Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3f133f-1c81-4a4b-a255-3e3646591aa0/1/hkq9Q1-JnVcKjl-4O9rRFTRV3uA.mft
File:                     hkq9Q1-JnVcKjl-4O9rRFTRV3uA.mft (raw, json)
Hash identifier:          ANoGbEPigrx4Y+mp+ipRFip3XVg7Lgf7bdnKAX3YWT0=
Subject key identifier:   B8:5C:3C:FE:AD:E8:DD:94:C3:5A:17:51:70:1C:03:5E:20:8D:F7:CA
Authority key identifier: 86:4A:BD:43:5F:89:9D:57:0A:8E:5F:B8:3B:DA:D1:15:34:55:DE:E0
Certificate issuer:       /CN=864abd435f899d570a8e5fb83bdad1153455dee0
Certificate serial:       01962ECF8433C2C63C812BD2B739CA2CE6E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hkq9Q1-JnVcKjl-4O9rRFTRV3uA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/3f133f-1c81-4a4b-a255-3e3646591aa0/1/hkq9Q1-JnVcKjl-4O9rRFTRV3uA.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:13 +0000
Files and hashes:         1: hkq9Q1-JnVcKjl-4O9rRFTRV3uA.crl (hash: 6/72qePmjaSiFQaYVhOl/AeCAm4uCYfmuF8lkmiK3E8=)
                          2: xSS92RJP_9kDYA2uBQZz6tpYK1I.roa (hash: rR5n4U9xDx2H85hw0wOs3NY+BK3tAcVO4QlJE3rUQXA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:84:33:c2:c6:3c:81:2b:d2:b7:39:ca:2c:e6:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=864abd435f899d570a8e5fb83bdad1153455dee0
        Validity
            Not Before: Apr 13 11:01:13 2025 GMT
            Not After : Apr 14 11:01:13 2025 GMT
        Subject: CN=b85c3cfeade8dd94c35a1751701c035e208df7ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4c:d1:a5:a1:57:83:ca:4e:c0:11:30:c3:b4:
                    ad:af:7f:48:28:c5:90:45:c7:33:86:bc:66:64:e9:
                    1d:1a:58:f7:fa:ec:f6:29:4e:1b:da:cc:98:d9:e9:
                    9c:27:1d:2d:01:90:eb:86:3f:a8:6f:93:ff:41:ed:
                    8e:83:1f:74:5f:e8:55:44:03:00:19:ec:62:27:ef:
                    4b:cd:92:c8:93:58:29:cf:35:8e:2a:45:ee:c8:62:
                    ce:47:98:f3:16:f9:1d:a0:33:40:8e:9a:c9:43:84:
                    f1:ee:0b:5c:23:e0:9e:91:db:32:f3:f1:54:af:e8:
                    c0:a4:49:19:6a:89:ab:12:92:a6:d1:2b:14:a2:32:
                    6d:56:83:b7:c3:61:e1:37:23:b2:a0:91:93:d8:1d:
                    8d:ed:23:f1:7a:6a:ec:d9:e6:22:bf:18:df:7b:4a:
                    1c:2f:7b:ff:cf:7b:f7:49:7b:a0:06:d7:60:17:9d:
                    98:f0:d1:9a:02:0f:16:af:99:52:1f:17:50:c3:c2:
                    0e:48:c5:af:8d:ac:07:b8:99:b3:1a:08:9a:bc:e3:
                    5e:61:fb:cf:51:a0:b8:c3:d2:17:35:06:f0:ff:94:
                    9f:c1:90:f8:18:91:81:2c:0c:69:d8:87:d0:d8:f2:
                    85:d3:98:bc:65:f2:a4:14:92:d4:5a:73:dd:ce:1a:
                    b6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5C:3C:FE:AD:E8:DD:94:C3:5A:17:51:70:1C:03:5E:20:8D:F7:CA
            X509v3 Authority Key Identifier:
                keyid:86:4A:BD:43:5F:89:9D:57:0A:8E:5F:B8:3B:DA:D1:15:34:55:DE:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkq9Q1-JnVcKjl-4O9rRFTRV3uA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3f133f-1c81-4a4b-a255-3e3646591aa0/1/hkq9Q1-JnVcKjl-4O9rRFTRV3uA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3f133f-1c81-4a4b-a255-3e3646591aa0/1/hkq9Q1-JnVcKjl-4O9rRFTRV3uA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:ac:a0:5a:24:c5:6b:d3:dd:79:58:9c:b3:09:07:a4:fb:39:
         ac:fa:04:d3:b3:f4:d9:2f:ed:64:1f:89:4e:79:e3:dc:97:23:
         24:3b:41:5d:2a:51:8b:1f:a6:c7:0a:b7:b6:8d:1b:31:f5:01:
         12:da:49:ab:8d:bc:a3:f8:c5:34:34:d9:98:71:b4:85:7b:5b:
         40:a0:df:d1:f5:02:c7:9a:5c:6a:69:dc:0c:65:46:c3:41:85:
         97:93:1f:e3:2e:b3:91:6b:e5:73:16:2f:c5:c8:c8:9e:75:58:
         99:6a:a8:af:7e:e8:f0:2e:a3:fe:45:58:d7:d9:83:f1:70:e2:
         ba:53:18:53:09:73:a4:6f:6a:ac:28:53:16:72:a8:ed:cc:44:
         eb:7c:0d:3f:ec:0d:47:2f:cb:e7:02:36:20:82:b0:45:09:f5:
         68:e7:88:bb:34:21:76:05:25:2a:43:e4:4d:e3:24:22:05:09:
         b0:8d:a5:ed:eb:83:0c:35:cc:fc:d3:4c:23:23:6d:af:fc:90:
         14:9c:1a:2c:4e:fc:a2:b1:01:ff:5c:76:7f:03:fa:da:72:0c:
         24:6c:fc:e3:df:01:49:ed:42:f7:cd:c3:48:01:a6:81:10:b1:
         8a:df:3d:96:02:f5:10:b6:d5:21:85:65:bc:d1:c2:11:6b:8a:
         da:84:09:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----