Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
File:                     8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json)
Hash identifier:          owKS6lmXgz05ItV6GlD2cQ4Wji9qJHUo0uGT+pmQ0b8=
Subject key identifier:   C3:23:AD:D3:6A:C8:60:9A:F6:91:CA:0F:86:C7:94:31:59:3A:85:98
Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
Certificate issuer:       /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Certificate serial:       01962ECF73CBF4CB09B8C292A29EDE4FE367
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
Manifest number:          0495
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: LLEaE2mqPxlLpqY3c5jBSArBWZAM4/NIeLR2EzKLq5E=)
                          2: Tm2nsqR26Dl9LeV6Cyt_JHr-v8Y.roa (hash: uihaqn4cl1EUm9BC8+JYEwJFvxEP94e45YDqvyFRac4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:73:cb:f4:cb:09:b8:c2:92:a2:9e:de:4f:e3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=c323add36ac8609af691ca0f86c79431593a8598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7c:3f:2d:fc:89:e2:3d:f7:84:b6:c4:4c:ff:
                    b2:2b:f1:ca:9a:73:08:99:7c:43:18:4e:17:2f:c4:
                    9c:df:ce:21:48:54:f8:e6:ee:a0:9f:d6:33:aa:2e:
                    cb:59:e2:29:96:9e:bd:91:dc:ad:10:d0:86:40:a7:
                    82:9f:87:e2:c5:91:d4:45:6f:77:b4:88:b8:55:7a:
                    5a:6b:e9:b7:3b:a3:ad:bf:8d:e9:cc:b7:7b:5d:90:
                    1c:e4:5e:e7:2e:84:9d:ba:23:ca:d6:bb:81:82:bb:
                    05:f8:0d:5e:fd:36:c2:ad:00:35:f4:d6:88:d4:64:
                    b3:41:7b:1a:93:36:93:52:52:d1:14:ff:65:32:44:
                    13:36:15:e4:13:e2:27:8f:87:3f:f8:65:dc:13:15:
                    e0:32:b4:9f:83:7e:f7:fe:33:3d:80:6d:b9:a9:6e:
                    95:14:35:b3:63:78:33:e2:38:c7:02:86:b6:14:5c:
                    2e:09:3a:13:6f:ae:85:d4:1d:7e:27:15:d2:63:da:
                    09:92:3f:04:76:95:94:d0:f6:b8:91:82:43:72:45:
                    02:93:ba:fe:7f:e3:40:93:4d:fd:d7:01:a7:a1:7e:
                    53:61:ab:09:2b:7f:0f:13:0b:1d:1f:1c:06:57:38:
                    42:83:81:ff:2c:35:92:d5:64:40:fc:ae:a3:e4:ff:
                    00:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:23:AD:D3:6A:C8:60:9A:F6:91:CA:0F:86:C7:94:31:59:3A:85:98
            X509v3 Authority Key Identifier:
                keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:de:8d:9a:8d:80:74:b0:b5:57:11:11:01:94:05:39:1a:9d:
         30:b5:75:ab:40:67:4f:cd:ef:41:a3:6b:08:57:32:8a:bb:5f:
         51:ee:49:95:e2:99:42:da:05:3a:43:12:02:3d:dd:96:36:98:
         e9:0d:6e:e1:5f:e6:40:7a:18:f4:4d:66:6c:d9:f6:47:64:0e:
         ba:d5:df:00:85:17:54:85:63:e9:f7:dd:e9:b3:35:ea:ba:d2:
         4a:06:a4:8d:69:67:fa:45:f7:60:12:98:8a:40:a9:35:37:bc:
         03:8d:7b:17:5b:12:f5:97:ff:ba:bb:73:3d:8e:51:a5:7a:8b:
         c5:e8:c5:8c:cc:3e:48:b3:dd:aa:b5:12:8a:fa:59:63:30:38:
         97:f1:fd:59:4a:19:64:c6:3b:36:12:c4:de:ca:89:60:12:db:
         b5:d2:53:48:ed:de:f8:ca:b4:48:6b:04:59:91:27:03:83:ce:
         f9:f3:40:0e:02:eb:5d:33:24:5a:1f:84:fd:f6:77:4a:88:5e:
         44:00:7a:6c:ea:ab:64:c7:cd:78:67:1f:cf:5f:04:bb:a9:92:
         f0:ad:d8:f6:e4:4b:31:3c:a3:58:cd:50:5e:dd:e3:a5:2d:4b:
         0e:b2:16:6a:6e:ff:34:c8:58:a0:9e:11:14:2e:83:b1:f4:75:
         35:d5:7a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----