Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
File:                     RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft (raw, json)
Hash identifier:          fdYv05YvndxRbSIOIoM5osKgz0P+jb+jtVfGlYDMGy8=
Subject key identifier:   9F:FC:37:89:42:7E:65:E7:07:73:61:4F:8F:70:8D:C2:18:C3:09:45
Authority key identifier: 44:7F:91:43:EA:55:35:8F:BD:62:FA:56:44:54:74:60:17:2E:1A:FD
Certificate issuer:       /CN=447f9143ea55358fbd62fa5644547460172e1afd
Certificate serial:       01962F74426D199030EC35C22482330495D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
Manifest number:          02C0
Signing time:             Sun 13 Apr 2025 14:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:10 +0000
Files and hashes:         1: RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl (hash: tBUTUq2LD7hYno4Ac5CHwJDMskCftHbBGSj14dWP0Ys=)
                          2: XJeFszxemC7e9u-8mZLkEs6aHFs.roa (hash: OiP4xwhS3dePGm/ma2M64C+nfCdXfnndrH2qcjsO/X0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:42:6d:19:90:30:ec:35:c2:24:82:33:04:95:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=447f9143ea55358fbd62fa5644547460172e1afd
        Validity
            Not Before: Apr 13 14:01:10 2025 GMT
            Not After : Apr 14 14:01:10 2025 GMT
        Subject: CN=9ffc3789427e65e70773614f8f708dc218c30945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:02:b1:db:26:3f:18:fb:06:4b:19:2c:65:
                    5e:e6:e6:2a:d8:41:f4:d5:82:0d:a0:62:e6:95:5c:
                    32:26:26:3a:27:08:37:47:79:2c:57:75:16:89:2b:
                    d4:f8:55:ff:db:68:2b:c9:ec:99:3a:de:a5:0b:3f:
                    a6:4a:a1:02:b3:97:b1:23:78:8f:88:86:6b:25:b8:
                    90:5f:ad:01:d2:e9:df:fe:11:b6:66:f2:ca:42:47:
                    b7:b7:f2:2f:b0:26:79:0f:06:00:19:f2:76:ae:99:
                    f3:e2:2c:2a:c4:6e:6d:3a:44:9c:2f:59:79:a6:91:
                    6a:0c:e8:5e:c2:de:70:76:e2:a6:f6:93:de:cf:b8:
                    f3:8b:09:35:52:68:44:c7:e4:0f:cf:c8:3c:ad:c9:
                    d8:19:0d:e5:9f:8c:12:b0:6e:47:22:68:87:95:5b:
                    66:03:31:60:70:10:cc:4d:74:ab:bf:5d:ec:89:f5:
                    e5:46:66:45:54:b9:2e:46:2f:d0:70:99:48:81:a0:
                    7a:15:7e:57:88:c9:2c:06:78:35:5d:ff:92:a5:ec:
                    f9:e9:10:ab:83:be:31:d7:55:f9:7b:0a:82:a9:82:
                    d0:e8:d1:10:53:fb:c0:36:98:aa:93:33:46:5c:c8:
                    15:a0:f2:64:cd:b2:07:fb:2f:ff:cb:d2:0d:de:58:
                    33:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FC:37:89:42:7E:65:E7:07:73:61:4F:8F:70:8D:C2:18:C3:09:45
            X509v3 Authority Key Identifier:
                keyid:44:7F:91:43:EA:55:35:8F:BD:62:FA:56:44:54:74:60:17:2E:1A:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c2:29:6f:d6:3d:0f:d9:ed:92:a1:1d:32:00:c3:27:de:f1:
         1a:80:ff:e5:ac:8f:ab:b2:ed:6d:ec:0c:d0:98:62:b9:17:02:
         9a:99:71:76:2b:b9:dd:36:a7:23:14:d0:d5:57:ee:cb:00:8c:
         a9:95:f4:67:e8:ac:d6:68:25:04:45:c6:19:03:fc:52:d1:b6:
         bf:3e:28:87:1b:df:17:9b:71:14:2a:c3:a5:44:6c:ad:65:c2:
         06:cb:df:18:f3:b7:47:12:b5:89:51:40:8d:58:bb:45:5c:83:
         dc:22:cc:a4:88:62:6d:68:94:7a:a5:3e:0d:a1:02:61:30:df:
         30:31:5f:f4:e8:72:86:a0:e4:8e:e9:72:39:6a:bf:83:0d:09:
         61:d3:20:76:ed:55:bc:a3:a4:4d:8f:bd:4c:ae:72:28:31:ee:
         6c:b2:7a:1e:ff:de:f9:8c:de:34:28:60:d9:3a:fb:97:51:a0:
         71:61:4f:8b:80:6c:38:1b:48:66:a3:4e:7d:cc:89:64:f7:a3:
         3a:3a:a5:79:33:0e:05:45:92:18:fc:a6:76:37:c1:d7:a4:c3:
         8e:e0:00:d9:0f:37:bd:c1:60:67:bd:30:b9:9f:be:fb:3b:4a:
         dd:37:6f:a2:33:5e:0f:db:d8:cb:cc:ec:37:be:db:bb:90:a4:
         3e:9c:e6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----