Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
File:                     hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft (raw, json)
Hash identifier:          mVO0FP7xKISIq6O9P75qf8obtnwdNiQzEAo6Pzcho38=
Subject key identifier:   99:8A:A1:92:51:86:FC:AE:1C:DB:30:F0:40:AD:15:41:18:DA:0C:87
Authority key identifier: 84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
Certificate issuer:       /CN=8405c07192a8106fedb0760b8945032ca1d3054b
Certificate serial:       01962E61D572134CEE51CF1F598AA228DF3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
Manifest number:          10AC
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl (hash: /+t/gZxWu1AWrhr/TlgC91YBqrBX2A97gVC6b+oBki4=)
                          2: nUJoZVEyJ7Ch6Htt7Gy_l4EGdUs.roa (hash: DEXI+dom+CuVEOOs+wIFSM6Zic3MADgfCsnWrZCTC3o=)
                          3: obW6OP_TwhwF5onkjJQKoKfjNUI.roa (hash: l/D/ppG7tJiDZNB6ndliGGQdEPYg23vbQP0qpyOUO3E=)
                          4: zTErCzfeAqe_qlccgZ6Xz2BpNCc.roa (hash: 9mx99kal+/jXSa14TzN46OzBllqi4wkCOsaAScYXF7g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d5:72:13:4c:ee:51:cf:1f:59:8a:a2:28:df:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8405c07192a8106fedb0760b8945032ca1d3054b
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=998aa1925186fcae1cdb30f040ad154118da0c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5a:c1:c0:73:aa:a2:51:7c:84:55:a0:56:b2:
                    2d:a7:33:5a:76:f0:fd:0b:d3:81:d6:25:8c:f8:d3:
                    e0:da:53:13:34:f1:32:fd:aa:11:ee:78:82:6d:0f:
                    b8:5f:6a:b7:6b:5f:90:2e:84:df:6f:69:07:33:13:
                    ee:de:59:6d:39:7e:4a:e8:30:f7:37:00:6f:26:28:
                    8e:e8:0e:e6:d6:f2:0d:25:09:e4:4b:16:b7:2f:a5:
                    08:25:00:5d:8e:5a:da:03:92:4b:fd:17:b9:df:a0:
                    3d:3f:6d:d1:23:a3:2f:d4:5b:ba:7f:ff:ed:53:3a:
                    61:46:46:11:c2:b0:bc:6f:47:4c:92:82:3d:9e:3a:
                    e5:48:df:5c:13:63:05:f9:82:a1:12:ba:56:5e:7c:
                    e3:51:67:cb:28:73:c6:e5:5b:1c:e8:54:a3:bf:43:
                    a2:74:b8:76:bc:6b:e5:30:25:cf:f7:1a:70:e6:a5:
                    55:99:af:34:9d:07:b5:be:d2:dc:36:d4:61:eb:cf:
                    fc:34:a9:5b:e7:3e:0f:9b:cb:bf:36:e2:b4:d4:af:
                    45:b3:85:8f:57:31:cb:a2:db:45:53:80:4a:81:c7:
                    20:44:4e:82:9a:1b:03:4b:da:db:29:64:5a:b5:01:
                    3a:cb:b9:2a:8f:17:bf:f9:17:95:29:8d:d5:ab:3e:
                    b0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8A:A1:92:51:86:FC:AE:1C:DB:30:F0:40:AD:15:41:18:DA:0C:87
            X509v3 Authority Key Identifier:
                keyid:84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f0:66:b5:56:5a:c7:60:55:8d:28:53:46:22:49:39:e7:d0:
         c2:7e:f1:d7:78:d4:3d:c6:65:77:8c:27:38:3d:73:ad:3a:89:
         88:70:d4:26:f9:4e:2d:45:86:70:d1:0a:8c:7f:e0:4b:d0:4a:
         dd:c0:83:be:a0:30:42:22:47:c5:5e:82:53:42:bd:2b:a1:8f:
         50:03:8f:a2:f5:39:5d:63:cc:23:42:d8:19:18:f3:28:fa:e2:
         78:c7:43:b9:a8:c7:21:86:a1:c7:fc:1e:b5:63:a9:15:48:11:
         d4:c7:c8:38:f8:16:08:d7:25:6d:ff:3a:a3:0c:40:5f:57:8d:
         a2:47:97:aa:fa:b1:26:cd:68:e5:c4:56:0b:6c:1f:31:f8:93:
         48:d9:13:48:f6:d9:c6:58:07:d5:9b:0e:d2:cd:ca:40:e5:2f:
         2d:b7:45:ed:8a:0c:e2:c5:cb:9b:2e:55:42:8b:6f:35:67:c7:
         9d:25:e1:02:c5:68:76:29:70:ac:b8:67:d2:67:60:9c:25:3a:
         94:af:9b:cc:aa:a3:f9:be:16:6c:94:08:ea:ec:d6:b9:69:4a:
         0d:48:ad:d2:74:20:12:73:8b:d2:15:c4:60:97:da:a1:d2:02:
         17:10:07:28:a6:47:ca:47:6c:b1:5c:9b:c2:20:da:1c:2c:66:
         3b:9e:ee:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----