Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
File:                     8EDR-cl75GbgverISSieKjzKns4.mft (raw, json)
Hash identifier:          r5Ud33zouroOnvgLHGDxCzP1505PjvToByM9NV6Drio=
Subject key identifier:   A5:8D:B1:AE:88:16:8A:A7:55:E3:83:E8:98:69:52:89:AF:D6:A0:32
Authority key identifier: F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
Certificate issuer:       /CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Certificate serial:       01962F06D8FD0927775753636377AAF31D86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: 8EDR-cl75GbgverISSieKjzKns4.crl (hash: Er0Qq3/vL/wFB4DeddU3kaGlFTVT4EE5RyOjsJm4ER8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d8:fd:09:27:77:57:53:63:63:77:aa:f3:1d:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=a58db1ae88168aa755e383e898695289afd6a032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2f:dd:e8:46:66:0c:3a:46:88:32:56:e2:b1:
                    18:d6:74:c2:81:b6:f3:32:83:38:96:d3:69:d8:24:
                    a7:ee:5d:ca:15:37:b7:b7:5f:71:41:32:39:4c:f9:
                    16:cf:88:47:1c:a2:bf:8b:01:ab:d2:00:98:3e:2c:
                    26:d8:4b:4e:b1:ea:1a:b4:f9:41:76:18:d5:74:d5:
                    8a:bd:91:43:cb:9e:0b:61:b6:8b:31:a9:96:a5:89:
                    ff:27:6e:f9:70:f3:fe:16:30:74:8f:ba:d6:71:18:
                    06:ad:c1:9b:78:9c:00:bb:c0:8e:f7:24:4d:44:07:
                    a4:a4:68:11:8b:de:4e:d9:0b:d1:5d:20:e9:0f:ae:
                    78:ec:19:1e:ae:87:fe:0a:95:04:5e:cc:c6:ef:ab:
                    7c:ee:bd:25:ba:ed:8b:44:da:cf:0a:51:72:5c:ba:
                    4a:52:e5:0f:86:c5:13:b5:19:15:14:8c:b4:fa:e2:
                    0a:d8:e6:22:c2:6a:25:5f:7e:6a:a5:d3:8d:ca:f6:
                    22:4b:94:81:76:e3:ce:77:23:bc:f8:82:d8:c7:0b:
                    65:6a:04:e3:45:a5:0c:3a:3a:1d:75:15:be:4d:a4:
                    5f:93:8e:3a:fe:9b:65:a1:7d:66:4b:aa:0d:75:af:
                    78:56:7c:6b:72:ad:47:3c:04:dd:19:0a:d0:6e:7e:
                    6e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8D:B1:AE:88:16:8A:A7:55:E3:83:E8:98:69:52:89:AF:D6:A0:32
            X509v3 Authority Key Identifier:
                keyid:F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:75:e3:2b:59:eb:6d:1b:49:27:fe:88:1f:25:e9:b5:5b:83:
         fd:20:2e:d9:93:ac:c8:1f:c4:80:74:90:a1:76:9e:7e:6e:ba:
         e9:4a:b5:03:a8:62:f7:84:d6:00:05:b9:a5:95:86:6d:cc:68:
         61:ad:1e:31:68:68:f1:a5:a1:38:d6:4a:9c:7b:c3:7d:2b:f1:
         27:c4:2c:54:03:60:13:14:bd:d4:64:f7:3f:8d:dd:0f:cf:00:
         ac:42:bf:c0:0a:bd:f3:c3:05:e0:01:23:fb:05:a2:28:c2:61:
         e8:57:25:df:50:5c:0d:a1:50:fb:a5:17:15:a6:a6:dd:a9:40:
         3a:4e:23:fd:ec:e9:c2:70:59:37:f1:ff:0d:51:37:3a:8f:61:
         b7:57:b5:b5:cc:30:15:d9:02:46:b6:10:f2:3d:06:62:0e:37:
         1b:a9:b0:a1:75:48:d1:a1:73:07:7b:91:42:d3:99:80:8f:24:
         bb:72:47:ce:19:01:3b:4b:d3:53:50:fc:d2:85:52:4b:84:6a:
         49:c7:4a:a8:65:49:a6:7c:65:a2:30:c7:37:8e:49:16:d1:ff:
         54:be:f9:3c:69:8c:83:79:94:2a:f5:50:58:db:05:0c:46:18:
         36:fc:9e:b0:65:03:03:bf:2b:11:9d:31:c9:f9:d9:c4:ce:30:
         5a:6a:ed:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----