Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.mft
File:                     hIkfjbCMEQ2bW160xalXnkEzyBY.mft (raw, json)
Hash identifier:          HpIODzXCVq4wYKHUmOVFLqhpAMDFwgiB54JXrjOaY7w=
Subject key identifier:   63:5A:05:01:C7:A1:C0:9F:7D:E1:4D:48:A3:08:CC:E7:EB:96:0A:B4
Authority key identifier: 84:89:1F:8D:B0:8C:11:0D:9B:5B:5E:B4:C5:A9:57:9E:41:33:C8:16
Certificate issuer:       /CN=84891f8db08c110d9b5b5eb4c5a9579e4133c816
Certificate serial:       01962E2B15B631ECA098AAAE7994F7234A36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hIkfjbCMEQ2bW160xalXnkEzyBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.mft
Manifest number:          0493
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: VhR6-WTquHS_2jnfD6TSdxmLio8.roa (hash: W0QV+vJybHz/CWW9vsyk2vI5OGmRUVH5JOXqdf8uQIU=)
                          2: hIkfjbCMEQ2bW160xalXnkEzyBY.crl (hash: /psFgImehp/ofHbBunZIb5V0JkxWbVYdn6z3/36bl5U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:15:b6:31:ec:a0:98:aa:ae:79:94:f7:23:4a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84891f8db08c110d9b5b5eb4c5a9579e4133c816
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=635a0501c7a1c09f7de14d48a308cce7eb960ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ff:4a:03:ef:04:0b:51:91:7d:cc:7b:f9:6a:
                    9d:08:1c:9c:62:22:dd:fe:0e:5d:fd:01:ec:22:75:
                    43:dc:42:95:fd:bc:22:22:49:65:2d:6d:46:38:5c:
                    97:68:69:7f:94:78:55:1f:24:54:8d:f0:5c:57:a0:
                    2a:27:10:66:4d:74:5e:80:d9:be:d7:85:d2:4d:61:
                    f2:b3:33:06:6d:11:21:28:68:6f:c8:7f:0e:92:56:
                    4a:a1:26:aa:53:54:ef:41:c6:5b:5e:43:d8:bc:27:
                    9e:ea:42:1e:57:82:8e:b7:cc:10:5b:1b:62:06:8d:
                    7b:76:8f:85:0b:68:e5:1a:9c:9f:37:0e:a4:0b:d6:
                    7d:46:18:27:84:f0:49:b6:02:5a:7d:3f:7f:0e:38:
                    ff:8f:c7:0b:98:90:fa:5e:1f:93:40:f6:02:ce:5c:
                    96:90:ad:5a:fe:5b:b0:62:3d:9e:81:7d:d7:48:31:
                    1f:25:43:88:bc:1f:6d:fc:67:ad:27:9f:8b:8a:7e:
                    37:20:5f:c4:ff:9f:b6:e9:d3:53:df:fa:df:d7:f2:
                    f4:b9:3b:6d:cb:25:68:81:28:b4:b8:97:87:28:a3:
                    a2:a3:6f:aa:3a:e5:89:da:22:da:d1:6d:89:9b:c0:
                    bf:a0:0c:b1:6e:f5:43:8a:6e:4b:3c:8f:cb:a5:0e:
                    ce:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5A:05:01:C7:A1:C0:9F:7D:E1:4D:48:A3:08:CC:E7:EB:96:0A:B4
            X509v3 Authority Key Identifier:
                keyid:84:89:1F:8D:B0:8C:11:0D:9B:5B:5E:B4:C5:A9:57:9E:41:33:C8:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIkfjbCMEQ2bW160xalXnkEzyBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:1b:72:4d:50:21:6a:44:1e:6e:f5:71:13:07:47:ff:c4:39:
         0c:e2:1f:8b:7c:06:23:73:e7:78:9b:43:84:fd:d9:1d:d5:3b:
         ab:40:52:47:ef:ad:a0:eb:c0:30:c8:fa:58:c1:20:53:a6:24:
         29:60:3b:25:a9:81:25:5d:ef:06:3b:06:04:17:09:c3:8a:92:
         b5:7c:77:92:29:86:ce:c0:cd:20:8d:9d:cb:c9:f1:bf:c3:67:
         44:4a:21:85:38:d9:88:15:89:58:85:ae:fb:df:0b:cc:a5:f1:
         60:53:05:ff:85:bc:13:8f:ab:1c:9c:e1:c1:a8:de:10:3b:34:
         d3:0d:ca:03:ad:42:32:67:a0:1f:89:a0:ea:18:76:39:2c:21:
         b7:08:f1:37:68:45:4d:f5:d2:a2:14:06:3c:7c:9f:6f:4d:e0:
         b5:1e:22:37:9c:41:50:85:40:aa:b7:1f:ee:89:32:7e:f4:de:
         ef:34:01:13:c7:3f:f6:b5:fa:75:79:0e:da:5d:04:9c:06:45:
         99:a4:17:c3:4f:a4:9b:8f:e5:36:3f:e1:15:1c:b4:97:20:6f:
         eb:3a:46:90:50:e9:60:90:3f:17:f3:7a:63:c8:7d:b8:96:34:
         46:eb:93:b4:42:66:16:40:7b:2a:9b:9d:01:f2:eb:8a:72:8a:
         f5:e7:49:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----