Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
File:                     _4IIsSnFPofD8NDtG8qFcwFA85A.mft (raw, json)
Hash identifier:          E6ByZrbGQdzJODvJa49+QMMtqa03eBz39E4aGUPcZfI=
Subject key identifier:   8D:2F:2C:75:FA:6B:8C:07:02:BD:90:DA:6F:45:9E:1B:04:B1:FD:6A
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Certificate issuer:       /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial:       01962FAB5BCF8AEB25DABF6C82BDCC3BCC89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
Manifest number:          0DF8
Signing time:             Sun 13 Apr 2025 15:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:21 +0000
Files and hashes:         1: THr3g9OkPvsy14BHilEZG56BiqU.roa (hash: 3xhlPP170oH7ChTM2ZqRCOHhpB5jGmO+80m0RUL/u1M=)
                          2: _4IIsSnFPofD8NDtG8qFcwFA85A.crl (hash: C4RzXoUNPLL7xMzRLGldLphSZ4O6YCUgKUG20qE+dEU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5b:cf:8a:eb:25:da:bf:6c:82:bd:cc:3b:cc:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
        Validity
            Not Before: Apr 13 15:01:21 2025 GMT
            Not After : Apr 14 15:01:21 2025 GMT
        Subject: CN=8d2f2c75fa6b8c0702bd90da6f459e1b04b1fd6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:65:85:70:19:d5:e9:63:b2:46:d8:87:6b:02:
                    f0:f1:d7:70:14:65:4e:2b:a7:d0:94:7b:d1:2f:08:
                    72:de:01:bb:25:b2:3c:8f:10:1c:c2:36:65:13:89:
                    3b:18:68:d3:3a:cf:bf:4c:79:e5:7e:a9:aa:fd:d3:
                    e4:f5:26:8c:ff:81:22:e8:3a:97:38:43:9e:06:ec:
                    7a:37:ea:60:65:34:0d:30:46:80:27:d7:65:0d:c3:
                    b5:62:2a:14:fe:e4:7f:a9:6b:65:89:1a:c2:12:01:
                    11:f8:89:9d:82:af:a3:11:42:31:2c:ec:7a:02:26:
                    80:8d:26:96:a2:8f:a9:7a:b2:98:44:c8:3a:d0:81:
                    8d:fa:c2:ab:d7:57:25:c3:ce:75:f5:df:92:7b:29:
                    5e:f5:ff:9b:1d:d6:25:2d:68:12:f8:23:4b:e9:81:
                    d0:a8:ca:4c:1a:1d:a7:ad:65:40:bd:8d:8a:7b:66:
                    22:b7:58:ad:ae:73:63:de:cc:13:6a:c4:4f:32:12:
                    ae:4f:ad:6e:51:7b:3a:38:93:34:a5:de:2c:f2:d1:
                    18:7f:09:dd:15:c5:89:9b:d3:f8:56:b4:ca:00:16:
                    3e:7b:a3:74:74:e4:d3:cd:fa:7f:c0:fd:96:4e:f3:
                    70:aa:25:43:67:d7:8f:7d:46:ef:31:37:99:6f:38:
                    85:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2F:2C:75:FA:6B:8C:07:02:BD:90:DA:6F:45:9E:1B:04:B1:FD:6A
            X509v3 Authority Key Identifier:
                keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d6:87:c4:39:9f:67:3d:b6:54:14:1e:68:04:29:85:f6:9a:
         2b:bd:fb:18:d0:97:05:41:57:5b:e2:b1:e4:8d:47:47:1b:de:
         f8:cc:fc:4c:61:c7:e3:f4:0f:03:d6:da:7b:a4:ed:e5:e3:1e:
         70:f8:ad:88:43:03:0b:16:3c:05:08:28:3c:19:c5:dc:4d:c4:
         33:3b:67:93:21:ab:67:6d:9f:5a:e7:40:72:e7:38:0e:b1:4c:
         33:10:e5:cd:63:53:05:35:f6:fc:c5:1c:f8:4c:6a:3e:1b:66:
         5e:18:a9:f2:d4:87:5e:f7:e3:02:e8:e2:48:81:e9:dc:2b:88:
         4c:c2:39:b6:17:51:9e:74:96:b9:42:1d:cc:f1:60:cf:d8:da:
         71:56:b4:08:fd:b1:41:e7:be:ca:cc:a3:2b:dd:45:61:65:c7:
         62:5f:02:19:3b:16:cf:2d:97:0d:4b:db:1d:66:93:ae:85:63:
         5b:fe:12:c4:70:1e:8d:3e:2d:fe:9b:bd:46:e8:5f:69:c2:f8:
         a1:e5:eb:98:c0:34:5c:82:69:cb:8d:68:95:e8:9e:aa:cf:91:
         1d:74:84:0c:0b:4c:58:42:5a:ee:89:d6:f7:ed:eb:50:93:46:
         e0:fc:3b:ff:26:18:ef:fc:c1:a5:47:44:c2:1a:90:24:fc:21:
         42:a2:c2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----