Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
File:                     hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json)
Hash identifier:          tWSQvK4uAlqQzUoQoHi4Pvpb2FefvmJohsYPSXErX+o=
Subject key identifier:   9B:FF:7A:CA:5C:16:FA:A8:09:19:C0:06:7E:EA:D1:B0:CD:AF:92:F7
Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
Certificate issuer:       /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Certificate serial:       01962DF416F87C94C9DD132A46F20E502FC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
Manifest number:          0E79
Signing time:             Sun 13 Apr 2025 07:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:33 +0000
Files and hashes:         1: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: 8srTcrKVmy45+SPXm1BWUwhnb5/zVgzY/7pSRWlQAOo=)
                          2: kDscGP6Kvv2ErG5ZiDcwGfJJgOo.roa (hash: sDpLdqtWZqa+OqK0PcGk2ZySrrYvy+43dMtNOAb22Fs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:16:f8:7c:94:c9:dd:13:2a:46:f2:0e:50:2f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
        Validity
            Not Before: Apr 13 07:01:33 2025 GMT
            Not After : Apr 14 07:01:33 2025 GMT
        Subject: CN=9bff7aca5c16faa80919c0067eead1b0cdaf92f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:14:47:49:dc:6b:59:97:e6:c1:26:f5:d6:9e:
                    62:5b:e3:a7:68:22:2d:d0:58:d5:0b:46:fa:4d:ef:
                    6d:ae:0f:78:0e:d5:da:d0:dd:85:e9:66:93:b7:df:
                    50:5b:c3:f1:ad:39:2a:fa:b0:89:b1:39:1a:e9:c8:
                    6b:08:db:fe:37:a8:a9:0c:b7:91:17:34:07:ef:6c:
                    54:72:67:30:87:a4:d2:76:de:37:91:ff:84:3e:63:
                    64:62:b1:2b:47:f6:53:cf:a2:b2:6d:0e:be:f1:65:
                    1c:f6:b1:a3:cb:16:01:fc:f8:72:f2:07:fd:fa:f9:
                    bb:62:d3:c7:74:13:18:7e:d3:ac:be:9f:e7:07:10:
                    66:94:cd:c9:8b:2e:fe:0b:bb:ca:23:21:00:6b:89:
                    bb:b7:cc:aa:42:7f:27:49:f6:e0:ae:7a:c5:e1:05:
                    b2:05:ee:69:ac:98:f8:43:f1:29:52:c6:cf:60:3e:
                    b5:77:98:44:2f:87:19:cf:01:55:95:50:49:8e:8b:
                    d1:be:fd:d8:79:0e:b7:d1:62:4e:1b:a7:53:09:74:
                    92:fa:67:e3:cd:80:2d:fc:62:4c:0d:4e:42:af:10:
                    35:85:14:0a:6e:bf:f3:31:f9:88:f5:89:4a:47:22:
                    6c:ac:e1:c3:c5:c1:f6:a9:c1:24:6d:cb:b3:cd:8e:
                    35:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FF:7A:CA:5C:16:FA:A8:09:19:C0:06:7E:EA:D1:B0:CD:AF:92:F7
            X509v3 Authority Key Identifier:
                keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:7a:94:8a:0e:ec:1c:b7:25:e1:b9:f5:2b:30:4e:34:d8:da:
         8f:2d:b0:dc:fa:57:89:05:8e:31:ce:fb:b2:f7:23:47:93:67:
         00:00:00:13:9d:8c:34:4d:20:c5:89:29:0e:97:77:ed:87:1c:
         8d:0e:a6:ea:f7:6c:62:e8:13:a3:77:2a:d3:df:6a:aa:99:2c:
         ba:e2:d5:eb:1e:da:2f:83:58:fb:75:a3:9e:a9:eb:4a:2e:20:
         70:4d:a7:2c:5c:31:5f:29:5c:89:6b:87:74:e0:1e:48:cc:2f:
         da:1c:17:84:6f:8a:5b:2f:89:90:70:b6:7e:2a:e3:32:7a:6e:
         c5:b6:92:9d:98:b4:bc:67:91:1a:c8:d7:c3:d9:ac:45:3d:2e:
         aa:e1:f9:de:86:af:62:70:21:6d:13:22:7b:f8:bb:39:76:12:
         00:1c:c9:a5:cc:1a:34:cb:26:63:c8:83:98:3e:d6:e6:d3:e8:
         ea:14:fb:f6:99:84:31:0a:8d:58:4e:b6:a3:0f:db:3e:01:b9:
         6d:49:d6:55:07:b5:25:13:6b:3d:2f:df:f0:c7:27:b6:c4:16:
         31:39:da:db:c9:f3:a7:25:3b:27:aa:01:58:94:62:b6:64:a4:
         c3:90:51:a3:ce:ba:b9:30:b4:a1:56:ed:df:24:be:ef:2f:28:
         10:d7:de:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----