Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/ca4114-2fb9-43d1-b528-032af836c172/1/hSOM5-r2mlui8JR7K6BTOUtFts0.mft
File:                     hSOM5-r2mlui8JR7K6BTOUtFts0.mft (raw, json)
Hash identifier:          ByjF2dnCLUyBxXIv/KqCCqiLVYpyYg7PRBZ1WJkd1nw=
Subject key identifier:   1C:68:2F:1C:62:F0:3D:21:4A:4A:4C:3A:7D:C4:0F:D9:ED:09:53:CC
Authority key identifier: 85:23:8C:E7:EA:F6:9A:5B:A2:F0:94:7B:2B:A0:53:39:4B:45:B6:CD
Certificate issuer:       /CN=85238ce7eaf69a5ba2f0947b2ba053394b45b6cd
Certificate serial:       01962ECF8E2007E6C8CF88F17ED2D2B47589
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hSOM5-r2mlui8JR7K6BTOUtFts0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/ca4114-2fb9-43d1-b528-032af836c172/1/hSOM5-r2mlui8JR7K6BTOUtFts0.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: WlFkHZf-mGa6meWaQmN57qSrEtA.roa (hash: B5J0da5BqpBMDIf+RMe68Zm2sCoZIjqiRagoU19Nd+4=)
                          2: hSOM5-r2mlui8JR7K6BTOUtFts0.crl (hash: r/LlaYnWbae0fYBcVP0XxSd/i2RarUVbhmlH1JCEJhM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8e:20:07:e6:c8:cf:88:f1:7e:d2:d2:b4:75:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85238ce7eaf69a5ba2f0947b2ba053394b45b6cd
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=1c682f1c62f03d214a4a4c3a7dc40fd9ed0953cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:22:05:66:23:57:7c:68:cd:d4:64:e4:13:74:
                    5d:cb:33:cc:3f:72:11:f4:f3:49:c5:6c:86:dc:4f:
                    ff:64:2e:57:6a:fd:b4:d8:ea:a9:a8:cc:0b:91:24:
                    85:e4:a5:ca:7a:48:a1:bc:84:63:00:0e:c6:4a:f3:
                    2e:82:86:5a:90:e7:4e:56:aa:c9:e5:bc:c7:a9:12:
                    7e:a0:12:a3:ba:95:47:0c:71:6a:95:eb:68:3e:86:
                    36:1d:72:8d:5f:e1:df:91:91:c1:83:20:40:34:25:
                    b4:63:bc:0f:76:c0:92:93:87:2b:c0:46:1e:fc:09:
                    20:36:59:02:42:40:67:1d:1f:5f:db:df:d3:46:11:
                    2f:43:a9:99:41:d1:86:4e:6b:3c:39:b2:ed:2f:18:
                    1e:8d:7d:2f:68:27:af:3a:69:d6:13:42:e3:1f:2c:
                    eb:31:4b:aa:18:5f:95:da:d2:e9:74:53:95:f6:6a:
                    71:d2:d2:4c:7d:e9:75:c6:bd:98:bf:23:46:e8:22:
                    ca:87:bb:94:b6:3c:e0:b3:61:bf:85:8f:ce:90:0e:
                    93:67:17:03:7a:d5:6b:69:4d:2e:ed:a4:df:ce:9c:
                    38:92:98:2d:84:7b:65:2f:1a:28:53:6e:52:f0:9e:
                    e0:42:d8:dc:ca:da:9b:51:0f:bf:a6:49:93:d4:4c:
                    a0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:68:2F:1C:62:F0:3D:21:4A:4A:4C:3A:7D:C4:0F:D9:ED:09:53:CC
            X509v3 Authority Key Identifier:
                keyid:85:23:8C:E7:EA:F6:9A:5B:A2:F0:94:7B:2B:A0:53:39:4B:45:B6:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSOM5-r2mlui8JR7K6BTOUtFts0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ca4114-2fb9-43d1-b528-032af836c172/1/hSOM5-r2mlui8JR7K6BTOUtFts0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ca4114-2fb9-43d1-b528-032af836c172/1/hSOM5-r2mlui8JR7K6BTOUtFts0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:6e:dd:10:6a:64:13:ca:01:d3:70:ad:e9:b5:71:54:4a:a9:
         fb:53:25:70:bd:4d:2f:fc:06:8f:15:b1:d7:1d:19:6c:c1:11:
         78:59:bc:1e:1e:88:b2:f5:4b:d6:7e:bc:af:7c:bd:07:9d:89:
         13:9e:2f:c0:8b:fd:5e:a4:3c:6c:6b:eb:06:3f:30:4b:41:b1:
         d3:af:7f:83:7f:cd:fc:99:53:e0:1a:a4:c3:e2:78:0c:d1:a3:
         df:03:10:6a:bf:9d:73:b7:ac:21:4a:a6:6c:25:b9:3b:4e:cb:
         91:92:48:4e:58:c7:4e:09:41:9b:49:ed:b5:a0:98:22:61:f9:
         c1:0f:db:ae:51:f3:bf:b8:b7:29:96:6b:0e:2b:2e:91:73:85:
         9d:63:a4:80:68:22:83:f1:c7:92:30:17:df:d8:b1:4c:35:e2:
         94:c5:aa:3c:82:ae:49:11:77:b6:ca:21:59:20:82:9f:74:39:
         b3:1e:d0:3f:e5:07:b6:9c:1e:09:2e:76:d4:2e:fe:84:a9:20:
         89:28:d7:6e:0e:58:b6:62:b2:8c:d5:ad:81:22:2f:d6:06:36:
         28:9a:65:b0:92:5b:67:64:c3:f1:e5:f0:35:c3:d3:56:4c:01:
         ec:14:4e:34:e3:a9:d0:6f:0a:df:33:91:54:f6:3f:16:c3:d0:
         e4:46:5f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----