Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
File:                     h9f30vwTSJFMAGtVq5Py0uM5DeY.mft (raw, json)
Hash identifier:          bVbEzQuBH6gjE1Yyih6ls8ercyVMFgFfenZHMv6Amj8=
Subject key identifier:   8D:2C:BC:F1:C9:66:3A:FC:5C:19:E5:16:D8:E6:CB:BE:C6:8F:7E:CE
Authority key identifier: 87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
Certificate issuer:       /CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Certificate serial:       01962E98900ACF9EE979DBD109C38A4F3E62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
Manifest number:          1252
Signing time:             Sun 13 Apr 2025 10:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:12 +0000
Files and hashes:         1: DC457V004ebo_81e4fxQUpZs59k.roa (hash: koGSw3MBz9AwS+zqOmOgemnpgRcxTDfkN77KAf52zbM=)
                          2: h9f30vwTSJFMAGtVq5Py0uM5DeY.crl (hash: Fb1T8sEmUb99ZCjJWA79N8dY42fNKl7txVM9SzdF8fA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:90:0a:cf:9e:e9:79:db:d1:09:c3:8a:4f:3e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
        Validity
            Not Before: Apr 13 10:01:12 2025 GMT
            Not After : Apr 14 10:01:12 2025 GMT
        Subject: CN=8d2cbcf1c9663afc5c19e516d8e6cbbec68f7ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:53:ed:f3:0c:fd:80:12:5c:59:f9:a7:de:3c:
                    98:ce:35:4d:82:49:ad:f0:14:29:1b:b4:ea:e4:c2:
                    41:ad:5d:04:e7:c9:a0:b3:d9:45:37:95:4c:d0:58:
                    c1:b0:80:73:e9:e1:df:39:69:2a:9d:b8:4a:55:48:
                    e0:11:0f:3f:c6:72:cb:cd:63:f9:b6:08:72:95:1d:
                    eb:fe:ca:12:eb:5d:bd:36:cb:03:62:fb:57:34:c5:
                    eb:fe:a9:21:53:24:69:33:34:81:f1:6b:67:b7:6a:
                    ea:34:17:ab:dc:8b:77:93:2d:4c:3b:c9:c2:f5:14:
                    10:4d:4c:92:54:97:95:25:59:a1:66:6f:c1:35:53:
                    55:1c:09:7a:3e:32:52:0b:1c:45:65:2e:42:64:e2:
                    0a:19:db:fe:41:10:f8:63:b4:93:4a:60:dd:21:6b:
                    1b:1e:1d:3d:7e:51:94:79:68:8c:ae:1e:c7:00:0c:
                    f1:18:2d:c9:53:21:15:52:89:16:00:0b:3d:4b:f0:
                    bf:47:d8:31:7f:61:65:2d:41:32:d0:c3:3b:09:d5:
                    fa:42:2d:80:15:e2:04:f0:f9:36:94:03:bd:1a:6d:
                    fc:d4:b4:da:13:77:95:ae:c1:96:0b:df:3a:cb:91:
                    3d:7d:2e:54:24:97:61:e3:6e:28:94:dd:35:e7:cd:
                    ef:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2C:BC:F1:C9:66:3A:FC:5C:19:E5:16:D8:E6:CB:BE:C6:8F:7E:CE
            X509v3 Authority Key Identifier:
                keyid:87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:41:72:6a:c3:15:93:29:6e:90:f8:90:69:21:4a:99:16:c5:
         d0:9d:f2:8d:5c:cd:58:f3:7f:d8:b7:27:71:dc:76:0c:d5:9f:
         7a:78:e7:87:4f:03:0b:28:7e:7f:87:aa:19:fe:27:3e:cd:4d:
         ff:38:a1:08:cb:8d:68:21:e5:89:35:9a:51:92:f4:ae:c2:62:
         91:65:f2:d3:ec:3a:e2:ea:b5:94:3a:df:1d:98:8b:51:98:50:
         6c:5f:1e:0c:d1:0a:67:5f:81:44:15:5a:85:14:68:cb:10:89:
         77:36:2b:f1:4f:b0:0e:94:97:c5:a4:d5:f2:1b:3b:31:8a:d5:
         95:0e:55:4b:96:f6:f5:97:c1:10:aa:3c:8d:ae:98:82:eb:ba:
         c2:7f:77:5e:36:2c:31:0b:a8:50:ca:38:7d:26:61:a6:d1:e2:
         8a:1a:ca:d5:3b:3d:ff:39:2b:8b:2a:ee:86:39:2d:9a:29:d5:
         af:1d:33:0f:4c:e4:78:cf:2d:a9:76:72:d5:34:f5:6b:ed:c4:
         4d:a3:41:88:10:4f:e2:2f:46:25:00:4a:6e:1a:6a:c0:7d:12:
         a8:12:33:34:fb:01:6d:9e:12:cb:0e:14:93:a4:c8:77:57:47:
         38:53:bb:34:af:c5:bc:14:6d:36:3d:50:50:4e:b1:b5:a7:c7:
         33:90:d2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----