Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
File:                     8VCW_jOQRJyTboVwYdSmll1AijE.mft (raw, json)
Hash identifier:          JMbUhlJyEFFB1adb5CyWLjxysLTOmC8KJkDm+azaAXQ=
Subject key identifier:   03:13:CF:DA:45:8C:E5:65:F7:94:E4:6F:9C:F7:A2:48:81:0C:51:D1
Authority key identifier: F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
Certificate issuer:       /CN=f15096fe3390449c936e857061d4a6965d408a31
Certificate serial:       01962E2B14985C3767A179956BF8606B498B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
Manifest number:          0AEF
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: 8VCW_jOQRJyTboVwYdSmll1AijE.crl (hash: /0n7qDdE4K3JTjQ57UDnE5QCsCeKmarm8gEnA1PtzL8=)
                          2: rMoZ83VQ7iYFtJcAmlmBDs25c0s.roa (hash: 5UVFXIRMFFdYenUl6z+JEcUUQ5VhSSfJAeVRB/Ej+fc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:14:98:5c:37:67:a1:79:95:6b:f8:60:6b:49:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15096fe3390449c936e857061d4a6965d408a31
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=0313cfda458ce565f794e46f9cf7a248810c51d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e0:a1:d0:4f:e6:ed:b7:89:d1:52:10:c5:8f:
                    cb:41:b9:80:54:bd:40:81:98:d1:92:9b:53:b5:73:
                    8b:43:e5:df:c8:20:da:e8:1c:21:46:b0:dd:e1:6b:
                    48:83:e3:ac:87:ad:88:c3:e1:bd:ed:02:76:1c:82:
                    0b:f9:65:c6:b0:e9:ac:89:74:0f:29:d0:c2:7e:9e:
                    e4:e2:f7:57:77:70:70:d6:0d:5d:d4:2d:08:b4:62:
                    b0:9f:ac:30:9b:1c:0a:bb:6d:69:8f:fe:36:f0:fe:
                    c1:d9:37:75:6e:32:13:e5:56:0f:c3:06:95:1f:9b:
                    9e:47:2a:1f:07:88:0d:02:ba:90:7c:20:67:0d:d9:
                    58:fe:bb:23:85:3e:e6:4f:ed:28:91:82:09:e5:e9:
                    ea:c2:02:32:28:66:e4:1c:b5:e6:4a:71:63:92:24:
                    2e:b6:42:23:1e:d6:47:ae:34:8d:53:59:6e:f4:be:
                    9b:7d:a3:0e:55:52:09:6f:df:0a:18:1a:61:1a:f5:
                    68:a4:23:93:2e:db:db:99:10:5c:03:93:74:ad:4d:
                    9b:47:66:68:81:4a:2d:e6:86:a6:de:06:37:65:6d:
                    cb:6b:64:2f:69:ef:06:4c:a0:19:19:45:31:69:83:
                    4a:09:63:f1:1c:43:72:f7:22:75:0f:37:44:fd:90:
                    26:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:13:CF:DA:45:8C:E5:65:F7:94:E4:6F:9C:F7:A2:48:81:0C:51:D1
            X509v3 Authority Key Identifier:
                keyid:F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c7:a6:b7:8d:f0:8e:a3:d9:49:2c:b9:14:0a:37:28:7e:08:
         a2:05:7f:3d:88:cc:4d:4c:7e:37:ef:4f:5d:38:7d:c9:39:19:
         f1:40:a8:d9:52:f4:f6:4e:a2:96:97:ac:48:b2:62:b8:28:1c:
         b8:ca:1e:ae:d7:8c:fb:a9:4f:eb:95:b9:41:9c:c3:2b:72:94:
         a9:89:d7:f0:80:05:10:3b:0b:59:38:79:22:c9:b5:ea:a4:d8:
         53:f7:a2:7a:f7:95:7c:b5:c2:18:39:16:76:81:67:f9:f0:0a:
         0d:51:6c:00:04:8d:6c:f7:0d:12:f4:0e:40:a2:3e:b7:08:76:
         77:ff:9e:77:4d:0b:35:c8:22:53:28:99:a1:6f:22:21:dd:4d:
         5a:06:bf:f1:53:6f:82:6c:d8:22:63:a1:98:61:df:d1:ca:02:
         83:0b:bc:53:dd:42:4b:d4:10:cd:76:15:87:86:36:5f:d2:6f:
         e4:aa:7e:2b:a4:58:e5:7e:f7:3a:51:41:50:4e:8f:bd:1e:5b:
         bf:3f:dd:a4:b6:68:19:f8:8a:82:48:f5:0c:73:64:6e:b5:9a:
         51:2b:5c:97:74:c5:8e:76:45:fa:ff:ac:df:e0:29:9a:f2:3b:
         e1:cd:de:73:3c:99:7a:fa:41:3b:b8:7c:22:68:f7:2f:6a:c8:
         d5:73:84:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----