Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
File:                     hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft (raw, json)
Hash identifier:          p/uDUOjlBhCWUJEezfSQb6Yv3edaOO+vLqE3/1VZwQw=
Subject key identifier:   9E:4D:18:41:30:D3:89:63:D7:68:79:10:18:D1:1A:EB:69:29:B6:F6
Authority key identifier: 86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7
Certificate issuer:       /CN=86022e162f6e6b9755ce4ce845120e62939506f7
Certificate serial:       01962F74761A3BFEC6E8C2E08860BC7B2A6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
Manifest number:          1443
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: MbStNmXQF3r8BjIEIY6alBv8fXM.roa (hash: qBMHoSNp30r52ggSq1NF5Ja+ou1kpfZ0GNdRTXuZlMk=)
                          2: hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl (hash: 6Rxsj/Ybho2rFjUCLK3d26+WuL0TNSk6V8Y7YhZr038=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:76:1a:3b:fe:c6:e8:c2:e0:88:60:bc:7b:2a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86022e162f6e6b9755ce4ce845120e62939506f7
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=9e4d184130d38963d768791018d11aeb6929b6f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:54:c1:a0:b0:28:39:d8:5f:12:24:54:b8:5c:
                    ea:30:b8:99:a2:89:48:b7:c1:7a:f7:da:36:27:24:
                    3f:13:9a:4d:4f:ad:9c:2a:fa:82:28:ea:1e:92:8f:
                    86:a7:d7:a6:e0:d1:b6:1c:72:46:3e:4b:b2:62:fe:
                    5c:3c:a5:cb:47:b2:a0:d6:40:05:e3:20:22:8b:c5:
                    1b:58:45:ed:15:52:1e:bf:26:f5:39:a8:f6:99:32:
                    3d:2a:7f:b9:e1:55:92:3d:26:95:5a:11:c9:60:9e:
                    ce:67:39:b0:e1:a0:2c:e2:ef:f8:53:9f:a3:5e:6f:
                    64:79:ac:2f:b1:a5:3b:ca:fc:cd:a7:46:8d:74:54:
                    1d:eb:f1:c5:9f:66:46:55:75:c5:95:b7:c8:a1:1f:
                    d8:ff:68:c9:1b:c8:ea:00:0b:34:a7:27:d5:74:1d:
                    7a:46:fe:43:66:94:72:a4:45:a6:ff:57:e1:86:d6:
                    e5:4e:78:ba:6c:5a:fe:4d:a8:5a:6b:a8:dc:02:d4:
                    2c:de:a3:05:d1:fb:2f:da:ba:e2:9f:b5:b5:0b:6f:
                    d8:40:ea:69:8c:e7:5a:d7:6e:33:17:7c:b0:4e:60:
                    40:96:db:e3:c0:70:c3:2a:45:aa:1c:8a:85:3c:ab:
                    bd:db:e0:4f:84:b2:8c:ab:67:b1:bb:08:db:26:64:
                    c2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4D:18:41:30:D3:89:63:D7:68:79:10:18:D1:1A:EB:69:29:B6:F6
            X509v3 Authority Key Identifier:
                keyid:86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:af:35:35:6d:75:18:3e:94:45:6b:b2:2a:12:a4:44:3a:6c:
         e9:d8:8d:c1:9f:72:b1:24:97:b6:01:cc:16:8b:e7:53:cc:2e:
         5a:7a:e1:5a:c1:fc:29:68:c2:36:e1:14:3c:07:d8:1c:f8:25:
         c4:81:21:fc:cb:58:73:6b:9c:9c:85:37:49:0b:14:6c:6d:bf:
         d7:3c:93:5d:d6:3a:b0:32:b3:c2:ef:c8:fa:51:36:fd:f4:96:
         d5:d9:26:db:aa:12:39:31:12:48:81:73:89:c4:d7:f9:62:30:
         16:e9:ba:06:ab:7e:d1:67:7e:da:fb:d8:27:47:f9:80:12:36:
         c8:a5:58:e3:69:ac:02:b5:8e:ca:78:01:ce:2e:f3:7f:05:5e:
         1c:a6:1d:17:7e:76:6f:81:0d:79:65:bf:f9:3c:16:f5:ee:0a:
         b6:8b:ae:02:d7:56:57:a9:17:13:e7:a4:e0:65:db:4e:1c:59:
         16:21:f3:7a:8e:12:48:fc:e6:16:5d:cb:b3:58:e4:3a:f7:c2:
         e0:06:09:63:84:d2:73:11:be:f5:5e:15:6d:f9:06:b8:e2:b8:
         82:d8:d7:d9:15:d6:ae:85:b3:21:52:85:bb:01:99:45:6c:f9:
         20:dc:a8:75:9f:69:60:98:9a:50:8e:48:08:46:6f:8a:ee:b7:
         a3:1e:bd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----