Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
File:                     RETHw600tpd_oYoiN8owa5vuCOA.mft (raw, json)
Hash identifier:          1tYAoFGByDSOUvTx7NYL+3xyMBx/y499z+/YJN2lcJ0=
Subject key identifier:   86:B8:0A:C5:76:C4:45:1E:D2:55:4E:3E:34:0A:74:AD:82:31:F8:7A
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Certificate issuer:       /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial:       01962E61E27BE0394151756646919DDCC039
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
Manifest number:          0FE9
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: 2V9yE_-2gPzUwYdccQgBOoOM18I.roa (hash: eOCHHWhfMlB35sI0btwTirM6dsTLjT95v8bNNnNalmA=)
                          2: NEq6MArjlQuQ-WIB1VyRrErjAd0.roa (hash: MidMhTk3ASBcuW3/c0/stqSyljlKyQu+afJNZt4dhek=)
                          3: RETHw600tpd_oYoiN8owa5vuCOA.crl (hash: nsBDjqTeWiqbKTGwbpV6XTaYQVttHfOqHGXrwT/Z4Xk=)
                          4: T9enhqzdG5yQEOgWkABkrQAk6M8.roa (hash: SxiuxM/I8FF8zreMQuHoAzLYfdJRNYC8zGUE4C2+MUg=)
                          5: TpBonKzdgVHgS_Gy-DCcGH-ISN4.roa (hash: fc1S9Y933e/VnBvBlMJ607HkBmXbxqMq3az/lWDVmME=)
                          6: YIWnRcAakVGioTGRMmr97QBMxt8.roa (hash: 0pAd524EgOV9gt8eDHTEF8KH00KSBimBO4oKROwsaA0=)
                          7: kaShJaLkR3B81NHQpcp6VAc_nlg.roa (hash: pqDRdBas3v1MNi9715+npvAM7Hsxyhh7JGLBbksQ+7E=)
                          8: tLpYmjiy2-hs1MM_Lyatf45ocKg.roa (hash: /IX/rjwA4xnIpYI7Xf4mBV5PcdOdUpUQwLhk+QGjMLQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e2:7b:e0:39:41:51:75:66:46:91:9d:dc:c0:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=86b80ac576c4451ed2554e3e340a74ad8231f87a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:10:0e:87:10:48:83:b5:62:82:d4:bd:c6:71:
                    a2:47:7b:9f:ed:cc:99:00:4a:bf:43:ce:5a:47:8b:
                    f3:94:11:2c:f3:be:83:37:65:f2:c8:a6:4b:20:8d:
                    85:e3:98:26:b3:2a:87:b1:64:17:fe:c2:3e:45:e7:
                    d4:34:e5:c4:fc:5e:d8:4b:e1:67:26:70:d8:9c:4a:
                    f1:6c:ff:5a:85:b6:f5:1e:b3:90:ce:91:43:13:92:
                    4a:2a:16:54:a5:73:6f:46:fa:57:9d:47:33:af:3e:
                    2a:17:3b:0e:be:fe:a9:32:40:55:37:3b:8b:3e:0e:
                    74:0c:af:bb:85:2b:4a:04:ca:7c:c4:fd:b6:80:a7:
                    e8:8a:32:8d:70:05:c7:c8:52:2f:98:31:15:69:0d:
                    d5:92:93:59:ea:d6:99:43:58:01:70:02:df:8e:58:
                    c2:e3:43:5f:ac:49:65:a9:a7:c3:01:e3:2e:de:30:
                    24:06:3b:c4:c4:66:06:37:57:b5:57:74:ea:4a:38:
                    76:7e:21:9c:02:bd:fb:00:1d:e0:7e:4b:28:aa:aa:
                    7c:6d:b4:f2:14:47:65:17:4d:77:69:e6:49:bb:af:
                    66:30:a5:bb:47:a4:b4:bc:f9:dd:1a:59:bf:3e:39:
                    08:06:53:01:0c:5c:1a:59:cb:d3:15:61:b0:b8:a0:
                    46:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B8:0A:C5:76:C4:45:1E:D2:55:4E:3E:34:0A:74:AD:82:31:F8:7A
            X509v3 Authority Key Identifier:
                keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:15:8b:41:58:34:03:a6:7d:19:a5:27:1e:f9:e4:04:06:19:
         b5:65:6c:55:12:df:83:0c:ef:c0:6a:e9:0c:8a:b8:dc:bf:a7:
         68:4e:cc:68:03:87:0e:88:74:bd:97:86:6c:5c:7d:d6:5c:c8:
         7a:97:9d:4a:97:d3:66:33:7d:13:44:d9:b0:87:43:26:6a:0c:
         15:7e:89:58:cf:4e:dc:19:1e:84:e0:41:72:7b:05:40:a9:95:
         56:5f:ab:b3:51:55:89:b0:7f:ba:73:2c:7e:4d:63:81:c9:bd:
         5e:2d:c2:55:7c:35:00:04:7e:13:ca:01:55:9a:44:09:46:3f:
         cc:43:20:1c:be:4e:9e:ed:a4:5b:b8:9f:dc:4a:d5:68:67:6d:
         e8:0f:06:48:a1:17:f1:30:fd:87:24:ae:81:b3:17:97:53:23:
         b2:67:8a:b0:85:03:4a:56:1f:2c:d8:04:58:a8:36:09:54:d4:
         2f:a9:38:73:f4:78:62:06:a5:de:aa:4f:f2:a7:54:57:31:ce:
         ee:3b:9d:2d:ba:76:3e:b9:33:44:fc:35:4a:8d:9c:60:a4:7c:
         fe:72:b2:8f:3b:f8:4a:28:c6:44:01:fd:05:10:bf:ad:39:de:
         8a:49:1f:1f:06:f1:4d:2f:a6:05:c4:80:4a:e2:d9:de:60:f9:
         30:a3:e1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----