Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
File:                     8uKBD0mzb91kHDJr0d5OQtEosEY.mft (raw, json)
Hash identifier:          Eiuu/uu3YpOmT7mWvv8g8B3p+UtHBXUq48AyVuafrIM=
Subject key identifier:   B5:C6:7C:F3:F4:31:75:20:AB:77:FD:A5:E6:45:F0:A1:E7:B2:53:88
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Certificate issuer:       /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial:       01962E61915596AE362250E2DD8B95402641
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
Manifest number:          14F5
Signing time:             Sun 13 Apr 2025 09:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:08 +0000
Files and hashes:         1: 1nLm5M5xfJ_suNGM5E1Zv1P9buc.roa (hash: 8x4G+E8iExmOXonfPhkgFAssRVwUmXgRDU/QwrPhfTc=)
                          2: 8uKBD0mzb91kHDJr0d5OQtEosEY.crl (hash: EJZOR2uYOrosA0r53YDCQcy0qcuBBfYqMnG8vfcFE9Q=)
                          3: Lfi2kFGwKCjTFh-UgGwG9fE3y28.roa (hash: vsaKPg/3Dci9H1drLTZRN5KQySI72yp3XcQ7k6Dlcjo=)
                          4: _nUioJBQYiP_fVr8BJqtm1b4PRs.roa (hash: 8TwcjLFByQyQOwz+CZFr+OHfzp46TUFKqsAmkEkj8SM=)
                          5: aTc8S3bYqZoD9jiepL9oUB_LXc8.roa (hash: ZM0nvVCM2yUnFFGdw51jOTnM2p1Qj9SS/GteRoRmdLI=)
                          6: cSIsSraiS7nIkZaNHDPeLhmfWzw.roa (hash: 6RDnXeZI7Aggjdy420rt58R6tW8oEB+ao9gxbA9zhLY=)
                          7: cT2NBd6CzvlyjEEfvaGsHGPxIbc.roa (hash: 5qkGkFqB6MaSnnKFQR4ILKQDwkrOhYsEol0WfvvJ+hs=)
                          8: mgsVdxyrFBjubnGQwn9ZD0Aa8KQ.roa (hash: WUYiTP5VTCdXuJgIU+Sgp6znUUnvoPyUsuU1tYAduHA=)
                          9: qhtmZa0GBJu-LNeg5d5k1hem6bE.roa (hash: Uh/IbFG52qMt7jSUYgnpbLvKrotH1qlqQb6PDTI4TP4=)
                          10: wodM1-EUQJUVgPu2FeLNzhcjNAQ.roa (hash: oqpoLkjU7X7RENp32UMSCTEvk2YhpXGRDxHAfJ9Hiks=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:91:55:96:ae:36:22:50:e2:dd:8b:95:40:26:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
        Validity
            Not Before: Apr 13 09:01:08 2025 GMT
            Not After : Apr 14 09:01:08 2025 GMT
        Subject: CN=b5c67cf3f4317520ab77fda5e645f0a1e7b25388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:83:ce:fb:57:6b:1b:3c:69:8b:2d:d8:a2:66:
                    37:83:33:17:02:fc:e2:1f:d8:ac:c5:32:75:c9:23:
                    12:53:28:43:f6:fe:12:72:ec:77:d2:74:14:e1:5a:
                    a1:6c:d8:2c:f3:c9:6b:54:73:91:f3:8a:6f:14:35:
                    5c:ed:18:3d:47:15:cb:0c:5e:1f:44:2c:eb:25:ae:
                    c2:29:46:d1:5c:55:0e:f5:ab:93:df:74:92:ce:57:
                    50:e5:7f:8e:93:12:7f:58:25:95:76:da:ca:3b:2f:
                    95:25:87:60:e0:23:37:14:8d:f1:c2:2b:a3:03:06:
                    2c:88:e8:2a:fa:bc:fe:16:7f:45:79:2e:1b:9c:70:
                    5e:81:0d:26:cb:d5:3f:4d:d9:ce:e8:e6:c6:c0:7f:
                    d5:c2:18:2b:da:38:57:64:7a:46:b8:29:03:b7:01:
                    27:54:11:bd:11:d0:b1:e7:32:d4:d1:de:8c:81:2c:
                    15:84:6d:32:15:47:cb:93:c6:05:f3:c4:a8:3d:83:
                    f5:27:42:77:35:39:e5:89:cb:48:37:4f:2a:cd:6f:
                    c0:0f:42:99:a3:af:0e:f5:df:dc:af:a6:97:db:f4:
                    0d:8f:cd:c7:e2:e2:a3:3d:5c:9e:6c:f7:d5:e0:4d:
                    23:98:7a:61:0b:e6:11:5b:c8:84:74:c3:19:37:b1:
                    d0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C6:7C:F3:F4:31:75:20:AB:77:FD:A5:E6:45:F0:A1:E7:B2:53:88
            X509v3 Authority Key Identifier:
                keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:82:c4:51:e3:77:bc:6f:e7:ef:55:3d:0d:7b:bc:33:81:2e:
         62:d3:cf:98:7f:69:25:b1:23:af:22:9e:08:e9:93:bb:55:ed:
         9b:92:4b:f9:c4:47:b9:a7:70:d9:24:6b:eb:9d:4c:5c:73:4a:
         c1:37:f8:1c:4f:e7:ff:4c:0b:6b:25:25:33:9d:38:07:c8:47:
         a7:9a:e3:3d:17:f9:f2:9d:3c:a7:a6:8a:39:e8:dc:67:0b:3d:
         34:21:8e:3a:eb:4e:4c:3f:54:1c:68:a2:d1:c3:73:02:91:12:
         5d:50:23:b4:cc:3e:c3:d5:18:7f:4a:aa:f3:76:d6:38:4a:f1:
         d9:cc:2f:54:b5:bc:24:45:f9:b6:ad:eb:9a:6f:c4:2b:9b:71:
         fa:78:65:bd:90:46:f7:45:f7:1e:8b:ff:66:9e:fd:4a:8e:a4:
         dd:2e:70:1e:d6:3c:af:fa:a6:d6:10:08:6b:50:54:69:76:96:
         7c:20:91:19:b0:34:3f:c9:ae:bb:74:fa:34:14:ad:cb:67:34:
         64:d4:01:12:0f:a4:81:02:dd:c6:3c:5a:fc:ce:c6:b0:96:c6:
         1a:06:bb:db:6d:c1:5c:ba:1f:07:7b:fa:40:fd:58:a9:5c:7a:
         bd:02:c1:98:c1:ad:12:fd:cf:d1:7b:06:db:a2:6e:f5:0c:88:
         05:5f:61:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----