Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
File:                     hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft (raw, json)
Hash identifier:          2PbXY9KBCWhlU4YRv6QMMSc9qbvLqqorK3SMEWc6yD0=
Subject key identifier:   DD:7D:5A:B3:C8:F3:68:AA:01:06:CF:0C:79:7B:0A:E6:13:7E:73:07
Authority key identifier: 85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
Certificate issuer:       /CN=852bc145c5b22394d6feae996bc0bb25254801c6
Certificate serial:       01962E998DE3574277C0873806096707B58B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
Manifest number:          01F9
Signing time:             Sun 13 Apr 2025 10:02:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:17 +0000
Files and hashes:         1: UUl9tjMfoZ7A5klfeBDKB274xTs.roa (hash: SBvHQQieYmwuldne0ESh4KLqZuA1XSHveZCrpCqrHvQ=)
                          2: hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl (hash: mWUIMxbi8LPfm4N5xMvnuLeIqTnGl1/TlhAscmPwiA0=)
                          3: k3kU5aAomwikuRNdsT68Tqjcik4.roa (hash: wCPtZXM9gkCUtgXFEirTaWeSRaiZvXJy0sUEtKPb0ls=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:8d:e3:57:42:77:c0:87:38:06:09:67:07:b5:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=852bc145c5b22394d6feae996bc0bb25254801c6
        Validity
            Not Before: Apr 13 10:02:17 2025 GMT
            Not After : Apr 14 10:02:17 2025 GMT
        Subject: CN=dd7d5ab3c8f368aa0106cf0c797b0ae6137e7307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:70:ea:cb:33:b3:7a:31:fc:e1:26:d6:1e:1d:
                    f7:aa:1d:5b:05:06:f4:39:a9:b7:82:36:10:3e:56:
                    df:b5:b2:98:43:d8:da:12:01:64:b3:d1:70:7f:00:
                    b5:99:cd:08:a8:6a:1c:b2:a1:27:93:58:56:e5:59:
                    3d:ab:0b:24:41:9d:df:5e:04:a3:5e:f2:10:2c:05:
                    a4:15:1c:39:83:4f:d6:d0:a6:a2:c1:91:bb:9d:27:
                    23:ca:68:92:d3:c4:67:a8:68:59:31:63:85:26:6a:
                    b5:fa:c4:92:b0:73:d6:f7:8c:81:94:82:f2:c7:af:
                    2a:e2:ad:e7:d6:6f:61:32:48:5f:48:9b:95:0b:35:
                    11:74:37:83:be:0d:5a:b4:86:44:52:24:e4:26:5a:
                    9b:7d:29:4f:f9:44:b6:6d:5f:29:ac:fa:60:c5:d5:
                    7a:4c:10:ce:d5:70:c6:c3:1c:3a:50:78:e1:63:a4:
                    9c:e2:33:6f:09:26:1f:30:54:1d:53:63:58:4c:ef:
                    01:d2:d0:19:7b:3e:4a:3e:33:c4:e6:d8:08:cc:ed:
                    86:ce:19:77:a9:78:ec:d6:4e:ea:79:f6:9a:de:38:
                    bf:99:9e:f0:87:4e:19:64:9b:e7:a1:f3:c8:93:fb:
                    ad:2e:d1:e8:fc:fc:de:24:cc:ea:0e:13:34:0e:65:
                    fa:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7D:5A:B3:C8:F3:68:AA:01:06:CF:0C:79:7B:0A:E6:13:7E:73:07
            X509v3 Authority Key Identifier:
                keyid:85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:2e:88:bb:b6:ea:71:f0:89:25:c5:21:59:a0:09:9a:0e:01:
         a4:6b:de:29:d7:7b:7e:ee:73:54:04:31:7c:a4:89:44:d8:dd:
         44:d0:d0:ca:9e:7e:52:20:c1:29:b5:9d:51:73:0b:97:4c:c1:
         a2:4d:7d:bd:9f:4d:2e:6a:8e:0a:41:bb:80:a5:b8:ec:4b:63:
         c3:b5:34:a6:c2:07:2b:4c:21:e3:e9:a9:a3:66:72:31:fd:ae:
         99:f2:e4:c2:25:84:9c:66:92:98:c1:5e:ef:0f:57:3e:50:f4:
         af:76:72:7f:19:27:5d:e1:f0:a0:fd:5c:06:15:f2:f6:7d:45:
         0d:36:81:56:46:ba:a6:b8:d8:7a:87:85:e7:c9:b3:ba:4f:b0:
         92:80:a3:51:3a:e9:0b:0c:4d:f8:ee:68:6a:3b:33:14:23:53:
         e0:56:97:25:2e:56:ca:ff:71:25:de:ac:f2:f1:42:ea:9b:91:
         a4:fb:45:bb:a5:8d:fb:12:07:6a:e4:f6:64:a1:95:9b:3f:cc:
         4f:b2:6a:65:36:19:af:95:24:c9:95:cf:fe:80:13:3d:be:43:
         08:68:72:a7:63:70:5b:c9:b3:9a:21:d1:fb:f3:a5:ec:ba:ab:
         81:03:8d:ed:f5:df:58:25:8a:1d:11:0d:fc:79:a5:0d:31:03:
         cc:c3:e6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----