Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
File:                     aHcm04_PKn-7t7_CjWP-NXntIR0.mft (raw, json)
Hash identifier:          yu9ulMEdI7hS4Docj5IjjhW8cVZf2bJewY1oICWH7sA=
Subject key identifier:   A8:74:2C:C4:30:85:25:01:0F:CF:85:BB:E7:83:27:25:D8:74:B0:6F
Authority key identifier: 68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D
Certificate issuer:       /CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
Certificate serial:       01962E61F06B1A6E690F5989782615F3A983
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
Manifest number:          101C
Signing time:             Sun 13 Apr 2025 09:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:32 +0000
Files and hashes:         1: 4BPgPazxL-0_7TACTrAAB2vKcvM.roa (hash: ByHJvADYtVUpx6K/7n+qZ80ogn6pFEeZiZMcZkXwguI=)
                          2: DnTRig2ZHULz3p9wZNouYmsC9jo.roa (hash: t4VZBdK9Uss3nXT5qelMDtPowMN8UI5/vISGQexu/1w=)
                          3: FiGOQGJVQzUX0AI-kIcMSlyL5Jw.roa (hash: iNn6sg9mF+PuqzA3VDumFe63FkMkR+FoX25ZFTkc1KE=)
                          4: aHcm04_PKn-7t7_CjWP-NXntIR0.crl (hash: Fzkvk9xeeqyVCpOJUr8z3AOY/dVqjqoWymL0KCHgeqQ=)
                          5: psb7_FoF9tBnDB6tY5GqWOvVJFk.roa (hash: VNe9Mli14Tvo817wNnFl35Vg2+YLvG6cgRRigjOYMS0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f0:6b:1a:6e:69:0f:59:89:78:26:15:f3:a9:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
        Validity
            Not Before: Apr 13 09:01:32 2025 GMT
            Not After : Apr 14 09:01:32 2025 GMT
        Subject: CN=a8742cc4308525010fcf85bbe7832725d874b06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a5:9b:aa:9f:a2:e0:6e:cb:ce:03:3e:b0:d3:
                    64:26:fc:a8:1f:81:4f:be:ac:48:bb:86:52:ea:8b:
                    cf:17:7f:2e:6d:fd:0f:23:27:bb:e6:e7:5a:5f:65:
                    41:cb:ad:b1:ed:ca:bf:15:c4:a0:9d:f7:c4:03:53:
                    2c:1c:db:83:44:bd:bf:2c:47:46:b5:ae:9a:22:7e:
                    03:32:97:2a:3d:b6:e7:52:c9:05:c5:0c:27:1a:74:
                    67:9f:4c:ba:bb:35:31:d0:c7:99:8f:df:13:90:97:
                    e5:23:7a:93:dd:62:2e:a9:1e:b5:42:34:c2:92:3a:
                    95:dc:ee:44:aa:68:d4:03:38:b8:f0:23:b5:dd:fb:
                    20:f4:39:ec:6a:5e:dd:3e:ac:72:f1:72:97:99:01:
                    7b:27:7b:58:95:7d:77:5c:92:d7:a2:b8:38:67:0d:
                    d3:af:4c:92:67:11:db:6c:17:c5:da:44:7a:ad:f5:
                    71:98:53:00:a7:84:b5:37:71:25:82:ac:b0:b9:1e:
                    21:c8:d6:57:31:38:59:01:c2:c7:f8:77:33:72:67:
                    6f:80:2b:cf:7c:fa:76:07:18:0b:38:f0:18:9c:2f:
                    7b:b4:dd:af:af:cb:ce:d0:4d:4c:28:82:3e:57:76:
                    f9:ee:7a:c9:ec:86:a9:75:91:93:1b:b1:85:9b:c4:
                    2f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:74:2C:C4:30:85:25:01:0F:CF:85:BB:E7:83:27:25:D8:74:B0:6F
            X509v3 Authority Key Identifier:
                keyid:68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:7a:75:cf:49:a7:8f:f8:11:08:d7:5a:2d:7f:9f:4a:2a:cc:
         5d:5b:a2:b0:f9:0d:57:41:6f:0a:2b:e3:7e:24:d7:e5:40:78:
         65:5f:80:8d:fd:46:7d:98:71:d0:23:6f:b8:85:3e:5e:83:28:
         3e:0a:1a:b2:ec:80:ed:50:0f:19:58:c1:84:47:9a:43:91:f1:
         d5:5a:6f:5b:79:eb:cf:de:bb:83:95:89:45:6a:68:9a:86:53:
         b4:2f:d1:0d:d5:51:cb:88:5a:09:41:79:c0:7c:df:c1:47:67:
         1f:ab:d3:47:94:4e:bc:bb:f5:af:96:5f:0f:cd:e4:09:06:16:
         c6:ce:62:55:e5:f8:3a:c8:0a:5f:c2:21:81:89:c0:4f:1f:60:
         35:48:4d:76:26:00:74:03:73:be:db:cd:7f:56:79:7d:da:5b:
         20:f8:1c:a1:0f:08:05:85:81:81:37:d4:8f:8b:6c:89:b8:ed:
         42:b5:72:4d:38:b6:1c:e0:18:57:fd:d8:1a:23:62:8f:01:b6:
         cd:bf:50:ae:00:8d:7c:d9:0d:b0:ab:70:f1:74:fa:31:77:a9:
         16:eb:cf:9b:4b:c9:48:12:31:bc:3a:30:fc:ef:a4:ac:1b:bf:
         4e:8d:4a:67:48:ff:29:84:35:51:e1:a8:e0:1b:1f:cb:b3:1e:
         79:80:e2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----