Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
File:                     hNt0eyiXF6BoTNasgjB6pnuy17s.mft (raw, json)
Hash identifier:          kgizRQzNoDd10jVlcTYQQhUbo5uaOJ2DBo8vQk2U0FE=
Subject key identifier:   D2:C4:F3:49:06:5B:39:78:A4:41:79:59:9C:EA:BE:4D:8E:9D:F6:76
Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Certificate issuer:       /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Certificate serial:       01962F06ECFEDFC1DEB5E71F0171D460DBAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
Manifest number:          122A
Signing time:             Sun 13 Apr 2025 12:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:45 +0000
Files and hashes:         1: 09kK1ESpBv8LiYB9wN6M6ItCuW8.roa (hash: knJCckrITclIVMheMGK5cxyj8YBBf+peiHkDGIWIF80=)
                          2: EqTLLrStWQ1_lYgYRBgmgDPtF_4.roa (hash: VTc+tW3JK91nfNjIEDHdLe+grDG6p0570ue39trIFTw=)
                          3: F4E_A-3GsiPbrHv0FpBjWEBAnaw.roa (hash: Ib9TkfBhAWRiVd7E8+OAkowsQ7AwC9M2n6bdugTcuJM=)
                          4: _MYdCgDWaO6XB5gVesQLpQpeOag.roa (hash: nreKDXAy4j3D6W3Lae5rvKwQFMf1x+LsfYxvbzIyjhc=)
                          5: hNt0eyiXF6BoTNasgjB6pnuy17s.crl (hash: OLU2qaDMJqFH34m/tcV0NHPZ5OEFvMN3opdgRsySBF4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ec:fe:df:c1:de:b5:e7:1f:01:71:d4:60:db:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
        Validity
            Not Before: Apr 13 12:01:45 2025 GMT
            Not After : Apr 14 12:01:45 2025 GMT
        Subject: CN=d2c4f349065b3978a44179599ceabe4d8e9df676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cd:d8:5e:aa:de:31:de:18:23:3d:1b:dd:74:
                    a3:e4:72:fb:dc:db:92:c8:ef:30:38:c7:77:10:dc:
                    77:f8:dc:3e:7d:bf:65:4e:b4:54:2f:8b:54:6c:8d:
                    65:cd:c6:61:15:06:b2:96:32:f2:80:9e:59:0a:10:
                    51:4f:f1:82:21:0c:c7:af:6a:31:3f:01:2e:24:2e:
                    6e:db:0b:dd:ad:0b:6a:30:f9:aa:2f:e8:55:d4:8a:
                    78:23:95:d6:5b:02:45:56:28:26:44:6d:e3:63:86:
                    d0:d4:12:0f:58:01:70:70:a7:6d:2b:ae:5e:41:bf:
                    2d:7d:78:a0:00:5a:de:ac:de:d0:c0:ac:5c:f1:32:
                    8f:c0:4f:a2:2b:e4:7e:41:8e:c9:d4:28:3c:ad:d7:
                    80:0a:24:5c:a8:ae:ba:94:3a:1a:0e:73:e4:23:fc:
                    fd:c5:37:b5:16:54:1f:c3:a1:69:30:46:38:30:1a:
                    f2:39:70:5c:b2:4d:45:f1:0d:7b:d1:70:2f:b6:c5:
                    82:9e:29:a0:e6:94:2c:2f:07:ba:03:e1:aa:cf:8e:
                    9b:6a:20:3b:d6:cc:ef:8e:35:d3:06:fc:5e:a8:dc:
                    3b:25:05:dc:41:2d:5b:4d:3b:30:06:f9:7b:ff:1b:
                    05:47:44:2b:d6:86:87:aa:4c:06:ec:48:ad:76:a2:
                    43:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C4:F3:49:06:5B:39:78:A4:41:79:59:9C:EA:BE:4D:8E:9D:F6:76
            X509v3 Authority Key Identifier:
                keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:20:ec:ba:e4:0f:dc:3d:90:fd:80:63:2f:c2:4e:36:4a:a0:
         ec:fd:ba:e9:e6:b1:dc:c8:8c:d1:00:a4:3f:59:aa:20:79:d5:
         40:e6:e0:b8:3f:a3:b5:07:fe:97:cb:24:e1:75:c8:58:ce:6e:
         ee:3a:f9:df:38:8f:4c:b9:ef:dc:44:09:ec:61:bc:23:1c:1c:
         9a:2d:8c:e7:15:cf:68:79:f8:e3:cf:20:6b:10:3f:19:67:58:
         71:ae:a3:f4:78:3d:ce:45:1d:fb:3d:b5:c3:51:5b:d9:b7:48:
         24:9f:62:82:8f:58:d1:a7:1c:f3:86:37:7a:5c:af:c0:2d:a9:
         94:3c:60:e1:eb:6b:2a:dd:85:6f:ae:e3:c9:38:e8:90:13:66:
         c8:97:58:d6:6e:a3:10:1f:6d:bc:07:42:f2:f3:9e:64:ef:85:
         16:3f:a9:2f:83:1a:42:8d:c8:cd:4c:60:f0:6b:c5:ac:3a:65:
         6a:ff:f9:3e:34:a5:ea:1a:7b:d2:e3:b4:82:4a:92:f6:2e:53:
         cd:16:b3:20:a8:d0:f9:fd:5a:54:fb:d4:bb:cc:0a:98:19:03:
         33:82:04:b8:b9:18:d9:7a:76:99:38:eb:27:1d:50:00:c9:99:
         7f:25:ed:b8:19:b1:85:51:9c:2a:b9:df:a5:b6:45:7b:f2:39:
         eb:b5:1c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----