Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
File:                     8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft (raw, json)
Hash identifier:          VAOkQlD1cfSvPqZ6ZHXuiq9zFh0c9yO6Q0LGkHu5dbk=
Subject key identifier:   CC:A9:29:45:03:D9:3A:73:0F:50:C6:57:05:37:55:E9:17:A6:9E:98
Authority key identifier: F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
Certificate issuer:       /CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Certificate serial:       01962E98D9DC1134E95944E278A7E011C27D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
Manifest number:          08B6
Signing time:             Sun 13 Apr 2025 10:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:31 +0000
Files and hashes:         1: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl (hash: KmyXs7C9qls9eV7tPAWNUbFpIRfUJxgSGW4raZnKnQg=)
                          2: GZ1s7d54viav3wnjL9leWDPX9XE.roa (hash: havZ3bJj+OM6go5VLxui+205cgsq5mlbJ3gC7fDy5Sc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d9:dc:11:34:e9:59:44:e2:78:a7:e0:11:c2:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f22219eca54ab269c8aab9b0ff416e7293829b59
        Validity
            Not Before: Apr 13 10:01:31 2025 GMT
            Not After : Apr 14 10:01:31 2025 GMT
        Subject: CN=cca9294503d93a730f50c657053755e917a69e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a8:b8:f0:21:b1:dd:61:f8:e1:97:bf:63:25:
                    b4:29:04:4d:ef:c8:51:21:e1:20:bd:ed:0b:3c:6c:
                    0a:67:f6:2c:bd:45:86:b1:0a:78:1a:d3:ef:39:b6:
                    c5:2b:11:9b:19:c9:78:c1:56:6a:d5:10:d2:39:9b:
                    c9:92:28:5a:13:4b:8c:fc:96:b0:47:e9:00:b5:5b:
                    86:fb:50:94:c8:78:8a:95:c7:31:d7:35:82:01:3c:
                    d2:ef:fa:2a:67:f2:03:21:d6:7b:69:d7:b4:0d:e8:
                    94:b1:0f:9e:70:fe:a6:b7:12:b1:f2:77:35:c6:5a:
                    ac:ab:dc:b1:9a:92:84:fc:91:e7:28:96:51:1c:9d:
                    cd:b5:8a:dd:29:7e:db:cb:c1:11:39:28:d5:5b:51:
                    c6:a1:28:a2:34:a8:ad:19:c3:51:0e:2f:d4:f5:48:
                    15:02:33:3d:e5:4c:ee:55:cf:96:4d:9b:99:90:69:
                    cb:98:40:8d:0b:e9:ef:f0:2c:c1:42:4e:d7:64:c5:
                    1e:95:41:54:1c:7d:bf:94:7e:24:a9:c2:0a:c0:a4:
                    77:b2:3d:89:57:35:e6:ff:6b:d8:05:35:4d:ac:9f:
                    ca:52:c4:9c:e9:9c:d0:c9:f9:4f:12:c0:9e:e4:98:
                    6c:14:61:6a:1d:70:cf:b5:55:eb:1f:4d:f2:bc:fb:
                    e8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A9:29:45:03:D9:3A:73:0F:50:C6:57:05:37:55:E9:17:A6:9E:98
            X509v3 Authority Key Identifier:
                keyid:F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:de:7a:0a:ac:78:1f:ac:91:5f:cb:0d:66:7c:64:83:d8:dc:
         b0:97:a6:1c:b3:b4:be:1c:90:04:78:87:28:a0:15:50:6d:15:
         f8:b3:54:95:9a:7b:96:f6:a8:2f:0c:7d:0d:2f:ab:18:07:14:
         5f:36:83:bc:5b:b0:b0:cf:49:21:78:76:c7:fd:23:91:da:e0:
         e5:96:97:de:a4:a1:3c:82:46:43:77:b3:b9:60:aa:b3:2a:9d:
         9c:8c:67:a0:4c:c1:9b:1e:40:ce:7e:52:55:0e:a9:72:03:5e:
         cd:43:32:4b:18:40:f2:5f:f4:7c:a1:e3:66:39:b6:03:e4:e2:
         45:1f:c1:4d:9c:0b:d9:a4:55:6b:91:c0:2d:f5:1f:52:04:cd:
         f3:25:55:c2:53:79:63:5b:f2:bb:f2:07:a5:80:9b:ef:81:c1:
         cb:74:55:72:0d:b8:9c:c2:9a:f8:c3:ec:de:a1:5d:2a:59:17:
         2c:45:db:c0:28:bb:79:ee:d2:f8:84:4a:34:3a:8d:90:65:b8:
         e4:a6:4f:07:26:5f:65:ce:36:01:d2:c0:e5:2d:93:8b:e0:62:
         23:50:60:7a:1a:ee:29:55:f9:7f:72:7d:bc:7d:99:d8:8e:04:
         9b:29:5c:4a:5e:24:35:a9:f6:ef:06:c3:af:d0:ee:3b:24:5f:
         b5:ae:56:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----