Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
File:                     hNYNLcatgqJXDgAA_dmTlIvEVNg.mft (raw, json)
Hash identifier:          xyx7JE1cpQ6dePZPOnnswqKIyeSmTi3gJKsxJln1lII=
Subject key identifier:   C3:F8:AB:E8:17:F7:2D:68:AE:4F:1B:67:D8:C0:BE:E3:54:2B:08:2D
Authority key identifier: 84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
Certificate issuer:       /CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Certificate serial:       01962F74F674DF9C0E7A6CBA5668E0B173D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:56 +0000
Files and hashes:         1: 01CHf_9w14ZNhv9S3Xhmvi90F8Q.roa (hash: ArkBvOvd5Ct0Kx1EUTZrG268WQ9wBIinLxbgoX9Nw3c=)
                          2: hNYNLcatgqJXDgAA_dmTlIvEVNg.crl (hash: LdrotYZjEKh2iy4wsYqYiWHRaRLghVG17PO4piBglA4=)
                          3: tDdZfF9_zffjxvEpEwDvjqS4I9k.roa (hash: U2TiVT1eXbO5ylElonLSsn5yN8P2ofyhgwF0HWpyq58=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f6:74:df:9c:0e:7a:6c:ba:56:68:e0:b1:73:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
        Validity
            Not Before: Apr 13 14:01:56 2025 GMT
            Not After : Apr 14 14:01:56 2025 GMT
        Subject: CN=c3f8abe817f72d68ae4f1b67d8c0bee3542b082d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b4:d5:6c:01:cf:76:39:3f:fc:be:2f:53:12:
                    2f:54:30:de:0d:54:34:9d:e0:a6:e3:b7:7f:ef:c7:
                    f9:e7:93:88:c7:fb:c7:bf:dd:fe:0d:2a:7d:d9:43:
                    d4:a4:9d:52:2f:c6:ae:0f:29:21:28:f0:44:29:9e:
                    4e:98:f1:04:80:7b:97:79:df:1a:97:9a:e9:5b:a2:
                    73:fc:00:87:90:bd:77:82:6e:76:fc:fe:f1:d5:67:
                    71:16:03:a5:23:d8:d3:15:4e:1e:e0:4a:1b:32:1e:
                    8f:0c:5a:a1:e5:6d:83:7c:9d:3f:8a:11:8c:93:09:
                    98:7f:32:01:da:8c:aa:cf:9e:f9:bd:e8:5d:a6:be:
                    67:68:68:89:05:2b:b7:40:09:59:b8:21:7c:34:fe:
                    4e:39:4a:3a:e3:94:3a:81:25:95:5a:f6:60:36:f0:
                    a1:06:ba:05:65:a1:7e:1e:ee:dd:5e:83:fc:60:15:
                    cf:49:c2:6e:00:0a:65:10:53:43:49:f3:1e:6a:fd:
                    9a:44:92:a6:ee:14:92:32:8c:6e:dc:e6:94:55:85:
                    e8:50:e2:5f:a8:9c:25:c5:15:ed:a4:72:f4:90:e5:
                    dd:41:e1:8c:16:72:10:ed:a2:ca:18:5d:0f:9f:05:
                    9b:d7:3e:35:3f:39:0e:58:53:54:8d:e5:48:f3:fd:
                    8a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F8:AB:E8:17:F7:2D:68:AE:4F:1B:67:D8:C0:BE:E3:54:2B:08:2D
            X509v3 Authority Key Identifier:
                keyid:84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:0e:e7:c1:67:76:2b:d0:ad:b5:fb:56:ef:f3:db:7c:42:ea:
         2e:ca:06:4d:79:60:07:2a:d5:3b:e4:01:e9:6f:72:2d:a6:b3:
         01:db:b9:3b:12:f8:44:2b:fc:75:c5:5d:88:f3:55:9d:fc:8b:
         90:0f:9f:34:24:e4:68:e4:fa:6f:ec:26:c0:c0:ba:b8:73:f9:
         ea:7e:bb:92:21:dd:6d:3b:5f:25:9f:b1:93:ea:a3:57:45:e4:
         1a:6b:e1:e1:27:44:b3:3b:be:03:80:6a:82:2b:9b:0c:bc:07:
         25:24:8e:ab:a9:82:44:4f:b0:06:8f:2e:1d:27:87:55:f2:b3:
         15:ed:60:ab:a0:7c:5a:9e:3b:9a:ae:6c:9e:c5:ac:91:d1:44:
         ca:36:04:26:62:82:15:02:c7:55:a2:bf:66:66:d9:03:78:09:
         6e:bb:f2:57:64:00:22:2f:45:43:76:ce:0f:f9:4f:9a:cb:b4:
         04:1f:cf:1f:52:49:df:fc:90:43:cd:42:b1:ff:83:53:9d:5d:
         39:6a:65:88:39:75:4a:e4:46:ac:27:b1:a0:c9:dc:84:e3:e4:
         72:55:95:01:10:d1:54:82:f0:27:f2:bc:04:c2:7c:a4:ff:57:
         0f:66:ef:c9:95:c7:87:ad:99:ec:a8:f6:b0:ae:bf:fe:09:cf:
         8d:6d:f1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----