Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
File:                     8gwo0Z4N-1NIJqojqlBq9oowW3o.mft (raw, json)
Hash identifier:          jHQ7J+HbzWa3R/qtOGh7DkRiiQ5o26TgDXywMhC8AuY=
Subject key identifier:   E9:20:79:4D:B7:8B:82:80:C0:E6:B6:CA:DF:4F:AF:A5:6C:29:96:B4
Authority key identifier: F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A
Certificate issuer:       /CN=f20c28d19e0dfb534826aa23aa506af68a305b7a
Certificate serial:       01962E988D66205295A485F6E212BC1D24A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 10:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:11 +0000
Files and hashes:         1: 8gwo0Z4N-1NIJqojqlBq9oowW3o.crl (hash: XB5AQc2/PDRGIyK+hBOTEOc2tjv2HxwxB73OhUTwsKs=)
                          2: eCt_o7wQa4uTOlJ8RZzlmDoTQs4.roa (hash: PGIcRqsMSnRyuLEgYQdmyq8FNdFdg9Cwl+Xi/IOiL8U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8d:66:20:52:95:a4:85:f6:e2:12:bc:1d:24:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f20c28d19e0dfb534826aa23aa506af68a305b7a
        Validity
            Not Before: Apr 13 10:01:11 2025 GMT
            Not After : Apr 14 10:01:11 2025 GMT
        Subject: CN=e920794db78b8280c0e6b6cadf4fafa56c2996b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:9b:ca:51:6d:39:a8:ee:62:9c:24:fd:33:
                    89:e1:f1:b2:11:50:26:cb:2e:e0:8b:51:c2:30:41:
                    72:74:6f:f6:85:d3:dc:d0:dc:1d:fa:a1:3b:df:4a:
                    0b:32:33:d1:dd:3c:5f:8e:31:0a:1c:9a:a8:5e:15:
                    8c:fb:b8:9a:fe:bc:df:a7:b2:aa:cf:c2:59:1f:07:
                    c9:cf:fd:d6:bf:95:71:81:18:51:ad:d2:e2:9a:f1:
                    fc:8c:c9:c5:bb:bb:78:25:fc:77:9c:f1:ca:78:1b:
                    81:46:51:ab:da:a1:4a:d0:dc:35:d6:ca:02:28:7a:
                    9f:90:06:d7:f0:8f:3e:b3:1d:cb:9b:92:d1:49:2e:
                    c6:ce:53:7f:49:ba:16:b0:e5:e0:93:29:56:06:23:
                    91:f9:0a:7b:bc:f4:2b:91:2d:79:ae:0d:0b:60:be:
                    9e:f8:97:7f:a6:4e:97:71:e2:17:d3:ae:36:62:87:
                    10:d1:4f:c9:83:d8:a2:e1:cf:41:c0:5e:53:a3:48:
                    f7:97:b3:1a:93:c9:e9:e0:5e:36:9e:52:4f:71:df:
                    60:9d:8b:df:fb:d4:9f:5c:99:21:ee:0f:f8:93:51:
                    44:5e:3c:fa:8e:65:8d:b5:95:93:6f:37:65:8e:07:
                    70:2c:cc:17:0e:a3:b3:c3:7d:68:9d:49:7b:63:b5:
                    ab:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:20:79:4D:B7:8B:82:80:C0:E6:B6:CA:DF:4F:AF:A5:6C:29:96:B4
            X509v3 Authority Key Identifier:
                keyid:F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:90:66:87:3f:24:1b:ec:ad:82:7a:2d:88:11:5d:55:65:91:
         7d:ce:77:74:a4:99:32:07:13:f9:00:d6:01:1d:df:cb:8a:3a:
         3a:ea:94:9f:36:04:87:2f:1f:c1:9e:73:a4:b2:f8:4d:e6:66:
         69:a9:d7:54:f9:b1:ee:de:ba:57:01:09:70:87:0d:18:66:7d:
         a9:78:a3:ae:b9:37:32:92:20:f2:ef:25:ca:bd:b1:75:3a:6d:
         d0:66:9f:34:ff:0c:54:a9:e4:94:50:5e:96:75:23:07:80:e2:
         63:69:2b:30:e0:70:b9:0f:2c:d9:23:ed:f4:90:c5:cc:42:26:
         91:0b:9a:ef:d2:7d:f1:dd:8d:d1:ee:35:04:08:a9:00:39:d4:
         50:11:01:8b:09:34:bb:c2:da:c9:a4:54:23:48:e7:8e:2f:bc:
         97:51:81:6a:8b:9b:96:2d:29:79:b6:f8:fe:b6:1b:45:f0:c6:
         3f:91:8b:5d:0f:72:6f:b2:17:24:ec:39:86:29:f4:51:bd:1d:
         14:58:3d:73:fc:b8:5d:2f:b7:d5:6a:0b:96:8a:59:de:c3:3f:
         e4:9f:10:85:e8:27:aa:47:25:4d:b6:2f:a7:c3:bf:fc:74:a3:
         6c:25:8d:87:18:80:b6:66:05:f6:ea:de:d5:55:af:98:d7:35:
         83:da:d7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----