Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
File:                     hu-0nfJHSmBCufIQv-qGGxsohu0.mft (raw, json)
Hash identifier:          Pn9QWM+ujJhm+mn51zfU4z4mAPT6SOIZQwgRuYRUNew=
Subject key identifier:   2D:BC:22:95:8D:BC:CF:4D:FF:A0:ED:08:6F:C9:8E:E6:44:45:DF:1B
Authority key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
Certificate issuer:       /CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Certificate serial:       01962E2B35AA7264472AA736B51E6BF623BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
Manifest number:          0B64
Signing time:             Sun 13 Apr 2025 08:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:45 +0000
Files and hashes:         1: FSXy2TtOSpMZ2XDcNKgNNiQnbKM.roa (hash: /T12WOhZaUuSku4ox6ePPcvZ8Y26JtVUn7Ay1gZp9DI=)
                          2: aM3cc5239WAy4buFXqwE6avsPpA.roa (hash: IiNQUlQAEuG6gzv/NjmTi9efglVA0BqHGXlQ4OoKAfs=)
                          3: hu-0nfJHSmBCufIQv-qGGxsohu0.crl (hash: PjsxwbsEOrCML6RctYxiqyxvT0294RgwdFcQmrvIESI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:35:aa:72:64:47:2a:a7:36:b5:1e:6b:f6:23:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86efb49df2474a6042b9f210bfea861b1b2886ed
        Validity
            Not Before: Apr 13 08:01:45 2025 GMT
            Not After : Apr 14 08:01:45 2025 GMT
        Subject: CN=2dbc22958dbccf4dffa0ed086fc98ee64445df1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9f:47:29:f8:68:23:3f:7e:57:24:e1:98:13:
                    fa:83:6a:78:20:c7:2e:bb:b2:05:30:7e:af:3b:9a:
                    24:5b:24:e9:bb:ce:a3:15:8b:d7:3b:8d:30:75:cb:
                    cf:39:cf:2a:30:de:88:26:2e:d1:61:f2:26:55:ec:
                    90:32:64:de:f9:86:4f:5f:76:e5:99:f2:ec:5d:6b:
                    c3:60:39:fe:12:41:1c:a7:1a:a4:53:8f:94:8f:9c:
                    2c:0b:d5:90:dd:84:c4:c3:25:fd:82:8b:65:a6:a7:
                    a5:02:a0:1d:a6:38:2f:0d:71:7b:91:e6:e2:77:69:
                    28:6d:68:79:74:d7:5e:0b:ed:27:40:69:24:64:f2:
                    29:60:5f:8a:9d:91:55:42:7d:1e:74:e8:e6:8b:eb:
                    3f:df:63:ed:c1:ea:9a:b3:91:46:08:11:6c:c3:e0:
                    41:82:a9:14:8c:40:9b:db:ef:2a:9c:7a:9f:2c:76:
                    d6:9f:ea:ad:16:22:d4:b2:84:50:5d:61:ea:ab:02:
                    05:60:7f:28:96:e8:1a:ab:86:e8:bc:33:43:03:67:
                    dd:69:73:50:c3:70:7f:6d:6c:e2:09:4f:e0:e7:84:
                    91:c1:ec:fa:9c:da:3a:c8:f3:3c:44:8d:2f:ad:c0:
                    29:9a:61:11:a1:34:0c:12:85:e2:60:bc:e0:ee:46:
                    42:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BC:22:95:8D:BC:CF:4D:FF:A0:ED:08:6F:C9:8E:E6:44:45:DF:1B
            X509v3 Authority Key Identifier:
                keyid:86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:9c:61:5d:98:13:00:90:fd:99:37:41:49:1d:4a:ef:b3:64:
         f6:75:a1:a5:1b:07:5e:f0:15:16:72:f0:03:90:e3:73:78:58:
         11:bc:b5:32:62:54:4e:85:01:32:72:07:e1:b5:a1:ec:da:b9:
         a7:c6:8b:e9:b5:ab:87:25:e2:4b:b7:e9:01:63:2a:53:b1:04:
         d3:f4:ab:8f:8f:8c:6b:3a:b1:3d:f0:f5:72:ce:10:48:a3:01:
         df:b2:9c:49:39:80:72:fa:f3:13:bc:7b:ce:51:7c:c3:44:34:
         35:ab:49:6d:af:cd:7b:47:1b:63:3a:e1:84:02:72:9c:fc:48:
         8e:62:8f:37:7c:81:ec:b6:21:08:52:ff:af:1f:2f:82:55:be:
         88:83:4f:25:9d:c4:84:12:85:e7:32:4d:e0:6b:a4:80:25:e3:
         3c:2a:5d:5e:55:92:1d:f6:4d:2b:e0:81:9d:72:50:d4:a5:01:
         35:fc:dc:dc:ce:56:af:72:27:d5:29:db:ed:05:06:ab:e6:5e:
         8b:6b:c9:87:1e:62:71:cb:77:dd:62:a2:25:f5:fc:07:af:7d:
         1e:05:c2:72:52:a0:e0:7d:36:e7:b9:8b:a2:a2:aa:4e:e3:eb:
         21:c5:a0:06:9b:54:21:63:49:61:ef:0c:32:02:24:02:c9:d1:
         ba:71:fc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----