Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
File:                     hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft (raw, json)
Hash identifier:          zSzr07Xy2xFjD5b1jgXtJIPqOtymFSelg/xAetS4VxA=
Subject key identifier:   34:C1:FA:E4:F2:8F:2E:03:4F:8B:2F:37:16:29:63:10:13:71:D7:5A
Authority key identifier: 84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F
Certificate issuer:       /CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f
Certificate serial:       01962F070435344D0AA652F29A237121BDDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
Manifest number:          0F9E
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: 9IYJ3JT9uAsxxt2lyjGjJVqXG38.roa (hash: Fm2Q+Megk5GLVl9u0EHQZ20RgFMN11FSbY9n50k8CTU=)
                          2: hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl (hash: R6rLQ1XfHQn4HV/JAWGc7lVOLYe9LcGm8oKqSN2XiXs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:04:35:34:4d:0a:a6:52:f2:9a:23:71:21:bd:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=34c1fae4f28f2e034f8b2f37162963101371d75a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8d:bd:21:93:c8:78:19:0d:6b:e2:90:d0:b4:
                    7d:90:52:97:3f:ae:fb:c5:d6:c1:ee:26:97:70:27:
                    54:dc:c2:6e:52:85:66:29:a6:4c:d8:85:6e:1b:f2:
                    6f:1a:21:e4:b8:63:3b:b6:13:42:8d:33:33:93:bb:
                    06:26:fa:45:62:82:a3:b9:69:c8:ca:f4:5a:27:e5:
                    5d:57:c9:bf:f8:a7:12:94:fa:71:07:83:12:5c:a4:
                    7d:bc:1b:73:44:11:74:a8:77:47:37:5d:34:88:ac:
                    da:a1:00:a9:ac:48:6c:c3:4a:63:ff:46:63:eb:9a:
                    08:7f:76:e8:bd:09:55:6e:b4:54:1b:66:11:7d:4a:
                    dd:e8:9c:29:6b:9f:1e:cb:83:9a:96:64:eb:87:0e:
                    b6:19:4a:60:ed:4d:73:7d:96:38:cc:95:95:d2:10:
                    43:28:11:d2:c6:9e:89:90:32:48:84:db:02:82:7c:
                    7c:1d:c2:2c:54:f8:23:44:c0:ef:76:d6:2f:8f:e4:
                    c1:8e:42:ee:68:74:28:36:c9:5c:16:54:aa:d0:20:
                    23:19:39:92:9c:81:8e:cc:a8:ec:0f:ff:2c:ee:57:
                    9a:26:ab:59:63:d6:20:78:bf:0f:1d:ee:c3:1a:e0:
                    00:4d:f7:a0:ae:bb:df:cb:f6:ee:c2:f2:4e:b2:aa:
                    44:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C1:FA:E4:F2:8F:2E:03:4F:8B:2F:37:16:29:63:10:13:71:D7:5A
            X509v3 Authority Key Identifier:
                keyid:84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:0d:26:30:e1:5f:67:d3:ab:4b:30:ff:26:71:4d:ca:cc:b0:
         db:af:ab:d9:3c:56:16:4a:0a:02:ea:05:dc:c5:6e:26:28:7e:
         3f:7f:4a:99:22:8b:7f:41:b9:2d:7b:ae:19:a1:94:b1:c1:6b:
         6b:47:83:6e:0e:20:de:39:16:9b:6f:46:ec:13:92:d4:95:bc:
         0f:e3:af:dd:62:0b:c9:ab:65:97:11:21:4f:46:cf:24:b7:e4:
         10:de:7f:13:7b:c9:aa:d5:3d:ab:69:95:86:cb:de:8c:a5:2f:
         4d:a6:14:a6:58:e8:34:43:64:5a:69:89:1b:04:cf:52:87:73:
         94:3f:dd:76:d1:15:d7:cb:db:d8:f2:4e:43:93:06:86:40:99:
         3a:10:0a:85:e3:b1:f7:a2:8e:a1:f1:ad:32:38:be:e2:b6:89:
         61:0a:fa:0d:df:35:fd:a5:84:db:43:0d:8f:de:1f:e0:fc:60:
         1b:f5:3d:27:45:c6:db:7c:04:a0:5a:31:01:bd:29:f6:c7:8f:
         6b:6a:a5:69:22:29:4b:ea:ba:3c:79:2c:64:61:a6:52:4d:d8:
         ea:69:82:26:45:d9:fa:22:10:c6:d4:16:b1:a2:ec:21:f3:49:
         6c:45:f0:ac:1e:b7:06:61:c9:23:3f:8f:4d:f9:e1:da:db:38:
         64:a6:5f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----