Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
File:                     hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft (raw, json)
Hash identifier:          09vRaH06AxoxieT+1pvAK9NQzyK4vTet9mp2O2p4Of8=
Subject key identifier:   2E:7B:40:2E:FC:97:BC:32:A3:AA:E9:9E:43:FD:7A:36:18:40:46:A5
Authority key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
Certificate issuer:       /CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Certificate serial:       01962F0652EE56832FF1F771C24493615C06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
Manifest number:          1381
Signing time:             Sun 13 Apr 2025 12:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:05 +0000
Files and hashes:         1: A3wyPhRamUsWB9_qHryX-EDk1e0.roa (hash: QXg6wSruYhyDuN8fgBSyc5BU3QNmFqD0/uvIAs24UoQ=)
                          2: UuAIaR0v0SUcpnHbi81lgTGwt68.roa (hash: S7roZyfDvSD0rs1D/ICIUXI/40e6tijQPmSOTtOsoBs=)
                          3: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl (hash: bjkXx2efxrE9jQv+tK2Izj6RLQFpHWpQ1wjmhhiKYVg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:52:ee:56:83:2f:f1:f7:71:c2:44:93:61:5c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
        Validity
            Not Before: Apr 13 12:01:05 2025 GMT
            Not After : Apr 14 12:01:05 2025 GMT
        Subject: CN=2e7b402efc97bc32a3aae99e43fd7a36184046a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:49:52:27:ac:a4:08:b4:74:3b:f2:89:58:80:
                    d2:ba:80:dc:4c:7a:e8:90:a2:d5:49:85:03:98:db:
                    52:16:e3:3e:95:9d:c8:76:aa:bb:15:8c:bc:36:f2:
                    07:04:03:53:1a:5f:f6:c1:a6:d1:c9:10:45:5e:88:
                    58:12:06:a9:24:f2:34:74:96:a8:f9:ca:a6:71:9b:
                    71:0c:7b:6f:fe:44:74:56:b6:6e:5c:12:25:5c:e0:
                    d1:b3:00:de:1f:a5:3e:cf:04:2f:33:8c:e2:d1:f9:
                    c6:9d:ec:7f:31:c2:96:72:34:1c:85:4f:47:93:15:
                    64:7d:f7:da:2c:9e:fc:93:d1:d6:7d:3d:86:3f:29:
                    e8:cd:f8:ee:a5:9d:61:65:c0:d3:5a:2a:6c:d3:ba:
                    32:ad:8e:8d:f8:e4:c6:df:02:55:03:84:61:62:f4:
                    5b:f4:e4:9e:27:38:96:4e:25:d1:96:a7:58:f2:ce:
                    e1:4f:93:73:4e:a4:f9:29:e9:b6:7b:6d:ed:7c:64:
                    87:59:43:18:fd:f5:84:4c:43:46:0d:cb:98:b1:e1:
                    6e:e1:c1:9b:bd:f7:82:2b:18:e6:51:f7:f2:d9:b7:
                    5f:cd:10:e8:10:67:c5:76:c0:e1:84:a9:82:a4:18:
                    b2:73:1d:23:70:05:7c:f8:1d:1d:a5:39:27:9f:71:
                    c0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7B:40:2E:FC:97:BC:32:A3:AA:E9:9E:43:FD:7A:36:18:40:46:A5
            X509v3 Authority Key Identifier:
                keyid:85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:62:11:00:3e:93:40:95:69:09:07:7f:63:95:ac:e2:5c:67:
         91:23:1d:a5:71:b8:01:1a:03:d6:0c:f6:71:e5:19:bf:64:19:
         4b:ae:29:fc:d7:4b:9e:2a:f3:1c:4b:a0:8b:69:2b:32:ae:77:
         83:84:c7:31:b6:37:fb:43:81:3f:db:57:3f:2f:3d:c1:9b:69:
         d5:fe:4f:fc:26:da:3d:9c:3c:78:1e:e9:4a:4a:ac:4e:65:1b:
         24:e1:02:e8:14:d8:59:c5:13:5f:c1:da:39:6e:11:6d:8c:17:
         e3:ec:29:02:27:58:ce:9c:03:2d:2b:d0:6a:fe:5c:3e:04:f4:
         37:8f:cf:9d:7d:35:cf:52:90:d2:ce:6a:07:11:72:d6:0f:aa:
         df:0a:cd:10:a5:42:8e:e3:fb:04:66:6c:24:51:e0:0f:ea:71:
         b5:2a:36:1d:b3:53:7c:29:99:d0:b4:da:11:bd:06:7d:b9:25:
         fb:0c:89:89:b0:7e:95:e0:e5:b4:13:32:41:56:3c:d3:df:f2:
         1e:1c:83:5e:59:39:21:df:8c:32:f5:d6:b8:98:7e:db:91:de:
         20:78:42:18:29:ba:4b:b3:04:05:09:0c:5d:5e:0d:87:1e:ef:
         96:3c:87:eb:ab:46:d6:04:db:15:18:5a:a8:a2:b8:c2:c3:dc:
         ce:4a:14:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----