5F:9D:99:D7
            X509v3 Authority Key Identifier:
                keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f6:f2:6e:05:c2:02:3f:5e:5e:3a:b8:ea:e0:a2:87:a3:ea:
         74:41:a3:bd:14:2d:6e:37:b6:37:22:fc:3b:79:f6:3d:03:4e:
         86:9f:73:0f:ad:56:b7:ff:75:dc:d5:06:61:cd:4d:81:d5:0a:
         5b:c3:b0:01:aa:00:82:c5:17:c6:e4:73:1a:c9:54:93:39:e8:
         85:8c:4f:f9:a4:ec:39:ef:cb:dc:74:eb:a1:1c:62:eb:2a:60:
         e2:db:aa:b0:5c:7f:c6:34:84:1a:e8:c1:a4:1c:0a:ec:d9:18:
         65:14:e9:32:4d:9a:15:f1:fa:a5:ec:a0:7a:64:4a:ab:b9:aa:
         19:e2:04:91:f7:f1:bc:b8:93:5c:58:33:fd:23:72:58:f2:28:
         80:04:92:e9:1a:5b:71:be:a6:b0:dc:94:57:41:47:0b:23:1a:
         34:5d:44:79:1a:9f:92:05:21:43:77:66:5f:fb:24:ce:4d:3b:
         84:8b:88:12:fb:46:22:8a:6c:2c:de:59:f3:1e:88:1d:ac:5b:
         6b:18:e9:3c:b8:a7:3a:9e:41:98:95:ea:81:63:df:4e:2e:ad:
         2c:90:9b:01:d4:32:bf:93:c7:e4:8d:c9:4c:16:71:98:07:84:
         34:c6:d6:5b:9a:45:3a:88:ec:34:0b:e9:ae:9e:3e:76:44:cb:
         af:0a:8b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----