Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
File:                     8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft (raw, json)
Hash identifier:          SRTRMGM/pV+ZbD2LVtp2CRmErm33Vo2JigW6y8xtZA8=
Subject key identifier:   FB:46:C2:3A:02:0B:AF:96:27:82:2A:2B:6B:D5:04:8E:F1:6C:B4:F6
Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
Certificate issuer:       /CN=f20bf46303ff54a505f533c554251923e41f5926
Certificate serial:       01962DF3A4A2BBA41C0D10026FBA8EB310DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
Manifest number:          065B
Signing time:             Sun 13 Apr 2025 07:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:04 +0000
Files and hashes:         1: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl (hash: uVKYAFASFTJTWyQtBGO/LXcBAVrEKgjsOxIFwLYcmh8=)
                          2: nJ3bZDTF3klediLdsGzrGEizejI.roa (hash: XOv5pl5Y0ikBc3XP047Nh+8GGnppEmfe5vg+dWr14YI=)
                          3: qnlY-2XHeoB5T91L-eAv--psw3s.roa (hash: GlcTsLYuOrrcX+rD96Cshdq9OCpUu7GdPBcBG+rwyLk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a4:a2:bb:a4:1c:0d:10:02:6f:ba:8e:b3:10:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926
        Validity
            Not Before: Apr 13 07:01:04 2025 GMT
            Not After : Apr 14 07:01:04 2025 GMT
        Subject: CN=fb46c23a020baf9627822a2b6bd5048ef16cb4f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:89:f5:c6:6f:9c:9d:0b:18:35:15:5f:8c:8f:
                    03:28:e6:55:b2:c0:1f:a9:94:da:e5:d1:6a:c2:dd:
                    e2:ef:6d:4c:d9:dd:05:0c:32:fb:ba:95:b3:45:83:
                    1d:a7:dc:3a:03:c6:1c:69:9b:81:23:ba:8a:40:54:
                    31:e8:b7:10:64:99:18:7e:56:3c:cf:27:bd:d9:1e:
                    3c:60:cd:09:08:81:95:66:8e:4d:f6:e4:a6:82:7d:
                    c0:e3:86:c2:95:04:f9:9c:bc:ce:48:ed:33:e6:9e:
                    c1:d3:40:24:8d:54:1d:44:e8:9d:57:77:1c:c0:90:
                    19:ac:84:e3:88:1d:5f:ad:77:91:f3:f8:20:19:58:
                    d9:0b:09:b9:14:85:c2:e7:51:8a:ae:04:2a:d7:82:
                    13:2e:84:d6:6b:a5:8b:fb:4e:c9:04:15:a5:c5:0e:
                    0a:c2:18:a4:47:21:41:8e:fd:32:2b:2b:40:13:e6:
                    ac:0f:de:be:e3:84:59:b7:3f:bd:dc:86:97:51:2a:
                    58:d6:bb:d8:b8:1b:ce:94:86:de:40:50:04:fc:03:
                    e4:63:d1:a1:bc:b5:e8:1d:92:4e:9d:75:d0:90:98:
                    d4:38:01:2d:10:ff:2a:b5:01:7f:f8:4c:9e:62:25:
                    24:36:72:10:82:61:db:26:97:35:37:75:ac:d5:8b:
                    0d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:46:C2:3A:02:0B:AF:96:27:82:2A:2B:6B:D5:04:8E:F1:6C:B4:F6
            X509v3 Authority Key Identifier:
                keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:1a:ad:47:12:c9:84:d2:cd:ff:c8:c7:f3:97:17:1c:29:78:
         4e:0b:cf:01:a6:2f:74:ce:e6:8f:50:5a:8a:c3:d2:ab:b4:fd:
         db:0a:e4:11:5e:94:ed:22:19:51:1d:80:45:49:8c:f3:d2:23:
         1e:bb:cc:e9:e7:63:0d:56:37:d4:3b:a3:d7:c5:48:e8:58:50:
         86:1c:83:0f:d4:c0:6e:fb:9a:8c:d3:bd:cd:80:88:33:68:f8:
         f9:db:7a:19:f1:a6:48:02:e0:3a:b7:92:31:3d:29:13:5e:04:
         e1:02:f3:c7:46:19:17:70:4b:12:88:9f:02:ad:45:f7:8f:6e:
         d8:93:c7:bb:c9:50:f0:ee:fc:61:33:10:b1:6c:c3:3c:29:36:
         a1:ca:90:b4:34:01:34:37:4e:a7:36:18:9b:ce:21:ee:2c:40:
         66:89:ce:6c:a8:7e:07:9a:75:a6:ed:38:b0:0d:fd:3b:26:f5:
         ae:5c:87:b6:43:43:8c:dd:01:82:fa:ce:60:1f:1d:55:a2:ac:
         60:95:23:13:43:1c:91:4b:34:7a:b5:39:cd:c1:21:fb:73:a3:
         12:3a:d8:3a:e0:37:ca:03:63:e3:33:48:7e:cf:47:2f:fd:5c:
         b2:6c:86:a9:22:4f:f0:5d:4e:fa:c9:2c:80:12:fa:2c:64:6d:
         88:50:d7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----