Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
File:                     8nBAx0Kee54hpf_IjZMrRwfMOgA.mft (raw, json)
Hash identifier:          wMQnyzvM+NHVsWFdy41iscsXfxQt+Qt+ctXXzzG6FVA=
Subject key identifier:   73:2D:BB:FC:60:26:7B:69:72:DC:28:55:67:50:44:EE:D8:73:28:BB
Authority key identifier: F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
Certificate issuer:       /CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Certificate serial:       01962FAB9074D7FBF5889D8C6F078B780650
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 15:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:34 +0000
Files and hashes:         1: 8nBAx0Kee54hpf_IjZMrRwfMOgA.crl (hash: 0703SdCGqhfqrR7WqiNVBo1B4wGuF+hqS64ln92ICUw=)
                          2: r8IgxFWc9XzlcmWsiD3Z-WIyGyw.roa (hash: FGlOHNeym9mZlkgU9PVn/K4BszdTXj5x4PebqSOF0dQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:90:74:d7:fb:f5:88:9d:8c:6f:07:8b:78:06:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
        Validity
            Not Before: Apr 13 15:01:34 2025 GMT
            Not After : Apr 14 15:01:34 2025 GMT
        Subject: CN=732dbbfc60267b6972dc2855675044eed87328bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:31:f0:b3:fa:73:c3:6e:36:a5:40:c8:e5:ca:
                    5b:90:39:9b:24:82:b5:bf:e7:d0:b0:e5:7b:0e:ff:
                    67:89:eb:eb:b2:aa:8a:70:2a:40:c7:87:a7:04:df:
                    57:75:a3:bd:e9:50:fa:e5:57:64:2a:78:97:e9:7e:
                    d5:01:e9:fd:ce:96:75:c6:97:be:81:23:59:92:4e:
                    23:91:05:67:88:d2:b7:36:8d:ba:7b:ce:8f:31:14:
                    d1:74:1e:84:99:6a:14:15:75:f2:2f:fa:39:b4:00:
                    24:3d:b4:af:f2:d0:1a:23:6c:a9:c3:48:8c:69:74:
                    45:92:1d:7a:b4:4a:9d:8b:7e:b3:4b:85:2c:ae:ae:
                    0b:0b:a4:a9:0f:91:10:b6:74:d3:53:be:fb:75:0a:
                    b9:c5:13:9f:0c:fa:cc:fe:98:78:50:c6:15:0b:6b:
                    b5:b5:13:a5:0c:54:10:f7:a5:d4:b8:a9:21:ec:d3:
                    b5:f7:bf:10:ef:50:52:37:d2:37:e0:70:aa:45:87:
                    03:11:35:03:f0:64:c1:27:19:4a:b7:02:1c:92:01:
                    58:a3:ef:c5:e4:58:1d:fc:79:65:94:e6:17:04:05:
                    62:fd:9f:a6:c4:16:70:91:f9:17:6b:27:11:4d:eb:
                    a7:13:5d:c6:c8:5d:70:90:b2:c4:2b:3c:94:2f:13:
                    06:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2D:BB:FC:60:26:7B:69:72:DC:28:55:67:50:44:EE:D8:73:28:BB
            X509v3 Authority Key Identifier:
                keyid:F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:61:9a:dc:f8:5b:f2:11:71:c8:24:19:c2:b5:ec:ea:72:d5:
         93:f6:52:99:25:2b:c7:d0:99:ce:37:c5:46:96:32:b9:bb:fc:
         97:bf:c1:f2:22:7f:7f:13:a3:6b:a5:ef:29:ff:70:f8:5b:7a:
         f2:cf:5f:c7:3f:31:b8:72:db:b5:1c:8b:09:57:1c:32:07:7f:
         26:c1:5e:1e:39:34:94:ad:f0:cb:af:33:d6:92:3a:08:db:b9:
         82:8f:8e:53:a0:1a:ab:e9:9f:b0:94:ee:85:36:36:51:5f:af:
         be:34:64:6f:44:86:24:fd:44:fc:a1:5e:d3:5e:ac:f7:b5:6f:
         45:04:de:65:76:39:1c:1a:d3:18:9f:d1:b1:b0:fe:4b:a6:73:
         41:0f:1f:23:1f:8c:71:35:8a:ca:20:21:3e:e3:23:62:12:0b:
         1d:43:3d:e9:68:d2:3c:84:e9:4a:52:38:30:72:41:01:24:46:
         b0:23:13:94:99:ea:00:73:48:b9:8b:f1:33:64:73:9a:cd:94:
         c3:f0:f3:dd:1b:07:5a:b3:43:c1:4d:d0:78:5b:97:72:2c:69:
         7a:49:f4:05:9a:01:07:b7:2f:52:56:47:0d:46:31:a9:be:7f:
         69:3e:7c:07:3a:27:12:50:65:a8:40:79:4c:13:e9:81:55:cf:
         a6:2a:1f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----