Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
File:                     haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json)
Hash identifier:          q0wzqYUESP/AoYewbd7O9V+NgASmzSThIRO8PP89dss=
Subject key identifier:   44:6E:F3:AC:62:67:0B:6A:44:67:72:E5:E2:05:9B:A8:6F:BB:CD:30
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Certificate issuer:       /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial:       01962F7486437CBA684262EB6DF72FC6F2F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
Manifest number:          13FF
Signing time:             Sun 13 Apr 2025 14:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:27 +0000
Files and hashes:         1: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: PiN7hzKFEpRoY+unLSJphiAve9fwgemahQOEjjJTwbs=)
                          2: n6MPRl4HeV2oslQVZjQ3r5EuRXY.roa (hash: J3QEJ4pfKQHu+ZNIZ1/n5cXEVM04vV1h4Czaen0IJhE=)
                          3: ozjUQxHmEATeBtgb_LyM3aKm4tQ.roa (hash: SCvwXmyf4wYWaXwbm/hei/KNEmH1H0hr2F8sJuDN8Q4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:86:43:7c:ba:68:42:62:eb:6d:f7:2f:c6:f2:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
        Validity
            Not Before: Apr 13 14:01:27 2025 GMT
            Not After : Apr 14 14:01:27 2025 GMT
        Subject: CN=446ef3ac62670b6a446772e5e2059ba86fbbcd30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b8:65:43:30:e4:f9:07:fa:23:2d:35:37:cc:
                    e5:e1:63:dc:63:fa:be:cd:80:fd:ae:27:81:ba:02:
                    1a:c2:4c:13:87:84:38:5b:68:ec:bd:3e:53:92:96:
                    80:48:ca:4a:72:cd:d7:ee:07:66:0b:f1:1a:e4:bc:
                    6b:61:f3:92:77:54:06:72:8c:4b:cb:d7:ea:d5:38:
                    83:ff:95:98:52:f6:d1:f1:de:b9:78:d6:38:49:77:
                    48:86:b0:29:1a:9e:8d:1a:79:ef:db:af:ac:fa:fb:
                    79:99:27:23:95:5b:45:31:5c:1e:24:98:99:4b:04:
                    ad:7d:a5:b5:75:43:96:e6:85:26:16:e0:1e:18:32:
                    c9:8d:91:f5:a2:35:a4:60:61:64:3d:f8:43:3a:b1:
                    26:df:c6:be:08:85:41:73:c4:1e:ff:c8:30:0c:e1:
                    1f:ca:fb:95:5d:8b:ef:e2:54:7b:a8:d3:84:65:cd:
                    c8:a8:60:a7:a6:b7:44:ea:78:3b:90:15:30:d7:ed:
                    02:52:a7:f8:b8:c8:a4:c3:e4:21:64:f0:5c:e9:26:
                    da:65:52:90:48:f0:39:c4:d1:a8:36:78:7e:49:c9:
                    32:6f:82:b7:2d:43:bd:14:e7:25:16:cb:95:1b:12:
                    a3:d5:70:09:e4:bc:ea:bc:17:f1:44:3d:79:c4:0a:
                    1a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6E:F3:AC:62:67:0B:6A:44:67:72:E5:E2:05:9B:A8:6F:BB:CD:30
            X509v3 Authority Key Identifier:
                keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:2b:f8:75:8a:43:f7:01:65:6c:4a:0e:82:81:33:c4:fb:f0:
         35:e9:ed:b1:a4:4b:0c:73:04:48:4d:e0:d9:cd:0d:11:f0:07:
         2a:4e:a7:2b:35:54:6f:c3:6f:cc:32:96:04:3a:e1:c6:69:31:
         8d:0a:51:bf:f3:38:73:0c:35:91:14:6a:84:eb:5b:8c:92:ee:
         f2:86:56:c1:63:9d:1e:fa:33:8b:12:b2:dd:94:a3:0b:fb:79:
         b5:42:dc:35:55:73:14:f0:a5:75:1f:2f:25:e6:d6:b3:d8:c4:
         4d:3d:5f:90:6a:ee:ca:ab:17:d6:92:93:0f:74:b9:c1:be:66:
         f6:16:9a:bf:8e:0b:8f:b7:7c:2b:77:57:de:43:39:84:79:0c:
         73:15:31:d3:60:2f:e3:ed:c4:40:f4:85:0e:04:b1:79:cc:56:
         0e:a0:85:05:c8:41:a7:e9:90:ed:65:d0:23:4a:63:97:cb:71:
         db:a5:e6:5f:8e:14:ba:f6:65:63:4b:e8:6e:23:5b:e3:7d:19:
         6d:6e:c2:31:3a:9c:c7:35:80:e8:80:1f:e7:ac:6e:8a:84:d6:
         cb:8f:db:c2:65:b6:7f:06:1e:3d:c9:5a:bd:fb:89:32:38:eb:
         6f:6a:de:4e:9b:93:ce:f2:a0:5d:5f:39:fd:87:22:22:d9:50:
         77:dd:0a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----