Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
File:                     8fGG6XCXyEF9lDfXDP38UnMxtag.mft (raw, json)
Hash identifier:          1235koAXV9aG4J26YfHMAp6PmvfXde7F2SY3+mVnxnc=
Subject key identifier:   49:9E:95:2F:99:56:59:E2:88:B5:91:1E:44:95:A9:FA:A9:49:4B:24
Authority key identifier: F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
Certificate issuer:       /CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Certificate serial:       01962FAB6C63C15AAF6F7AA062F333DBF3F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
Manifest number:          096F
Signing time:             Sun 13 Apr 2025 15:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:25 +0000
Files and hashes:         1: 8fGG6XCXyEF9lDfXDP38UnMxtag.crl (hash: nTXVOVg+WJpWSP6/THholahDdfBZ1G+eiVDSp+WocsM=)
                          2: Bb-dCG0MYANSL8Bk5tQCjYBHu7I.roa (hash: 0dT55FR6gYNAR7wtBsJy+EY1xVBw/famE9UI3Od2H8A=)
                          3: K5Oof9CYQW5Wc9ghK1PUdN-aFTY.roa (hash: 2dlcOZzL+Eim7W+NTEiKqnv/Tt9OOEdX1RMt+wWQD9U=)
                          4: hwiO597jiOerCy1jD6kKNf_z4mE.roa (hash: At2Ig8rywEMbpAnMXYd8IjR4QLHdmR+nptBnEkQohjg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6c:63:c1:5a:af:6f:7a:a0:62:f3:33:db:f3:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
        Validity
            Not Before: Apr 13 15:01:25 2025 GMT
            Not After : Apr 14 15:01:25 2025 GMT
        Subject: CN=499e952f995659e288b5911e4495a9faa9494b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:33:9c:4d:b5:76:01:3f:79:4e:27:ab:07:b9:
                    c5:8a:ae:72:b7:d6:fa:aa:b4:6e:2e:6c:d4:15:0d:
                    a3:5b:73:34:d7:ca:76:35:d1:f1:da:a2:4e:6a:9d:
                    23:f6:39:b5:36:d6:3a:6f:bf:23:de:c5:49:62:d9:
                    f9:65:bd:b7:79:d9:6e:bc:03:71:97:dc:2f:a4:a5:
                    31:fe:cd:46:24:c9:fa:e5:1d:04:af:ae:50:80:01:
                    0a:0a:8a:6c:f9:38:8d:50:cf:bc:ef:2d:4e:b4:3a:
                    8f:42:b5:38:ea:7d:0d:48:da:43:4c:dd:33:d9:70:
                    ed:d6:a0:fd:21:ee:b1:c7:02:25:b4:a9:4a:0d:4a:
                    54:d0:e4:71:e5:8b:e6:2f:c0:ad:97:4e:c2:f4:fd:
                    1e:3e:8f:f6:00:f2:b6:a7:92:02:1a:50:3a:0b:b9:
                    46:55:2b:05:ef:1e:e4:1b:50:71:7e:d7:91:87:49:
                    1a:61:4d:fd:86:b3:89:9d:8b:44:06:30:88:5b:03:
                    89:1d:38:94:0d:29:c9:be:31:33:b5:ee:c3:dc:fd:
                    b7:77:2f:a5:c8:4c:35:70:d7:91:e0:a9:3b:05:b7:
                    46:fd:28:79:48:58:6c:b7:d9:7e:bf:8f:0c:be:e3:
                    b9:da:0f:62:9b:cf:d7:93:e4:59:ff:62:0f:ce:20:
                    df:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9E:95:2F:99:56:59:E2:88:B5:91:1E:44:95:A9:FA:A9:49:4B:24
            X509v3 Authority Key Identifier:
                keyid:F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:9c:86:ba:08:ee:ef:25:90:33:15:26:43:68:c3:1f:a5:c6:
         c8:db:ff:ae:65:7c:32:97:20:4d:50:ae:40:46:dc:ef:b5:b3:
         15:88:6e:ae:0f:fa:6c:b8:9d:cc:6c:de:b8:e4:e9:19:66:41:
         9c:ce:b6:68:7a:9a:3a:4a:1c:b4:ec:69:a7:f7:f1:ad:59:bc:
         aa:f9:c9:00:76:ed:7e:89:dc:d8:4a:37:10:c0:16:23:70:5a:
         ff:7b:b0:0a:00:b4:ea:a1:f0:8d:26:81:59:96:73:e1:67:4b:
         f0:3f:e9:a7:e8:f2:9f:41:d8:2c:b6:db:9e:08:f6:75:53:0c:
         7b:50:b3:46:67:7f:f8:9b:72:08:58:31:82:65:f6:59:f7:b0:
         7e:5d:e4:22:c4:d3:da:0b:9b:cf:f0:e6:0f:99:6b:4f:78:6b:
         01:d0:82:e0:2d:d7:27:9d:87:62:ed:ef:9e:f2:40:9e:3f:cf:
         db:91:6b:87:ec:83:a4:13:25:d0:04:81:28:5e:ac:54:8c:ce:
         f0:c3:1a:e7:4b:e4:fb:4d:c0:d0:a6:00:27:9f:49:96:3d:14:
         ad:64:80:9d:e8:8c:f8:8f:74:4a:b8:e9:d6:d3:6d:15:4d:2f:
         61:99:92:d8:85:c6:60:24:52:73:ba:e2:eb:6a:da:84:b3:6e:
         51:35:11:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----