Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
File:                     iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json)
Hash identifier:          RF6gu+IzvhfNlNyeB6XAh7MIlJxSNCMZYLpCi6iSIo4=
Subject key identifier:   76:EF:79:DE:2C:6A:05:B6:2D:76:86:6E:6F:57:1E:F8:E8:BF:BE:9F
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Certificate issuer:       /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial:       01962F071CC17B815CCF753059B07D650723
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
Manifest number:          0C98
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: abKcOp3qmm4ybUnw1tBA-G8yOrc.roa (hash: /klckxmc/giyHaniwWbEf+LlQIwRtUPvFDW14KDXips=)
                          2: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: 3ocWmIfAHqvKcQq9V+Um1LbEIpaf0HAuIJpqWOJnoNk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1c:c1:7b:81:5c:cf:75:30:59:b0:7d:65:07:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=76ef79de2c6a05b62d76866e6f571ef8e8bfbe9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0a:12:19:7d:b4:dc:d4:27:48:bd:01:ba:9f:
                    ec:e2:7b:b4:be:07:86:3a:6f:a5:37:d3:f7:34:6e:
                    30:0c:f2:a0:45:22:25:80:09:17:9f:72:e1:ac:12:
                    75:ed:db:cb:2d:7a:78:5b:a2:81:41:3e:3c:48:f2:
                    dc:60:60:98:6a:2a:44:53:10:8b:29:20:2f:ff:99:
                    e4:00:fb:88:ab:7e:cb:db:91:9f:70:18:8d:b5:a9:
                    f5:48:88:5a:27:30:9b:ff:3d:ab:d5:30:24:5e:9b:
                    6d:44:8d:c0:24:a2:82:98:4b:db:e6:68:31:5d:b5:
                    f2:27:19:98:f1:49:5e:c6:8f:27:a3:cb:df:47:bd:
                    2f:b0:e9:e7:fc:56:57:d1:0a:b3:ad:7e:75:3a:90:
                    5f:8b:b6:ad:58:ee:d9:df:21:81:cc:97:af:1d:6e:
                    65:68:d9:99:c9:95:c0:8a:6a:4d:07:f9:9e:b2:d2:
                    ea:7e:dd:49:af:8b:19:db:f3:ba:01:2f:9f:42:9e:
                    57:c0:ed:0f:67:83:96:9a:7f:5c:3d:6f:b9:60:00:
                    5e:23:e0:c3:1a:30:3e:72:f5:40:0c:7b:7c:e6:6b:
                    ab:40:97:6a:4e:e5:b6:09:fe:e7:6b:3b:d1:a4:3f:
                    51:93:d2:a7:f5:43:22:21:76:60:38:02:31:fa:04:
                    96:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:EF:79:DE:2C:6A:05:B6:2D:76:86:6E:6F:57:1E:F8:E8:BF:BE:9F
            X509v3 Authority Key Identifier:
                keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c5:15:e9:58:9a:6b:e0:3a:d6:ec:86:66:43:85:5e:19:dd:
         d9:e5:c7:b0:8b:72:3b:70:df:50:c1:76:b2:ff:ad:f6:62:39:
         c7:cd:75:b1:2f:26:5b:0c:15:4f:26:33:09:9e:4b:16:00:02:
         17:b2:19:d6:3e:1a:1d:a6:97:33:1c:67:5d:ef:4c:74:58:1d:
         de:79:db:63:83:b9:23:d8:9e:7e:fa:d7:db:09:21:1c:bc:f2:
         26:62:b2:b0:6b:fb:71:a1:b9:f2:0b:db:c6:b7:15:88:36:dc:
         e4:ae:2d:5f:56:e0:4e:94:b9:c7:0c:12:dd:a5:2a:c4:cf:a7:
         46:d2:44:48:af:20:b9:2c:72:8d:b1:6c:83:62:5a:5c:a5:ec:
         79:8e:d8:a4:7e:25:a2:5f:bc:b7:4a:78:1a:6a:be:89:a7:af:
         e7:4b:62:29:9c:da:89:2f:18:2a:b4:58:04:ed:2a:18:b8:82:
         62:d6:33:fa:f2:b5:8b:9a:cf:b7:98:df:34:e9:a7:1a:de:9c:
         f3:93:b9:73:18:f9:9a:74:d1:7b:20:75:80:0e:d1:e7:1c:ee:
         ea:0f:bc:76:e5:8d:75:66:2a:5b:67:ce:34:87:a2:a2:7c:14:
         bf:ff:bd:db:b8:95:7b:14:ff:16:df:fa:23:46:36:5e:91:6b:
         9b:48:fe:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----