Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
File:                     pg0SlAGyaTo41bQ3Pcdge_hbim4.mft (raw, json)
Hash identifier:          0gN0mktrqHa6zEkC5tY8rNfSuC/p8PkOMljG5te9TYQ=
Subject key identifier:   E3:3A:83:43:47:44:A3:66:04:BB:B5:73:EF:A4:DB:4E:4B:31:28:22
Authority key identifier: A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
Certificate issuer:       /CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Certificate serial:       01962FAB387F873CAC03E65A971FBDB1D996
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
Manifest number:          13A2
Signing time:             Sun 13 Apr 2025 15:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:12 +0000
Files and hashes:         1: VrzBS7iYMQ7CUgFXeIYUKibuq4c.roa (hash: fmhLUOU0qw8zvG4ACPTJc5SXrpkYmfNY3RjrMuYrgqA=)
                          2: pg0SlAGyaTo41bQ3Pcdge_hbim4.crl (hash: TB9E6z+qM7rgG57M2oZNDf3Zdu9owV/YXGnpuJjd3xA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:38:7f:87:3c:ac:03:e6:5a:97:1f:bd:b1:d9:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
        Validity
            Not Before: Apr 13 15:01:12 2025 GMT
            Not After : Apr 14 15:01:12 2025 GMT
        Subject: CN=e33a83434744a36604bbb573efa4db4e4b312822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:97:42:de:04:b9:a1:b6:28:b8:94:d6:86:87:
                    4c:88:fa:1f:5f:e6:2b:02:79:1d:29:94:86:ec:57:
                    e6:bc:46:30:c5:02:9e:2a:7d:40:f7:f6:ae:6e:bf:
                    7e:9d:fa:7f:c2:f6:7a:2c:f7:3d:09:2b:3d:2d:81:
                    6a:a4:de:89:2c:70:f8:0a:73:1c:41:5c:f8:e2:0e:
                    b0:f0:09:be:8c:ec:28:b5:1b:09:06:26:94:84:cc:
                    35:cc:53:8c:24:46:ed:8a:cc:4b:7d:99:ad:e8:fd:
                    ec:1a:bc:17:01:b2:34:5d:0b:f5:44:0c:35:a4:cd:
                    c0:33:a0:31:ad:16:0b:b0:b0:a3:fa:96:c1:02:98:
                    90:ae:4d:78:48:2f:e0:68:9b:59:1a:7b:ed:6b:c8:
                    c5:c9:78:3c:eb:be:08:ba:af:07:81:ca:e6:dd:0b:
                    24:4b:04:74:6c:52:48:2e:9a:df:70:8e:85:0b:a2:
                    b2:05:41:90:1f:68:33:7a:18:c6:c0:b7:32:c4:0b:
                    d6:fd:7e:ba:3c:e6:ed:ba:a9:e8:d9:68:97:e8:7d:
                    7c:a0:94:93:1b:dc:02:cb:e3:65:e3:60:d9:08:5f:
                    07:7e:59:7c:06:f4:33:3a:17:6e:c5:1a:f7:47:4d:
                    32:fd:82:b5:9a:8b:2b:ec:26:2d:ee:4b:e4:c8:36:
                    f7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:3A:83:43:47:44:A3:66:04:BB:B5:73:EF:A4:DB:4E:4B:31:28:22
            X509v3 Authority Key Identifier:
                keyid:A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:21:7d:d4:5a:76:a9:32:07:81:71:99:91:51:23:25:3a:53:
         26:3e:4d:41:f4:99:bb:10:a0:cf:5e:0f:58:1b:f1:27:cd:ea:
         78:0f:e6:ae:51:cc:69:0c:f7:70:4f:f9:e5:ed:a7:84:66:7d:
         c0:3b:a2:ec:d2:e2:22:0a:8e:55:58:7c:d5:be:29:0e:db:93:
         d6:5d:32:95:80:9f:0a:34:48:91:1e:53:4c:a2:98:ad:0b:fc:
         be:c2:4b:7d:7c:b1:6b:db:31:5b:1e:d7:b0:0b:2e:d5:e3:d7:
         bb:da:aa:42:d6:a5:11:14:3a:f5:3b:0b:ee:6a:0f:fb:00:bb:
         7b:b0:63:47:98:67:bc:43:d9:85:1b:6d:f9:56:4b:24:90:9f:
         ae:05:de:18:d1:30:01:a5:11:49:b5:43:f4:e8:43:d8:12:5c:
         a9:b1:03:ec:2a:19:7c:2c:08:46:75:2b:14:95:0a:00:9a:a1:
         3c:14:b5:be:6c:78:9b:1a:31:32:05:35:bb:fd:43:6f:c6:54:
         6f:74:64:a7:f8:0c:7d:9f:b9:69:5b:0c:50:89:9e:0f:9c:df:
         8d:7e:0f:f4:76:e1:20:05:88:00:8a:e3:b2:cf:25:42:6c:75:
         cb:3b:bb:5a:df:98:13:84:b6:0d:8d:a3:35:cc:3c:e3:a3:2c:
         6b:39:02:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----