Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
File:                     hAVuIt0SPINMCkqnRRbV-zzHfdE.mft (raw, json)
Hash identifier:          skoBX+M3ACFnUjzgoYX6KR8hU8e+Zrk+g5Nzb6ZPk6M=
Subject key identifier:   00:B0:99:3C:02:F2:48:B3:32:9A:0F:DD:09:1F:5A:2A:F5:7C:0D:D6
Authority key identifier: 84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1
Certificate issuer:       /CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
Certificate serial:       01962F746B5D16E31C87B3C3555E05B2B396
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
Manifest number:          0366
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: egLJr-eSZpk4sDdrCGxUJjm8wVU.roa (hash: NBKYZF7j3MH2zl3XNbkXJFKVIPixuj4t75EEGhwneCE=)
                          2: hAVuIt0SPINMCkqnRRbV-zzHfdE.crl (hash: fzI7/yFBmqmHwun6keRie7pqRJxA+dnakWhk0C7KPiE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6b:5d:16:e3:1c:87:b3:c3:55:5e:05:b2:b3:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=00b0993c02f248b3329a0fdd091f5a2af57c0dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:51:36:6d:62:75:8c:d3:12:31:bc:e6:ae:b0:
                    a2:d7:e5:77:cf:5b:cc:29:fa:0e:ef:6f:c1:83:72:
                    ef:d2:e9:50:e3:88:1b:b7:37:c6:99:ac:97:8c:bc:
                    f5:86:e3:1d:99:e8:81:1f:69:03:a8:e1:4f:44:03:
                    d4:c1:4a:e9:5e:63:5d:e2:b0:94:56:37:31:db:f6:
                    7e:7d:81:0a:1e:99:7f:e7:44:74:9d:4f:ab:51:59:
                    ef:67:60:d1:68:ed:14:e0:6b:e9:89:f5:00:d1:db:
                    98:bb:83:40:8a:93:63:29:76:cd:cd:94:84:ed:24:
                    01:b7:b8:a8:25:bc:be:b9:aa:1d:12:b2:b0:8e:dd:
                    e5:1c:15:87:bf:6f:40:71:1f:f8:1e:6a:97:c4:22:
                    01:35:db:dd:4e:8a:b5:c8:73:df:81:43:2b:ed:e8:
                    e6:d7:84:a0:11:ed:9d:91:39:ae:b2:c8:b3:89:27:
                    bf:42:df:5f:35:55:54:62:d2:66:75:30:6d:83:38:
                    1b:8c:92:3d:b9:95:a8:00:37:b4:59:a3:1e:93:7a:
                    f3:24:70:a1:a3:1c:1a:e8:69:9b:e0:2c:6d:c3:72:
                    75:7a:51:a9:88:b7:fd:b4:98:c1:4e:63:16:6f:79:
                    84:3e:8b:6c:4d:e5:75:e5:1d:ad:8d:34:03:8f:a1:
                    d3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B0:99:3C:02:F2:48:B3:32:9A:0F:DD:09:1F:5A:2A:F5:7C:0D:D6
            X509v3 Authority Key Identifier:
                keyid:84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e6:35:a7:80:52:34:a0:b3:14:95:1b:e5:5c:76:35:71:8b:
         12:be:b8:2a:63:80:26:dd:8a:41:7d:73:fc:20:96:1c:7b:dd:
         94:a2:bd:0e:1a:00:f8:37:32:36:e6:04:d0:29:17:fc:89:51:
         9a:d1:c1:3c:ff:9d:4a:5c:e0:05:17:da:75:f7:d2:62:0b:ea:
         d9:16:24:43:19:f2:28:c0:36:a7:a3:f1:31:4b:a1:81:4b:7d:
         f2:f1:4f:b2:22:0c:e1:c2:f0:08:08:fb:d0:34:b9:8a:b4:fc:
         ac:f6:35:eb:76:38:7f:d3:da:f5:1a:9a:54:86:03:32:84:de:
         f9:26:9f:af:37:c3:2b:f0:ae:ec:6c:11:6c:a8:7c:07:c2:5d:
         6b:fb:00:02:33:b2:63:e3:88:4f:66:dc:9c:40:a5:39:b8:17:
         9b:aa:ce:53:0e:ee:c4:13:48:08:e9:56:e9:be:8f:5f:a8:f7:
         8c:da:b6:22:40:41:d8:cb:b2:0d:90:7e:93:1f:ef:a6:46:65:
         a9:65:0d:91:70:b0:8f:d7:09:79:f2:93:d9:41:14:ca:33:23:
         d7:01:7e:21:bd:7b:0a:30:19:d7:f6:54:13:b7:e5:e4:a1:00:
         25:5d:5d:90:c2:25:b7:ef:02:03:9d:71:78:e5:67:ff:79:8f:
         97:98:ee:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----