Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
File:                     h94IWXXeZYjgf-0TVROqOKztt2M.mft (raw, json)
Hash identifier:          zjzsvaVGuhK5Lkkme0ZIfvIQUFl8RPsffF1AGGNHDwQ=
Subject key identifier:   15:7C:74:31:FA:64:B1:AE:E8:A3:0F:C8:06:F0:BA:9C:FD:13:9A:7A
Authority key identifier: 87:DE:08:59:75:DE:65:88:E0:7F:ED:13:55:13:AA:38:AC:ED:B7:63
Certificate issuer:       /CN=87de085975de6588e07fed135513aa38acedb763
Certificate serial:       01962FAB68ED1761FEF3031B0ACB12F0DCA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
Manifest number:          08D3
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: 2z5OP5uOUPeCHEZvOlemyfzgiqA.roa (hash: Hk782ryuX9Xc6GFCRAe62b1gzyY4Vb/jeKK1cnQhmr8=)
                          2: h94IWXXeZYjgf-0TVROqOKztt2M.crl (hash: GR6eaqCNfWRe5sSl89sMSe5jJMlw9ZndzyxgR8yoVzY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:68:ed:17:61:fe:f3:03:1b:0a:cb:12:f0:dc:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87de085975de6588e07fed135513aa38acedb763
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=157c7431fa64b1aee8a30fc806f0ba9cfd139a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f3:6a:35:d1:c7:84:99:25:10:88:94:ed:62:
                    e5:12:f3:2b:24:78:02:94:55:ad:c8:35:4e:f7:d8:
                    c2:8f:67:15:db:69:c9:2f:ef:8b:aa:3f:d7:f5:37:
                    e6:ef:4e:b2:83:0f:cb:f5:d2:0d:db:b6:ff:ae:91:
                    86:f8:c1:70:ea:ee:71:d5:54:f8:72:2d:ec:70:3b:
                    d0:de:67:23:fd:d5:7f:9e:91:13:a6:11:8c:26:df:
                    04:87:45:7d:f2:a0:73:ec:66:22:4d:a4:90:4e:db:
                    66:3d:5e:a8:58:8e:ad:a0:49:3b:fd:8a:83:2d:95:
                    eb:fc:ad:c6:a4:16:87:ff:96:d2:62:c3:57:08:92:
                    6a:2e:a3:c4:67:7b:1a:fc:14:06:3d:b2:86:d9:2a:
                    70:15:6b:bb:9d:49:75:81:a8:01:0d:c3:13:7c:e7:
                    10:13:53:7d:1b:b7:4d:31:6a:bd:ee:61:ea:dc:56:
                    d5:8c:6a:ad:53:2c:99:88:c5:40:63:ab:50:26:f8:
                    66:92:38:2f:b4:9e:f7:56:34:06:27:b1:56:c9:5f:
                    65:d9:50:87:f0:4b:3c:48:5f:48:76:80:45:3b:9c:
                    6b:06:03:fe:5f:9c:38:c6:76:99:17:7e:09:a8:ac:
                    5b:ad:27:49:94:90:63:99:42:90:e2:17:4b:bf:3d:
                    90:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7C:74:31:FA:64:B1:AE:E8:A3:0F:C8:06:F0:BA:9C:FD:13:9A:7A
            X509v3 Authority Key Identifier:
                keyid:87:DE:08:59:75:DE:65:88:E0:7F:ED:13:55:13:AA:38:AC:ED:B7:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:bc:9b:14:46:7c:2b:b8:b6:8e:52:59:e3:98:cb:06:19:ab:
         39:fa:13:c2:14:2a:f7:8a:0f:eb:cc:c0:c9:5e:92:56:57:c6:
         40:c5:ba:f9:a2:d1:ca:00:23:03:26:00:61:4b:30:9c:11:85:
         5a:34:62:4b:c0:ad:57:87:1d:c5:2b:8f:35:80:07:98:42:c9:
         68:ae:df:22:61:24:77:4c:69:50:6a:20:0d:49:f1:14:83:8f:
         66:25:d6:38:31:aa:ba:e2:61:76:b0:17:f9:e4:ac:47:39:6e:
         76:52:af:44:8b:4e:70:3c:8c:6f:9b:bd:e5:dd:81:c1:64:1e:
         f3:90:f5:be:6d:84:16:87:48:ae:e0:fa:06:70:37:c0:9e:e0:
         59:5a:96:81:b2:4c:d3:f2:47:6d:2e:f4:98:b5:c6:7b:76:42:
         d9:63:ff:42:7b:42:7f:0c:85:e6:2a:4b:40:62:91:ea:7c:91:
         15:9d:7f:46:cd:48:02:e1:8b:00:49:55:7c:7e:48:2a:77:1f:
         7f:1b:79:45:6d:a7:3c:e5:f5:d0:99:3c:cf:b7:f5:fe:ae:38:
         74:c9:46:ef:35:62:c7:31:47:63:04:e3:a1:9b:62:c8:13:d8:
         ba:0b:54:29:da:25:af:84:9d:44:a7:b8:e5:b2:da:06:09:a2:
         cb:4f:e3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----