Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
File:                     hzcmsXsBvwtUQm0YEPI9xPWPans.mft (raw, json)
Hash identifier:          QbLux2LiY7Jfa2xeVW5SOjPnuKfPT/o9X7KfHS9D3Nw=
Subject key identifier:   28:C8:25:2E:39:CE:B6:A3:3A:DA:87:E3:56:35:16:5B:EA:C2:B0:4A
Authority key identifier: 87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
Certificate issuer:       /CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Certificate serial:       01962F3D658AB547F61084C7FBFB44735343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
Manifest number:          0371
Signing time:             Sun 13 Apr 2025 13:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:14 +0000
Files and hashes:         1: 0UKc3c6_AlpjqrUNJh3DwStXrec.roa (hash: OhWloYhHA/1vQyymMhBSWvWrUFfn2iV/XlUJ3vQrur4=)
                          2: 4gvK6UAte4i_DJjE1TPbFT1Ok98.roa (hash: GoLsyVhZqQfvGCGN6U4GMh9d59SyLh07nIkIOiePbx8=)
                          3: hzcmsXsBvwtUQm0YEPI9xPWPans.crl (hash: wxQci3OWPyVagqtAFx/jWREXM6kUgBohpyRnturwENA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:65:8a:b5:47:f6:10:84:c7:fb:fb:44:73:53:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
        Validity
            Not Before: Apr 13 13:01:14 2025 GMT
            Not After : Apr 14 13:01:14 2025 GMT
        Subject: CN=28c8252e39ceb6a33ada87e35635165beac2b04a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:47:32:1f:91:f8:0f:35:80:5d:16:40:5f:6a:
                    64:1c:4a:db:da:11:1c:cd:3e:db:f1:b7:e2:f2:c7:
                    fe:7b:db:7c:07:78:43:41:e7:aa:3f:cb:1e:02:b1:
                    96:a9:20:51:ce:57:bd:a4:31:1c:f6:f7:52:c1:3c:
                    ce:4f:12:a3:69:73:0f:0f:f1:3e:ec:fa:38:3d:27:
                    65:e6:5e:6f:6a:f9:dc:33:a2:fc:eb:c6:f3:b6:ed:
                    a0:98:2d:46:c8:f3:bc:65:9d:41:ad:9b:b1:1c:dc:
                    1a:f5:e1:4c:f0:d0:b0:80:7d:66:0d:e4:8e:80:60:
                    1f:56:1f:b6:85:a6:12:92:d3:45:c3:e2:71:26:ac:
                    1b:99:ee:3a:7d:66:bb:f2:e8:1f:d2:c8:5a:59:53:
                    25:61:2d:dd:15:33:d0:f6:ae:8f:7d:e9:c9:23:90:
                    0c:60:cf:44:61:7a:a2:b4:7b:c8:b6:2a:48:94:62:
                    63:21:fc:d8:17:dc:75:a2:55:34:8d:4a:52:50:66:
                    ce:49:56:77:33:cf:b1:df:48:7e:fa:21:05:bd:80:
                    7d:bd:f2:bb:69:06:a4:61:9e:7d:9b:18:73:0d:a4:
                    76:d4:5a:97:1c:c8:28:10:15:86:75:78:21:59:3f:
                    ca:e2:fb:1b:d9:3a:54:00:86:e0:2e:3c:f9:6e:66:
                    5b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C8:25:2E:39:CE:B6:A3:3A:DA:87:E3:56:35:16:5B:EA:C2:B0:4A
            X509v3 Authority Key Identifier:
                keyid:87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:b5:d2:e2:d5:6e:6e:20:9d:99:aa:b3:ee:5e:68:a3:f9:60:
         4c:7f:86:a8:b8:07:36:9d:34:7b:d2:ab:29:9c:04:45:76:2b:
         da:4b:c3:61:05:f1:63:4f:08:45:d2:bf:e1:83:cc:57:68:c5:
         e5:89:da:3d:28:15:04:16:87:95:58:90:c8:cc:07:62:14:d1:
         27:48:80:05:a6:9e:ea:18:d6:6d:33:f8:76:57:49:05:b0:78:
         03:32:bf:34:f4:47:db:b2:11:df:9e:2b:d1:d3:57:88:e0:8e:
         cb:c2:24:ba:b8:66:72:49:63:49:8d:9d:2b:0a:db:1f:83:be:
         1e:79:e3:c0:62:96:06:cf:50:b0:90:74:16:7e:5d:a6:10:ff:
         fb:67:e6:f0:b1:b6:58:d0:0b:90:ce:94:32:61:4b:5c:05:55:
         1b:b6:9c:7b:26:a4:8c:6a:86:57:7d:7d:df:1e:c9:43:dc:0d:
         ba:48:8f:30:00:19:e8:aa:2c:65:d7:22:d1:54:7c:2f:1d:bc:
         14:12:6f:73:ab:25:2c:96:f8:ae:a3:37:ce:2b:e5:04:22:70:
         fe:8d:7c:b2:46:28:35:e4:5b:f1:56:cf:4b:a2:ef:fe:29:3b:
         13:c2:2e:ff:4b:03:9c:33:83:93:c3:72:8f:f7:b3:bf:0e:31:
         e6:4c:bd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----