Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
File:                     hYAvwdDz46RGJWLS8G8rPe_49Oc.mft (raw, json)
Hash identifier:          ioMCkUwT45zSpoMLSKHSQN2viDKfht23AT9vqKDjBNQ=
Subject key identifier:   0F:5B:95:0D:73:0B:95:B0:AA:4F:3A:51:4F:D0:28:46:D4:64:FE:16
Authority key identifier: 85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
Certificate issuer:       /CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Certificate serial:       01962ECFB17E7A50EB333B5AA9E6D72194CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
Manifest number:          0AB8
Signing time:             Sun 13 Apr 2025 11:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:25 +0000
Files and hashes:         1: 4UJRIsMgzbbOOl_nMZ8awomMSD8.roa (hash: HA5+hPhaR5I2iP9TQnrkM1KP48JQR4MNJZDQicrXCa8=)
                          2: hYAvwdDz46RGJWLS8G8rPe_49Oc.crl (hash: i+l5jm9evtFcH7Gq7JbkO8Vwyz4a3B4DSU0FasL86JI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b1:7e:7a:50:eb:33:3b:5a:a9:e6:d7:21:94:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
        Validity
            Not Before: Apr 13 11:01:25 2025 GMT
            Not After : Apr 14 11:01:25 2025 GMT
        Subject: CN=0f5b950d730b95b0aa4f3a514fd02846d464fe16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2e:41:af:e2:4d:59:73:15:e7:2c:e1:cd:d2:
                    4b:a7:2b:3b:60:c3:04:ee:1e:1b:b3:ec:00:f7:c9:
                    9c:61:de:6f:ae:fe:4f:50:0e:14:c5:1d:6c:77:b9:
                    27:9e:d5:0f:6d:44:a3:80:5b:01:1d:d0:74:c0:85:
                    3a:10:38:e6:b1:e2:e4:68:9f:5e:f5:40:c4:0f:b2:
                    04:17:b4:c2:af:96:ff:b5:f9:a3:e9:8d:4f:0f:de:
                    85:09:e5:dc:1a:56:96:00:e0:b4:c8:64:cc:c3:b8:
                    11:c0:0c:05:26:85:37:65:f0:ef:f7:14:f8:c4:23:
                    96:e7:02:62:50:79:17:26:3c:a6:56:76:f5:be:b4:
                    04:68:88:b9:77:e2:de:9b:cc:35:50:72:f2:39:9a:
                    4e:d0:ea:76:ae:d8:3b:54:fd:38:eb:d0:88:20:19:
                    e1:02:8c:ba:3b:97:1d:c7:82:ee:d8:03:b6:64:17:
                    f6:40:6b:f0:80:f4:7d:e0:fb:f5:a0:d7:96:fb:1d:
                    fb:2d:74:f8:fb:60:d3:22:ca:76:06:77:0d:cd:a6:
                    31:4c:d3:6a:76:b5:cd:6e:0f:97:ee:0a:e8:62:18:
                    62:81:4c:4e:b9:7c:55:35:db:4c:20:eb:23:dc:8b:
                    60:41:11:e4:45:61:63:63:2a:82:72:ac:db:f2:bf:
                    19:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5B:95:0D:73:0B:95:B0:AA:4F:3A:51:4F:D0:28:46:D4:64:FE:16
            X509v3 Authority Key Identifier:
                keyid:85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:49:67:da:e0:c7:74:c1:7d:7f:68:57:d5:6c:0c:4d:fc:9e:
         96:5b:4d:db:a8:a0:11:1a:6f:a7:02:c2:42:88:48:43:16:0b:
         bf:68:34:15:ad:42:1c:02:49:da:f4:2d:59:fa:ef:cc:6a:c7:
         b9:0b:f0:c3:fe:a8:78:8c:e7:72:1c:07:c0:0a:f9:ab:f8:c3:
         f7:2e:32:df:7d:a6:de:c9:82:65:7b:1c:87:9c:9e:f9:20:65:
         c2:e2:b6:31:fb:b4:b9:8a:b8:70:03:6e:b5:9a:30:84:c3:51:
         71:f2:2c:24:f9:0e:05:f3:f7:5a:ec:c2:78:d6:1e:61:6c:71:
         ae:11:d1:7e:0f:62:68:e9:f9:92:ae:a4:58:10:63:3b:29:b8:
         f8:4b:af:d9:9d:73:9f:89:96:d0:3f:49:f8:14:7c:1e:29:6c:
         c7:3b:84:d0:44:31:ec:10:13:20:7a:60:5f:b4:08:73:cc:15:
         8c:c6:d9:98:fe:2a:dd:39:0a:26:8a:0b:e9:e8:6e:43:9f:99:
         12:42:59:72:5c:0c:a9:5b:8a:76:34:38:ad:0c:25:d2:c9:c2:
         59:fc:be:a0:6d:4e:19:d4:7e:ee:75:b6:db:b7:84:e5:47:66:
         e9:82:2a:73:07:60:89:98:bc:f6:a8:b6:62:a4:a5:01:42:6a:
         21:ff:2b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----