Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
File:                     hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft (raw, json)
Hash identifier:          +VOeq8xv76sMAhcFpMcApxgNxQBE32Wv6KwUCM+oXSQ=
Subject key identifier:   85:48:85:1A:E3:AC:B3:1B:7A:23:E0:5E:A7:EA:B9:01:90:00:BB:20
Authority key identifier: 84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
Certificate issuer:       /CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Certificate serial:       01962E99A5C773FB1BBCD5B1B6E18EF414C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:02:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:23 +0000
Files and hashes:         1: TYsIS3O-zzJUM31FOE8V5LwUjck.roa (hash: PgdOwzc5CsTmGlgxhk4B6gx5Y87krg/eEL18bNqE8Rk=)
                          2: Zqcute0EJxNZqsLIYM5IZaAu0eA.roa (hash: Ka5B3hGdb3O+/SiQ/oll6eB0Rldz6LRmTl/iQ6A8Wb8=)
                          3: hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl (hash: 7F90RVBmU5AJfvJD71Hs9s08IUZcBTVwMFL6ug/+oLU=)
                          4: pruyBDp_cEEXKvqRx1kQTDgs6oI.roa (hash: noTc5adRBPeIH3/LBjn/ftfA3EYuQEQb7IQr66+/vn8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a5:c7:73:fb:1b:bc:d5:b1:b6:e1:8e:f4:14:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
        Validity
            Not Before: Apr 13 10:02:23 2025 GMT
            Not After : Apr 14 10:02:23 2025 GMT
        Subject: CN=8548851ae3acb31b7a23e05ea7eab9019000bb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:16:1d:30:76:c0:10:33:14:d2:a1:65:01:53:
                    c4:f9:b4:2f:cf:10:c5:04:ee:5d:a9:eb:4d:58:89:
                    ea:61:95:c4:59:38:f1:3c:42:fb:cd:ef:68:f2:57:
                    0b:52:fa:a9:44:2a:28:23:7c:62:76:44:38:d1:55:
                    27:d4:2a:d0:32:8d:d9:33:3a:97:4c:07:02:98:df:
                    e4:6e:e2:44:8b:2a:40:9b:9e:24:e7:45:b9:76:a3:
                    98:27:25:bf:4c:a3:dd:97:46:5e:f3:8f:c5:7c:ed:
                    cd:e8:73:c4:ac:d1:5d:f7:74:5e:89:7b:05:75:c4:
                    06:ad:09:29:11:0e:55:cd:af:f1:c0:43:0c:81:ee:
                    af:ba:b1:08:95:9b:4b:54:21:47:c7:27:5b:07:40:
                    ea:74:90:2a:62:1c:16:1c:3d:2e:52:79:7e:6e:05:
                    f0:84:5f:53:ab:36:69:af:8e:9f:83:b7:30:d0:0f:
                    d4:fd:27:e7:4f:a8:2f:56:89:81:4b:e8:7f:0f:c6:
                    64:90:2d:c8:d2:5d:91:27:cc:e9:d0:a7:25:77:a9:
                    50:35:ce:3c:d1:02:b3:cd:1b:7c:c9:01:d7:6a:a7:
                    ca:57:16:2e:ad:30:d3:16:bf:4b:83:61:95:e6:be:
                    3d:71:71:60:4c:b8:06:1b:4f:fb:2f:fd:73:01:2f:
                    27:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:48:85:1A:E3:AC:B3:1B:7A:23:E0:5E:A7:EA:B9:01:90:00:BB:20
            X509v3 Authority Key Identifier:
                keyid:84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:03:6c:cc:9f:93:14:b0:72:00:9c:3d:36:c1:9a:e7:00:b9:
         da:b1:4c:4d:02:d2:c9:ad:e3:8c:bb:73:08:fa:ef:50:29:fd:
         b1:3c:30:f2:0f:d7:96:c6:02:fd:01:dd:84:8d:05:a8:00:f6:
         0a:11:c4:a2:bb:b5:a7:d9:48:6a:74:c4:59:34:54:d2:5e:7f:
         f6:3e:e9:8e:3a:8b:68:82:22:db:c0:13:86:f4:82:ed:73:d9:
         46:64:13:74:be:6d:de:09:70:ad:0b:3c:ea:71:cb:07:34:e4:
         d9:b9:2a:73:71:0c:86:fd:56:6f:65:5f:19:85:93:d8:67:2b:
         26:2e:d6:8d:1d:57:aa:f0:20:f8:e7:db:03:ff:ec:6d:e3:ee:
         cb:17:19:75:57:d0:45:0b:0b:44:6d:ef:31:10:42:25:a2:16:
         6e:91:e7:cd:da:d2:cd:c0:d9:c1:2b:95:bd:30:3d:82:b8:0a:
         cd:b4:e5:6f:a9:8d:ce:67:1b:d3:69:5e:62:76:c1:98:e2:d5:
         b0:41:f1:90:f6:08:60:5a:64:30:53:60:e1:7c:6d:c3:cc:4c:
         a4:b4:1b:ca:01:e5:e8:b8:83:cc:47:d3:6b:00:1f:9c:79:d4:
         39:6c:28:73:21:2e:cd:a2:15:35:44:1a:9a:ce:ab:16:8c:bc:
         32:8f:a3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----