Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
File:                     hyj0ANg9Saqm6TIMosv6k9pb55s.mft (raw, json)
Hash identifier:          jpobbxwa6pueNd9L78WUBDRLz7QTFoa+M1K0GjreokI=
Subject key identifier:   4F:7E:FE:BF:54:D6:F0:F3:04:B6:F8:FC:EA:8C:6A:39:F4:C6:C4:6B
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Certificate issuer:       /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial:       01962E997CB52172400C1497F62135074E5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
Manifest number:          03B5
Signing time:             Sun 13 Apr 2025 10:02:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:12 +0000
Files and hashes:         1: hyj0ANg9Saqm6TIMosv6k9pb55s.crl (hash: +JzDrPMYdJ+2hgBGOMTIEfX6NnLqgT14y8f/njZVWcQ=)
                          2: iTyIEEO2sljhZiJnAx_Ko0duy2M.roa (hash: T+291sx+aTIxs6928rSAPXeV/0gq52PnDMgh9u7+DTg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7c:b5:21:72:40:0c:14:97:f6:21:35:07:4e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
        Validity
            Not Before: Apr 13 10:02:12 2025 GMT
            Not After : Apr 14 10:02:12 2025 GMT
        Subject: CN=4f7efebf54d6f0f304b6f8fcea8c6a39f4c6c46b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:93:64:a6:e5:01:f3:51:1a:0a:37:ac:02:4f:
                    a9:56:50:f8:6c:c7:6e:24:4e:59:ad:7b:63:a9:c2:
                    96:c9:8f:74:d2:19:90:4b:d4:0e:0f:44:37:ce:20:
                    b9:0a:11:5d:df:86:09:60:30:f1:91:7e:46:c9:3a:
                    ff:41:b7:63:6e:6c:fc:dc:a0:a1:b2:ff:21:84:a8:
                    2e:a4:d7:35:5c:a6:c9:5a:1d:45:3e:37:43:6a:ff:
                    1b:0e:83:55:1f:c0:03:6e:67:62:cb:e2:49:b6:41:
                    29:f0:07:aa:56:0b:39:92:71:bc:ee:ad:36:0f:02:
                    83:93:81:ce:97:49:95:d7:b5:a4:f4:9b:a7:82:74:
                    2d:05:75:5c:74:50:d9:12:fd:a1:79:e1:f5:0d:a3:
                    ee:b4:f4:16:42:b9:bd:e5:e9:c3:3a:34:19:22:96:
                    48:66:be:13:2f:cc:10:fa:63:82:fc:45:e8:7a:6c:
                    73:98:25:dd:99:76:8d:55:be:22:e1:0c:80:9c:64:
                    af:9d:61:9b:57:b3:03:f0:f0:5c:0e:9d:0c:62:c9:
                    93:06:84:25:21:48:40:48:5f:4b:62:49:48:64:d9:
                    32:4f:04:ee:c9:09:7e:61:aa:27:e6:17:49:09:c5:
                    58:55:3a:9e:26:51:fe:85:79:c6:d4:b1:f4:ac:c3:
                    2a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7E:FE:BF:54:D6:F0:F3:04:B6:F8:FC:EA:8C:6A:39:F4:C6:C4:6B
            X509v3 Authority Key Identifier:
                keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:af:2b:12:f9:e0:e8:e6:85:85:c0:85:a5:a0:56:ad:0e:63:
         dd:95:8a:57:62:3a:0f:6d:d4:d7:6e:d9:9b:bc:6a:5f:8f:72:
         6d:d1:df:14:68:62:cd:cf:e1:84:71:ff:3a:ae:58:b2:81:4d:
         bf:e4:a8:f6:cd:71:83:53:84:5b:7f:de:6b:42:99:31:bd:2a:
         7e:6f:2d:9b:89:a2:a0:37:a9:35:c2:76:2e:f1:c7:89:49:16:
         03:26:cb:30:b1:20:e4:5f:38:da:10:4e:0e:54:41:7c:39:c4:
         c2:c1:3f:2a:a7:f7:40:78:ff:e6:8c:78:32:af:3d:2d:bd:82:
         29:c8:db:b0:49:11:be:b5:d0:f3:ed:58:96:55:89:f1:62:98:
         8c:99:7f:61:e8:0c:a9:71:6d:8e:0d:55:4b:da:3a:30:8a:e7:
         9d:78:ad:c8:8e:5d:25:43:44:d3:b9:f2:ef:f7:1b:89:e3:63:
         fa:bc:33:01:29:89:89:58:fc:22:e8:06:e0:a9:65:f5:7d:db:
         07:f9:61:1b:3f:2b:9f:29:31:28:81:e6:55:e9:12:d3:86:59:
         a4:d2:d6:9a:86:41:e7:ac:fc:ed:ae:b5:fe:5f:9a:22:d4:5a:
         11:81:c6:bc:20:00:cd:9e:a8:fb:e0:f7:24:51:b9:cb:46:98:
         f7:08:a9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----