Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
File:                     hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft (raw, json)
Hash identifier:          EeXMGdW2qYjgAc548xRsTTLm6TPHlngzcstk5TuUS7M=
Subject key identifier:   EA:95:06:ED:94:E5:F4:6F:1C:AD:94:93:93:7F:D0:B4:C9:59:FF:84
Authority key identifier: 84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A
Certificate issuer:       /CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a
Certificate serial:       01962F742AB418AA44422270CE9FDDD9567E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:04 +0000
Files and hashes:         1: hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl (hash: PkSNihAG3F6yIDiggTmr1EjL9yhXwLOiqXOdFtBD+nQ=)
                          2: lge_NhHNBFIDg0XdYly6isNJOS4.roa (hash: pDkiQ0N7P9YYqBWB2tNQa40hEDOK8eDvKfQ/EMtchvw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2a:b4:18:aa:44:42:22:70:ce:9f:dd:d9:56:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a
        Validity
            Not Before: Apr 13 14:01:04 2025 GMT
            Not After : Apr 14 14:01:04 2025 GMT
        Subject: CN=ea9506ed94e5f46f1cad9493937fd0b4c959ff84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:74:d1:11:40:76:de:7b:af:b5:d4:e1:1c:1e:
                    52:0b:ca:92:2d:89:14:9d:d3:df:b9:8f:7a:dd:ce:
                    c6:3c:26:8d:31:1a:61:68:f5:e2:72:c0:46:30:41:
                    f9:58:db:70:d9:a7:69:57:92:0a:0c:d9:52:0d:93:
                    23:95:24:c9:cf:a4:4f:0f:11:de:c4:95:6d:b0:52:
                    62:cc:05:f5:24:63:6c:d7:0b:c7:0c:c3:18:c7:0b:
                    37:e2:4a:d5:75:6e:8a:56:05:3c:b0:36:ba:7f:78:
                    bd:b3:74:61:a9:41:bc:56:76:69:a3:82:b2:a1:bc:
                    11:cb:84:0d:e0:98:43:45:2f:13:76:55:90:e0:44:
                    11:ce:89:e9:9f:96:18:f8:df:89:c5:02:8e:6a:32:
                    b9:0b:9c:ff:5b:8e:82:b0:9a:85:ab:07:f2:c1:24:
                    d4:4b:65:fb:4e:3d:17:6f:da:f7:7c:e5:ef:91:23:
                    c6:77:0f:71:7b:bb:8b:4d:0d:aa:e7:66:b7:91:80:
                    fe:c2:d1:0d:41:83:3f:a2:6c:da:4f:f9:9d:8e:be:
                    c7:1d:1d:9b:3a:59:1d:5a:a1:2b:7e:74:90:38:a4:
                    00:21:f6:27:a3:fa:c9:e0:a4:3b:06:aa:dc:eb:b0:
                    7c:94:88:d9:d9:21:f3:fb:2b:99:19:47:92:92:cf:
                    9f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:95:06:ED:94:E5:F4:6F:1C:AD:94:93:93:7F:D0:B4:C9:59:FF:84
            X509v3 Authority Key Identifier:
                keyid:84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:c4:05:60:1b:8e:19:f9:af:21:93:16:4e:85:34:ad:55:67:
         24:80:8d:84:50:8b:a4:99:e1:c1:7c:25:f8:66:39:44:1f:8e:
         26:ef:a9:f7:55:c0:32:2a:f1:61:3f:87:bd:91:30:6d:8d:e9:
         16:4b:84:8d:4f:12:f2:c5:57:92:4f:a3:ac:6e:44:6c:b2:93:
         30:ba:9f:9b:ac:65:79:14:8d:00:9e:62:f0:46:a0:12:15:f7:
         dc:13:23:1f:08:69:f9:48:7b:8e:86:ae:b3:c5:e4:b0:93:23:
         b3:20:7c:0e:95:77:6e:39:19:78:96:3b:85:56:2e:70:06:14:
         03:93:35:73:2c:f3:71:62:39:58:9d:b9:57:21:a0:cc:0c:19:
         f5:dc:77:8f:74:f1:c0:a3:41:8e:e3:02:02:2a:2e:42:65:f1:
         5c:e2:21:d4:3f:58:ad:c5:0e:ef:e0:24:8b:f9:4a:19:c0:ac:
         e0:ba:56:dc:c0:87:64:d0:8e:3a:f7:a6:a7:8d:8c:60:2e:4c:
         45:ff:9d:e4:81:da:60:62:ee:81:fc:a1:8b:e5:52:93:80:25:
         9d:c0:dd:31:3c:08:89:88:78:15:90:27:86:f1:c5:9d:e2:02:
         7a:3b:35:87:39:52:32:1d:38:42:cf:05:6f:ea:cf:90:f4:ac:
         f7:1e:60:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----