Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
File:                     hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft (raw, json)
Hash identifier:          LtB1NJr0eoIV7LLzwvZpuHljPzwnGnXd5j4NM25Dp84=
Subject key identifier:   AA:53:4D:D9:83:0D:88:57:03:88:9A:07:13:D0:61:83:A0:30:E7:81
Authority key identifier: 85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32
Certificate issuer:       /CN=8559fea7e83e64e5d82562313c3a3f190f49f032
Certificate serial:       01962F072F2E238929D853C04170E520419E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
Manifest number:          0FD0
Signing time:             Sun 13 Apr 2025 12:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:01 +0000
Files and hashes:         1: hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl (hash: NmyJFBmpDXoM0S86ZCKkGae5QWSvYgqey5QUa+txY+0=)
                          2: uwxSfgtDb1hs4GjNpuGb8j73UQc.roa (hash: RSHlzEu5gedHDd64WPHnVhXKRlBuPWqfK8I3+3ZiN70=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:2f:2e:23:89:29:d8:53:c0:41:70:e5:20:41:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8559fea7e83e64e5d82562313c3a3f190f49f032
        Validity
            Not Before: Apr 13 12:02:01 2025 GMT
            Not After : Apr 14 12:02:01 2025 GMT
        Subject: CN=aa534dd9830d885703889a0713d06183a030e781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:6d:20:24:79:1e:1c:81:57:4b:73:06:d0:
                    41:6c:b8:cd:7b:72:64:24:d1:74:18:34:98:68:b0:
                    c6:d2:88:c0:cf:6d:d0:f5:ef:a9:b4:6e:7c:0b:00:
                    a8:ec:cc:40:a3:3c:67:54:6f:de:f9:a9:db:44:d5:
                    cc:09:5d:2a:9a:63:4a:9c:f1:18:37:b3:df:a7:af:
                    c1:77:09:7d:53:cd:2f:a4:bb:ec:c6:5c:c3:f7:6f:
                    09:15:0d:3d:57:b4:fe:e2:b6:25:e9:07:5e:b6:3d:
                    a2:f4:f3:5e:f5:ab:39:d2:9e:5b:2e:19:b5:c8:50:
                    78:c0:37:31:9e:ca:ea:44:51:b6:58:34:e4:17:ef:
                    43:6a:c5:71:0d:ef:d1:53:26:68:40:86:9f:31:5e:
                    19:52:c1:34:2c:b4:fe:85:17:cb:82:a9:4c:db:05:
                    c9:b7:b4:00:49:bf:af:11:89:68:4e:48:6e:97:67:
                    e2:17:f7:6d:57:d3:bd:ee:e6:84:de:d8:36:59:eb:
                    fa:59:2d:33:4a:e0:85:8d:8e:ab:f0:06:3b:b7:bb:
                    0b:c3:57:68:7f:7d:be:53:7a:fe:98:da:f1:2a:7d:
                    f2:71:18:f6:61:f2:df:8f:9d:30:cc:84:e7:0d:37:
                    77:97:2c:79:1f:7d:76:87:12:b6:8e:02:13:35:8b:
                    06:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:53:4D:D9:83:0D:88:57:03:88:9A:07:13:D0:61:83:A0:30:E7:81
            X509v3 Authority Key Identifier:
                keyid:85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:71:35:5e:57:b2:66:ce:4b:f1:ed:f5:77:27:e0:f0:b3:59:
         4c:1b:ad:a4:7e:f7:38:e4:a1:60:4e:fb:63:d0:e2:73:97:fe:
         07:a9:38:dc:e4:f7:ac:a4:53:ee:3e:95:df:72:9b:96:d7:76:
         2c:22:e3:2a:b3:e0:63:e2:03:75:ac:91:46:b3:80:ab:94:ce:
         3b:a4:de:48:70:9d:a0:65:2d:20:34:70:e4:db:fc:b2:32:a4:
         00:ac:9d:f6:bd:a5:de:ad:81:a8:84:17:ac:9b:64:6e:1a:14:
         b7:a4:6f:75:2b:11:78:12:0d:34:37:b9:55:aa:69:38:33:03:
         db:be:9e:97:58:1c:43:ad:ba:8a:7e:a5:7c:20:66:69:f3:7b:
         74:09:66:d9:0c:2d:21:74:b1:8a:b1:ac:72:96:05:0b:3e:ea:
         ea:e0:4c:33:2e:b5:9c:66:23:d3:33:4d:be:24:8e:45:83:02:
         0f:f1:27:64:fc:66:34:48:80:f0:89:55:fb:a6:ce:a0:6f:20:
         da:3b:ee:89:52:27:9c:96:90:40:f2:09:b2:8e:00:b5:e4:0f:
         2c:77:4e:b3:07:c6:65:2b:23:be:64:45:9e:cf:61:73:3e:cb:
         b2:9b:60:97:aa:5a:59:f8:dd:81:c9:ae:fa:6d:8a:ac:f3:c6:
         8d:39:09:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----