Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
File:                     80fO2aDtf5RLn078OFd7OObRxnM.mft (raw, json)
Hash identifier:          ZHp42bykB/ySQDn4AyaV4hcEVzJif0HMgps0tQilpTc=
Subject key identifier:   A6:C9:97:AD:4C:6E:6C:46:9B:BD:F4:1D:2C:37:50:51:73:6C:8B:40
Authority key identifier: F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73
Certificate issuer:       /CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
Certificate serial:       01962E2B469607A5A4A5EE3A63AD8E7BB615
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
Manifest number:          0A9B
Signing time:             Sun 13 Apr 2025 08:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:50 +0000
Files and hashes:         1: 80fO2aDtf5RLn078OFd7OObRxnM.crl (hash: EQIb1VWNE12zZjqQtH2yZ9g9aRuoRcNChNCZ5mCTiCw=)
                          2: ZyBaJPQxm3-XH0gFju5MJYC4JWg.roa (hash: ySj8+X0dnc9ap4EhtEfAJ9xZUfiKRhH4fcuhqGb+r4k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:46:96:07:a5:a4:a5:ee:3a:63:ad:8e:7b:b6:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
        Validity
            Not Before: Apr 13 08:01:50 2025 GMT
            Not After : Apr 14 08:01:50 2025 GMT
        Subject: CN=a6c997ad4c6e6c469bbdf41d2c375051736c8b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cf:d6:67:aa:a3:f6:e2:c4:0b:3a:41:06:6c:
                    11:31:7a:31:3a:e0:0a:31:32:35:49:68:f3:a9:29:
                    7f:66:ef:b0:92:24:b5:2b:75:e9:f1:24:24:67:a2:
                    e3:4e:c5:3b:86:e4:36:15:c7:0b:48:41:01:2e:d5:
                    01:4a:f2:da:1b:4f:90:a3:01:03:55:e8:cf:f2:29:
                    6e:dd:3a:94:73:5c:a7:46:37:76:56:b4:10:9a:1d:
                    fb:f4:0e:89:05:26:e5:86:c1:cd:36:59:4c:81:dc:
                    52:68:3b:03:22:19:fd:19:c8:83:97:74:76:5f:8a:
                    f9:f7:6e:c4:3a:b7:0f:e9:44:c2:3b:18:92:48:4b:
                    3a:58:25:b5:f3:93:9b:00:5b:56:93:1c:c8:86:3d:
                    40:b9:f7:e1:37:15:40:be:cf:66:4a:73:82:e4:07:
                    33:7b:02:80:c3:79:5b:d3:b7:8c:93:7a:4d:f7:e3:
                    77:8a:93:dd:9f:a6:a4:98:48:68:90:51:ae:ae:52:
                    32:51:21:51:ba:6d:7e:4f:f2:02:ff:c5:48:9d:93:
                    70:e5:85:e0:49:4b:74:9b:5e:f6:0d:d8:f4:00:07:
                    b7:f4:25:b0:6b:1f:a5:48:0f:b7:01:ce:5a:cd:6e:
                    81:11:f7:50:8e:11:a6:d3:06:7b:23:fd:61:e6:e3:
                    96:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C9:97:AD:4C:6E:6C:46:9B:BD:F4:1D:2C:37:50:51:73:6C:8B:40
            X509v3 Authority Key Identifier:
                keyid:F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:7e:ee:2c:02:b1:1f:b3:74:8e:0b:12:00:50:f3:a1:5c:86:
         bc:90:51:57:68:f7:a2:71:1c:ec:a5:3d:78:ae:44:de:92:43:
         96:13:c9:ad:6f:10:48:09:f7:b7:1f:3a:d3:b6:9f:21:78:42:
         f9:04:ab:a2:4f:92:fc:ce:d5:a5:50:7b:e9:7b:94:2f:b5:cc:
         0c:fe:db:48:41:c5:0a:3f:a3:a2:b7:58:5a:7f:ad:ec:ca:2f:
         ec:7b:3a:63:5f:b1:7e:5b:3e:bb:69:a5:86:38:58:ed:4c:58:
         93:4f:47:59:60:88:fc:3f:6c:1c:09:d3:80:3e:78:98:66:76:
         48:58:9a:ba:60:fa:89:40:e5:54:97:a9:0e:a1:3b:1f:ef:21:
         a2:45:58:9a:da:c0:4e:46:5e:8e:7f:75:be:ff:97:ee:18:96:
         ee:50:dd:fd:36:30:36:d4:0e:36:99:13:51:ec:bd:45:c5:70:
         54:27:be:fa:7b:ed:3c:b2:d5:d3:62:24:3f:d1:41:51:d4:45:
         36:38:22:69:13:98:7e:d9:8b:42:db:b1:9f:dc:0b:49:91:6f:
         ed:66:da:56:75:d4:a8:29:ec:f4:63:07:29:d4:8b:5d:f7:9e:
         82:bd:b7:8f:63:c0:c2:c7:aa:98:80:fb:5e:07:1d:f2:3b:47:
         5a:f6:9e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----