Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
File:                     ho8gMJli98bhwyZ_CD4STYPddvw.mft (raw, json)
Hash identifier:          os3ahhealBf9QYzhwUsP/coVZIlA5cU9GLlA5QYFQjg=
Subject key identifier:   17:4F:54:CB:98:E9:F1:04:5F:9E:60:8D:B1:39:67:72:DA:D6:DB:83
Authority key identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
Certificate issuer:       /CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Certificate serial:       01962ECFAE255C226C450EC632B126CCD696
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 11:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:24 +0000
Files and hashes:         1: ho8gMJli98bhwyZ_CD4STYPddvw.crl (hash: +8XC/iYa0YcReiqE3/8KnMqGTp5ZntK7bfNzcDNNujo=)
                          2: rfewBBlrs58wJgdGtzFYKvwGFI8.roa (hash: 12fD5K/uMK4YG5nY9pYsgAuOVyylAM893HbTm9LpUXM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ae:25:5c:22:6c:45:0e:c6:32:b1:26:cc:d6:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=868f20309962f7c6e1c3267f083e124d83dd76fc
        Validity
            Not Before: Apr 13 11:01:24 2025 GMT
            Not After : Apr 14 11:01:24 2025 GMT
        Subject: CN=174f54cb98e9f1045f9e608db1396772dad6db83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:39:8f:13:7c:47:c4:8c:20:4e:4e:41:30:da:
                    b7:f9:9f:e1:88:f3:9a:e7:cb:88:4f:84:cf:cc:1c:
                    4a:f1:ad:89:fd:2d:7a:20:0e:7e:af:f7:24:b4:cd:
                    fa:47:d5:6c:6d:00:25:c6:25:1a:5a:7f:b8:e1:a9:
                    eb:4b:1b:ee:35:16:de:e6:a5:22:c1:e5:2f:17:d1:
                    50:11:43:07:15:48:64:c1:a8:f8:a5:a6:97:06:28:
                    69:10:a7:c1:cd:39:92:d6:2f:7e:b9:b7:ec:98:24:
                    4e:36:a7:7d:51:70:47:f5:ca:23:cc:ef:fd:9a:f0:
                    75:9b:23:46:04:3b:54:52:67:46:f8:e9:f1:c7:46:
                    db:8d:8c:7f:e7:91:fe:8e:df:29:48:93:10:5c:4c:
                    08:b1:2f:63:eb:31:aa:04:60:e6:54:e1:a2:6b:c6:
                    82:d8:ab:fb:b6:14:82:d5:46:bb:b5:0a:91:12:f8:
                    a3:a9:53:c8:23:fd:96:72:5b:fb:68:52:af:82:f0:
                    f0:07:cc:69:23:e3:a9:44:b9:55:b1:df:38:34:54:
                    fd:b4:53:1d:5a:d2:b5:4c:3d:1c:b0:45:c7:d2:97:
                    a5:1c:6e:24:8f:a3:92:8f:27:df:87:a2:e3:69:0d:
                    00:1e:69:37:b6:6d:c9:53:f6:e1:80:5e:b0:31:7e:
                    32:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4F:54:CB:98:E9:F1:04:5F:9E:60:8D:B1:39:67:72:DA:D6:DB:83
            X509v3 Authority Key Identifier:
                keyid:86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:20:f7:9c:90:3e:f0:ab:9c:64:7a:b9:6a:2b:a6:cb:3e:1b:
         25:8c:24:43:d1:01:e8:a6:2c:63:73:aa:b4:0f:d5:e9:03:d7:
         01:86:b1:1b:44:52:b6:ef:eb:d3:7d:89:f2:2b:59:ec:d5:0b:
         3e:70:6c:39:cc:50:b0:c6:62:c2:ee:c0:da:7d:12:4a:df:8e:
         58:07:2b:ad:c9:c1:8f:70:a1:50:f3:e1:0b:61:43:e2:83:3a:
         cd:99:0f:5b:76:8f:ff:88:61:ea:1f:4f:94:b6:22:19:a9:f3:
         47:04:38:d3:ba:58:bd:ff:51:27:12:f1:37:8c:ac:52:aa:dd:
         e6:39:20:a8:9e:d6:24:dd:74:79:84:64:18:de:48:97:29:84:
         21:a0:d6:b2:0b:64:32:92:c9:35:2c:10:51:e1:eb:b8:e5:da:
         5d:b6:62:59:27:f8:ec:50:cb:8e:29:40:13:6e:f0:8c:75:02:
         df:9b:14:24:a5:fd:4a:34:da:de:8c:a1:fe:38:f6:5d:84:73:
         1e:0c:9b:f3:e0:13:b1:f5:35:9a:29:51:3a:92:94:81:66:aa:
         b9:af:b4:58:45:f7:36:93:86:4c:a4:da:57:90:3e:a7:0f:12:
         c4:7d:85:13:f2:cf:b7:33:b0:19:cc:3d:fe:96:eb:b9:38:f0:
         e5:e2:b6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----