Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
File:                     hMFxArbpLikuyKyvZZ48KQqNC2g.mft (raw, json)
Hash identifier:          C7aSFLSKVNMqlnNDqfFMLcvN/7IdkM0Ink0NdtWq7oo=
Subject key identifier:   AE:B1:27:E6:9D:D4:40:01:B2:FE:E2:76:CC:32:9C:AC:3D:59:4B:2B
Authority key identifier: 84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68
Certificate issuer:       /CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
Certificate serial:       01962ECF9836ADBB37EB366C1CDA69435E70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
Manifest number:          114A
Signing time:             Sun 13 Apr 2025 11:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:18 +0000
Files and hashes:         1: JnBeNm2rTKYmdlnV7LD4ratnhIY.roa (hash: 7sx6YVexwt/Dz3KSILgflEf6IXU43pKeioOkcXpsk1E=)
                          2: S6QxjAoEyX6iOqG1fMnnK5Kxf5A.roa (hash: 2BiJYWVWD7Ka4R5rnZ5XfPiTTBaJVD05DB1Gn6ZZCus=)
                          3: dGsyJ7jM6KvOdugHv606GHJw2t8.roa (hash: T1+/lyFZuo6NN3DPCdQyKfzTAN48j9zk6Jj/XS5Es/U=)
                          4: hMFxArbpLikuyKyvZZ48KQqNC2g.crl (hash: vQq+E6hjzlBGFhlLxOAWJf6E8TaEW0MJ2KU4zIs0ZcI=)
                          5: nIfzUJtgT3TC148NhCHT3nc3TU0.roa (hash: k8UMtfG8SYavn2YwaHNZ1aeJ1v6JZQQf4ItuUMWhh4g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:98:36:ad:bb:37:eb:36:6c:1c:da:69:43:5e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
        Validity
            Not Before: Apr 13 11:01:18 2025 GMT
            Not After : Apr 14 11:01:18 2025 GMT
        Subject: CN=aeb127e69dd44001b2fee276cc329cac3d594b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:56:4f:fd:ca:81:71:cd:6c:4d:80:67:73:d2:
                    91:c0:eb:f3:a4:0d:81:a3:41:1a:54:29:df:3b:1a:
                    9f:48:6f:e2:19:a0:8d:c3:05:5b:4f:dc:1d:39:1e:
                    7c:3e:fe:f9:90:10:eb:07:08:76:16:53:99:6a:8f:
                    46:23:f8:59:58:9c:41:10:38:48:8a:02:78:d4:55:
                    ee:4f:86:23:c3:cb:14:bc:d5:1b:59:07:66:1f:13:
                    e0:a2:cc:c6:0a:76:ed:ef:74:b2:4a:9d:b3:91:ed:
                    c7:58:b3:0e:d5:34:80:48:f3:a6:a1:e0:2a:cf:f1:
                    91:3e:78:15:7f:05:19:8b:82:ad:b2:10:a5:7e:5a:
                    cc:75:d6:6e:c5:ef:d0:ec:53:37:ff:37:a4:fc:ed:
                    80:0e:83:f3:20:c7:3c:c4:6f:13:be:5e:f9:66:7d:
                    e7:eb:2c:06:9d:10:3b:52:5b:6f:aa:05:1d:3b:6f:
                    bf:2e:85:b4:58:9b:f9:d9:e7:1d:ff:c6:15:d2:b7:
                    9a:42:17:a5:ab:b1:95:43:f1:3a:16:a6:20:1e:ec:
                    b0:e7:4c:36:36:de:f1:47:a2:26:b8:9a:29:c5:df:
                    99:2e:78:ac:ce:f2:79:3d:e3:dc:e2:8b:07:02:17:
                    1f:70:b6:c6:65:dc:0b:7b:14:e5:0c:f0:fe:6d:ba:
                    2a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B1:27:E6:9D:D4:40:01:B2:FE:E2:76:CC:32:9C:AC:3D:59:4B:2B
            X509v3 Authority Key Identifier:
                keyid:84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:a8:1a:6f:a9:7e:65:aa:47:d1:5e:a5:43:c2:96:e3:bb:69:
         09:95:a1:8a:28:8f:54:c5:5d:44:24:9d:32:80:6d:1e:58:e7:
         39:76:f9:01:cb:5f:e9:93:62:18:13:5c:7b:83:48:19:e3:87:
         41:95:df:a7:a2:c8:22:06:31:dc:e5:28:ae:a4:71:e7:27:c6:
         e6:e1:e7:8e:cf:22:a2:e9:b2:ac:d3:a1:d5:6d:6f:ed:14:0f:
         13:69:1c:e8:62:2f:55:2e:80:a9:68:46:f0:1e:62:49:be:6b:
         bc:47:ef:0c:27:05:8d:e3:58:7d:22:20:7b:78:be:4a:a2:e8:
         af:31:1f:9d:de:45:f4:eb:22:48:ef:ed:32:ea:4d:11:d3:ed:
         05:b2:34:e2:c4:2b:b3:d8:26:bd:e9:cd:fb:28:b2:4a:89:f0:
         ad:6f:de:c1:7c:09:ac:eb:87:4c:cc:c7:c0:cb:39:b6:f7:e4:
         b3:9e:f7:0a:4e:17:13:df:cd:62:de:b0:7b:68:f2:da:fc:c4:
         6a:ab:09:6c:70:78:e2:31:a5:62:57:e6:ba:d0:58:e6:e4:fd:
         16:1a:31:ea:40:96:c3:14:32:7e:36:0d:70:8c:40:67:d4:d1:
         4e:97:00:82:33:9b:a2:c1:0e:6b:5a:33:0b:d7:23:27:76:37:
         2c:cf:3b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----