Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File:                     8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier:          x1pPajyMosulVgE/eODgXJEe507Qtulm9x9uyegvh4A=
Subject key identifier:   A6:4D:72:16:E1:39:7E:48:8A:DA:FB:20:FF:7E:81:65:19:C6:71:B3
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer:       /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial:       01962E61856F88F6EF16B301721E6B621AF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: 4ZFII5c609csszaMHNq6jhBoFRo.roa (hash: pyQ/SEzC2Sk5tb7Z3BNDW4O2mEDe4VqfOm/kuVxquBQ=)
                          2: 7XoxbsiH0tvuamwOaZJkHsbncU8.roa (hash: eOLDYEBs+ePiFOo04IA8xxSpoLseLj4knNzwy/AuO7c=)
                          3: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: /TcFEpiosVRtIAoEenZ773mcBKsJD0ETOdqKewhLIQA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:85:6f:88:f6:ef:16:b3:01:72:1e:6b:62:1a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=a64d7216e1397e488adafb20ff7e816519c671b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:57:43:a0:f8:45:ef:70:7c:5a:70:47:50:58:
                    e2:34:07:22:f3:3b:aa:2d:92:ca:67:f3:4c:05:37:
                    d4:c9:6c:46:1e:c6:b8:b4:75:96:5e:8e:df:6d:c1:
                    34:29:89:ad:79:91:c1:f1:48:2c:64:f0:af:4b:dc:
                    85:26:68:57:ac:c5:20:a4:fd:f1:61:13:f8:36:1e:
                    a3:38:33:57:71:e4:45:ff:ad:ed:76:5c:de:db:a6:
                    1a:3d:9e:b5:a9:a5:55:9f:e7:c9:10:1a:19:b7:d3:
                    b9:bc:93:9d:09:2a:e2:6d:ed:45:90:08:1d:89:0d:
                    9c:44:b1:d2:06:3f:76:82:53:97:c3:2f:0b:b0:0d:
                    41:89:fa:e0:ce:83:b3:52:6f:59:d8:60:97:1e:ff:
                    6f:a8:af:a5:b2:fd:f7:7d:3f:35:26:fe:07:56:61:
                    48:99:32:a7:c1:f5:92:38:10:64:f3:44:e7:e5:b9:
                    b7:75:04:c3:89:51:4b:39:f2:e3:dd:06:a2:8a:24:
                    59:73:24:1c:e6:92:c7:91:fa:55:b3:4c:36:0a:ae:
                    5b:7e:e6:8e:54:d0:be:a4:7f:a5:91:bd:37:11:5c:
                    95:62:ad:3e:5f:ed:e1:5a:47:b9:52:c8:db:b5:64:
                    9c:c3:30:ce:9b:89:49:ee:2d:62:4b:f5:7e:48:51:
                    15:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4D:72:16:E1:39:7E:48:8A:DA:FB:20:FF:7E:81:65:19:C6:71:B3
            X509v3 Authority Key Identifier:
                keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b8:f3:16:83:37:b2:42:94:9a:11:d5:5e:a4:b5:b1:f8:45:
         03:a5:11:53:f2:af:cd:36:e8:94:42:15:68:b4:36:a2:ce:34:
         fe:56:e2:ac:d0:5e:e5:eb:e6:03:04:0e:38:4c:8c:ca:d1:88:
         9a:6a:7f:08:e8:03:c7:54:92:90:17:fa:87:54:99:99:68:c9:
         38:84:46:1a:02:b5:c8:e8:eb:fe:37:47:ea:48:2d:21:1a:36:
         e6:61:66:f1:d4:1d:a2:57:96:3f:d3:d7:bc:6b:92:e1:50:c8:
         39:05:26:33:9b:b0:57:4f:16:94:fc:9f:a6:33:d4:07:6d:08:
         6d:31:9f:79:cb:f5:7a:d1:1e:39:49:c1:39:26:2f:61:69:25:
         db:c0:b4:b7:5b:46:9a:f6:8f:f7:29:26:53:63:63:4a:72:a7:
         d8:2a:4b:86:71:f7:d9:cd:de:bf:81:0e:1e:96:79:4a:d7:8c:
         0e:41:de:2e:83:a2:83:f6:a0:ce:3f:4a:d2:c0:d0:9b:24:a9:
         3b:ee:1d:c8:97:a8:ad:6c:9e:e1:d1:56:d2:84:2d:da:0f:1a:
         2f:13:63:ab:5d:43:af:99:4d:7a:2c:ce:d9:5e:f2:98:92:6d:
         ad:ab:85:e6:eb:16:6e:04:7b:4d:8b:d3:2d:5e:35:93:90:79:
         e7:b0:18:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----