Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
File:                     rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json)
Hash identifier:          3pGByM3FzCiacn3nke4cqkLsmM4Cfw7BGKAUj7LWvJg=
Subject key identifier:   BE:D8:9C:E4:2E:3A:90:00:E8:93:40:2F:7E:0F:BE:EF:F3:EF:6E:62
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Certificate issuer:       /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial:       01962DF3DE088EA07FEAB7C8A19D93B0D38E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
Manifest number:          0EED
Signing time:             Sun 13 Apr 2025 07:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:18 +0000
Files and hashes:         1: JQTWtShPwGEwVFU8i8E82c7erRQ.roa (hash: AWyFT4kOA1zNKVFniNaOQlkLDIns54LN+qDhlyph/BU=)
                          2: WVdl-uCV2iOAd5QeDrWIMC8ZaZo.roa (hash: CehMTtzEG7E3qCdiNMcnQ4ftqXLEiDLiNKB1gOKsgck=)
                          3: nc7DP5U-Jl22CsJJw2phARU5j0c.roa (hash: rdcrf8/30vk8VHZdwnISLBUlsokPeOe7cBYMpoPH+B8=)
                          4: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: R76kQ3qXRtHWgE7tjqUTG2UAZzU1mmlfJ/PLNdOqCjE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:de:08:8e:a0:7f:ea:b7:c8:a1:9d:93:b0:d3:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
        Validity
            Not Before: Apr 13 07:01:18 2025 GMT
            Not After : Apr 14 07:01:18 2025 GMT
        Subject: CN=bed89ce42e3a9000e893402f7e0fbeeff3ef6e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:31:88:5b:a6:37:2b:dd:b6:e1:fb:e7:59:76:
                    eb:9e:46:67:d6:dc:df:28:94:f7:c0:0f:b1:81:06:
                    b0:1d:f5:94:eb:47:2b:6f:5b:e7:87:70:a0:16:7d:
                    96:ac:22:4c:f6:e5:cd:59:b0:13:a0:59:e6:8c:b8:
                    de:99:16:d7:da:a2:bf:51:14:d5:f6:8a:04:e8:f5:
                    cb:5d:b6:fe:78:d8:72:dc:6c:10:de:8b:48:9d:57:
                    79:60:a1:4f:20:3a:dd:fd:64:ad:d9:8a:cb:10:84:
                    ca:9f:93:9e:83:9f:b7:e2:0b:f4:90:8c:07:cb:9f:
                    79:97:dd:a5:fe:0c:02:56:dc:af:64:6d:23:6a:8e:
                    21:90:af:03:8a:cd:cf:4e:46:4e:3b:2d:2f:aa:52:
                    b0:48:03:63:c5:5d:5c:8b:fc:6a:7f:d9:e2:c5:e4:
                    4a:3b:f8:2f:38:20:c6:4e:f3:84:5d:a9:4f:fe:85:
                    5a:6f:c2:38:a7:f1:54:c7:dc:7b:b1:59:1a:a1:85:
                    c9:31:2c:60:47:6b:36:c8:f6:f1:ec:9f:62:d3:48:
                    64:c5:5a:69:85:cb:89:28:7c:5c:60:8d:9a:2a:e2:
                    a8:5d:ba:29:36:ad:ba:83:24:15:4c:82:55:98:5b:
                    10:09:e0:d7:03:c8:ef:47:fb:b0:c3:bd:3f:67:c1:
                    2f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D8:9C:E4:2E:3A:90:00:E8:93:40:2F:7E:0F:BE:EF:F3:EF:6E:62
            X509v3 Authority Key Identifier:
                keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:25:59:d1:68:e9:2f:4f:18:b2:58:cd:a9:31:e9:4a:95:9d:
         b7:00:cb:47:a2:b6:39:04:61:be:aa:dd:2a:8c:54:8b:4b:77:
         1f:f3:8b:0c:c5:f9:50:a2:0c:cc:17:c1:9f:3c:90:19:cc:31:
         3a:c8:5c:73:86:4c:89:a8:8e:f4:e2:1c:31:04:c9:47:d3:f8:
         63:55:73:39:50:e8:28:4e:2d:c3:dc:58:92:9f:09:6f:92:e8:
         62:cb:cc:71:72:96:95:51:a0:1a:38:97:18:c8:86:8e:42:af:
         06:59:2b:50:07:91:43:2f:3b:31:a9:df:4c:2f:48:ac:d2:60:
         c0:99:a6:0c:e6:82:6f:5b:86:32:3c:01:eb:69:89:8c:80:76:
         15:1a:b0:77:48:13:bb:df:6b:6a:dd:56:20:f0:20:e6:95:80:
         4a:1a:76:39:5f:08:b8:44:d2:ae:7e:e0:d4:32:70:36:51:81:
         58:52:2d:5b:6b:f3:cf:30:2c:f0:3e:44:ff:e7:17:ec:6f:fd:
         d4:97:89:70:89:48:eb:23:11:91:34:bc:9b:93:3f:ca:bf:56:
         bf:8a:7d:22:85:82:cc:6c:c4:30:17:7a:17:f3:67:49:e3:b4:
         84:2e:2e:a1:51:fe:ca:91:77:cd:40:73:22:a6:fc:79:db:68:
         6e:43:ae:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----