Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
File:                     hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft (raw, json)
Hash identifier:          LFU/cgvpNaRkVXE9gruG8SBPuDioHX+t5EERrSauL6w=
Subject key identifier:   75:8A:C3:4B:5F:FB:96:44:51:E8:DF:90:BA:31:6B:41:39:56:18:0D
Authority key identifier: 84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C
Certificate issuer:       /CN=84926c47a3607f51a39e1c91e7897f85f47e347c
Certificate serial:       01962F74B7C9225B1A30282D22CF6131AE86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
Manifest number:          0848
Signing time:             Sun 13 Apr 2025 14:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:40 +0000
Files and hashes:         1: hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl (hash: CEO/7wGkStjAF+yqpxIa3pssCSSx1nnOsLtpOpIvFUY=)
                          2: nkA7CUcmlzAJuGx_3HjuUPjmAbc.roa (hash: FtjNcs/Ikv5rVNiwdDeOxS0oJdHrtBYVifsyHe4+WbE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b7:c9:22:5b:1a:30:28:2d:22:cf:61:31:ae:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84926c47a3607f51a39e1c91e7897f85f47e347c
        Validity
            Not Before: Apr 13 14:01:40 2025 GMT
            Not After : Apr 14 14:01:40 2025 GMT
        Subject: CN=758ac34b5ffb964451e8df90ba316b413956180d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2e:ba:15:a3:b3:31:d7:db:b8:42:5f:fe:b9:
                    f1:ec:48:d8:82:ba:ba:eb:c2:ce:df:28:95:e0:26:
                    c4:fd:95:f2:ec:c1:72:5e:0b:16:8b:8e:10:84:e3:
                    ee:84:d6:eb:38:ee:2f:2c:57:36:47:61:2c:7f:35:
                    a2:c0:49:a9:62:1f:b6:d5:8c:1f:a7:e4:82:19:9a:
                    c6:f0:7e:af:2b:38:09:32:0b:bc:81:a3:46:d8:40:
                    c2:43:6a:0c:9a:3e:ef:4f:a4:21:d4:0b:56:59:6c:
                    b3:4f:69:4f:f5:a4:83:21:e6:4a:b2:f1:f4:8b:ae:
                    63:6d:07:e3:dc:25:4a:92:e5:ff:ff:9f:36:29:02:
                    a9:6f:dd:dc:c0:81:a5:e3:7e:12:ea:a2:e0:d9:1d:
                    54:ea:dc:85:43:0f:f5:f4:b2:c1:82:77:85:6d:f5:
                    a8:81:f1:0b:52:f4:4e:1e:80:fc:bf:ff:5d:96:b0:
                    ea:8e:9d:90:19:7f:08:53:a3:83:63:be:25:1e:3d:
                    d1:80:9b:8b:31:56:ca:8c:be:60:72:70:57:78:69:
                    58:13:c2:01:59:76:b2:8b:87:27:e6:65:43:d9:16:
                    ce:04:a4:cc:88:e9:2b:01:16:4b:4a:6f:97:82:07:
                    d9:c3:5a:41:0a:61:2f:ce:4d:57:a7:fd:40:55:db:
                    30:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8A:C3:4B:5F:FB:96:44:51:E8:DF:90:BA:31:6B:41:39:56:18:0D
            X509v3 Authority Key Identifier:
                keyid:84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:42:4c:3f:07:60:9c:3c:7a:4c:30:f2:6a:96:7b:14:ad:48:
         97:d5:bd:cd:42:31:0d:30:1f:ba:e6:f2:d7:98:6b:ad:29:76:
         7d:3f:9c:52:42:dc:6d:a5:19:35:f5:1b:48:4b:82:67:5c:47:
         a5:e2:af:55:ec:18:7a:ba:63:98:d3:bb:b0:45:71:14:ec:dd:
         bb:3d:49:53:f1:7f:4b:53:4e:8d:2a:21:1b:64:49:df:a6:cf:
         15:8b:da:8b:f3:ed:3e:cd:d6:58:37:bb:a8:ea:ca:30:21:8f:
         e6:99:6e:31:88:cb:c1:81:ad:e4:0e:c9:ec:ed:d1:f3:5d:b5:
         a0:9f:6f:55:f2:ec:72:6c:e6:e7:fc:2a:7f:75:15:0f:6b:d7:
         2b:dd:a1:21:5a:49:1b:c7:fd:95:ca:54:9b:47:eb:ef:93:94:
         9e:11:d2:b3:89:69:aa:57:e0:fb:41:3d:f8:f5:a7:54:11:7d:
         92:ba:20:c7:bf:d6:c8:45:3c:e7:06:81:a5:63:2f:b1:b9:a6:
         62:fa:b8:c4:41:4c:1f:cd:b8:32:d3:f4:c9:95:00:8d:96:1e:
         de:17:bd:bd:0b:9c:94:ea:6b:7f:50:5f:16:90:8c:f3:95:51:
         4d:ef:0e:96:c8:55:d9:d6:55:d1:f5:6a:46:42:e5:c4:b1:9b:
         56:5a:78:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----