Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
File:                     hbkZo_6w7JZimf8Pro3vy0FeIv4.mft (raw, json)
Hash identifier:          eKIa6ELbu8jblfmYX6PdcCI/uWWWzDBL8H5zaRlXPKQ=
Subject key identifier:   43:8F:51:86:1C:7F:0C:CF:1F:16:41:DA:F4:2A:48:8B:5D:3D:88:EE
Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
Certificate issuer:       /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Certificate serial:       01962E2B31FA82C1D7012E5D44661886B672
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 08:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:44 +0000
Files and hashes:         1: E0KbPb4RfPbI9ii_1fNlFCQuDLw.roa (hash: be5+koswrVopdsotzqVNJfSpffEio3grzLc2KrNQKj8=)
                          2: ExjSEeEAZl6w67KQQzB9tboEijs.roa (hash: kHRGvr6/I9lpmyPu60rCwXrYtjs7atLNb5bTbjbxNMY=)
                          3: hbkZo_6w7JZimf8Pro3vy0FeIv4.crl (hash: 6rZBJS5d7wXgUm/qoaIVKi2pt9GJtzuPlP1rvzNjyiE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:31:fa:82:c1:d7:01:2e:5d:44:66:18:86:b6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
        Validity
            Not Before: Apr 13 08:01:44 2025 GMT
            Not After : Apr 14 08:01:44 2025 GMT
        Subject: CN=438f51861c7f0ccf1f1641daf42a488b5d3d88ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7a:25:93:0c:31:95:79:7a:9a:33:08:36:24:
                    5d:b0:6c:01:c1:9c:ad:1f:f4:35:ca:6b:0d:d3:74:
                    36:cf:65:6b:bc:1c:c4:22:c8:49:4e:41:0b:e9:03:
                    7a:f7:f2:5c:dc:27:4f:ca:22:ed:4b:3f:f9:10:9c:
                    ed:88:30:57:de:b9:e3:1f:47:04:c6:4a:5b:8e:4b:
                    34:55:3a:63:58:09:b7:5a:97:a7:be:4a:0a:87:e4:
                    16:51:81:6f:97:d3:32:4c:a4:57:11:df:ab:1c:83:
                    bb:05:5e:6f:5d:d3:c3:39:0a:b0:a1:90:83:69:ac:
                    1a:97:b1:85:f7:09:0a:33:21:a5:77:9e:c4:75:94:
                    de:fa:28:35:9a:3f:d8:f7:50:27:96:ab:d6:f9:e1:
                    9c:0b:25:c6:b2:78:91:fd:0e:7b:aa:3e:8e:84:89:
                    60:d6:7f:43:df:e7:66:62:7b:03:ea:26:7f:54:50:
                    ee:64:36:15:3b:7e:4a:42:3b:e3:86:e8:2d:6a:e8:
                    34:e7:36:14:38:b0:4c:5f:1f:be:4a:19:28:2e:70:
                    2a:80:c0:50:f2:b1:f0:6a:57:78:bf:92:cf:38:3e:
                    69:63:a9:49:36:67:e9:31:cd:51:f9:2e:c3:b9:b6:
                    ca:64:43:77:d5:3e:82:9e:e9:9e:14:f5:b5:22:43:
                    b6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8F:51:86:1C:7F:0C:CF:1F:16:41:DA:F4:2A:48:8B:5D:3D:88:EE
            X509v3 Authority Key Identifier:
                keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:7d:bd:fa:19:d4:60:5f:32:1c:82:64:43:fc:ef:33:95:b0:
         4b:b2:b5:e3:4f:ef:2a:a5:e8:64:64:3a:3e:ee:0a:62:c3:69:
         ff:f6:df:ed:da:e6:c8:c9:08:d1:fe:bc:8a:62:34:e7:c6:ce:
         de:a4:40:c1:bd:7f:0d:5f:d2:f3:d6:ac:44:1f:2a:60:1e:5a:
         e6:8e:ed:c3:78:e3:86:49:65:29:ae:ae:bf:69:92:be:5e:1c:
         68:e8:67:9d:fe:0d:13:50:76:06:cc:d5:11:3b:84:65:bc:e4:
         3d:b6:7f:a7:a9:c9:b1:c0:79:08:4e:4c:f0:07:88:5e:30:6c:
         38:2e:5c:e4:ef:b8:b8:db:62:77:eb:7d:dc:d7:7c:93:bd:51:
         e4:42:af:df:e0:ad:41:e0:02:c7:90:31:ca:ec:e3:3c:6f:b0:
         1e:98:be:cc:e6:5c:d7:a7:e7:11:ed:de:cc:1c:17:d9:39:81:
         e9:b7:c7:b0:a5:58:ca:a4:c4:19:42:46:e8:48:c1:37:2b:a6:
         3b:c1:f1:f5:4c:4d:a4:18:cc:02:44:67:b2:35:44:a4:d0:cd:
         58:2a:94:7f:4f:57:63:b9:de:95:ed:96:76:e7:6c:5f:22:08:
         f1:db:83:5f:57:7a:af:63:ae:da:c2:f4:66:fa:58:3f:41:bf:
         41:f4:7b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----