Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
File:                     R01HT5RpSoEE9eQTqyucCVWbefA.mft (raw, json)
Hash identifier:          mf3W9wHfbzy/b+pTYxPD6wqsZ9iLNJNMvx0oz4wAHy0=
Subject key identifier:   95:0C:93:02:FD:1B:D1:A7:98:30:C6:14:81:FA:3C:8A:2E:6C:F9:6D
Authority key identifier: 47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
Certificate issuer:       /CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Certificate serial:       01962FAB43D6E0F3CC588D70388ECCD520C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
Manifest number:          010D
Signing time:             Sun 13 Apr 2025 15:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:15 +0000
Files and hashes:         1: K09nrG0KqTizFLHUaMNyxM0z2ro.roa (hash: cExkaCJNm1PmYW065hiBGP/O4kugBu6fZ2Nczp2MsYg=)
                          2: R01HT5RpSoEE9eQTqyucCVWbefA.crl (hash: 2+3wWgqhFp4jEIjBsolVP9b75K3tHoHku2I10J+kt7U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:43:d6:e0:f3:cc:58:8d:70:38:8e:cc:d5:20:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474d474f94694a8104f5e413ab2b9c09559b79f0
        Validity
            Not Before: Apr 13 15:01:15 2025 GMT
            Not After : Apr 14 15:01:15 2025 GMT
        Subject: CN=950c9302fd1bd1a79830c61481fa3c8a2e6cf96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b4:4f:d9:69:a4:51:a6:cf:03:97:28:92:a9:
                    d9:7e:82:97:0c:b6:fd:74:79:fb:a7:3c:81:5c:62:
                    02:0d:04:9e:8f:1c:ee:0f:fe:e4:2d:e8:13:7b:23:
                    7c:ff:b4:2b:5b:3f:16:20:86:c7:2a:ef:40:3e:61:
                    8a:d9:6e:1c:70:e4:f5:62:1c:34:6b:f2:79:50:f2:
                    7a:3c:b3:2d:20:d3:3c:31:3e:c3:6e:64:98:ca:72:
                    b1:b8:91:90:ad:bf:60:9a:54:f9:36:78:1b:2b:7f:
                    9f:83:35:7f:b0:c9:11:3b:1d:9e:1d:07:00:b4:2b:
                    e7:ba:3f:24:d6:b6:c6:3a:e5:25:52:fe:d3:d8:32:
                    05:18:15:01:46:9c:b5:6a:00:88:16:36:ea:16:27:
                    9c:a9:59:ea:b3:d6:8d:ec:e9:e2:f7:24:ad:1a:cc:
                    00:6c:94:9f:83:13:aa:08:bf:92:dc:b2:25:1a:8c:
                    76:9c:8b:09:ec:25:bf:f0:5a:75:e2:d8:f8:dc:dd:
                    f1:5f:a2:24:a6:42:1a:47:70:7a:d2:f3:4d:d6:d0:
                    ee:af:7f:6a:9c:aa:21:85:d8:4a:55:57:dc:5a:4d:
                    3e:4f:4d:97:8e:40:58:59:0d:fe:c5:50:27:06:b3:
                    33:f9:1e:9b:44:c9:91:2f:82:da:bf:31:6e:d4:47:
                    cc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0C:93:02:FD:1B:D1:A7:98:30:C6:14:81:FA:3C:8A:2E:6C:F9:6D
            X509v3 Authority Key Identifier:
                keyid:47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:20:a3:f3:47:51:27:4d:b1:a4:a2:b2:92:73:80:e8:94:90:
         2c:b9:16:85:b0:88:74:69:02:37:02:23:b4:a8:04:29:35:5b:
         f2:f7:95:47:9e:bf:a0:aa:f6:62:f3:e8:71:3a:51:e2:56:19:
         42:98:df:e8:ce:e7:bf:50:e0:20:1b:71:33:9e:f4:9f:e6:a6:
         5a:a8:f9:e5:55:4b:7b:ab:0d:63:72:e2:ce:fa:93:9e:60:0d:
         2d:eb:40:96:c4:6a:fd:e3:c6:b3:1f:43:5e:15:55:3c:e5:f2:
         9f:3d:bc:8c:65:05:10:37:24:f2:9a:dc:f7:3c:90:4e:f5:a8:
         50:99:b2:9d:87:14:24:ee:61:b3:85:73:b9:07:b3:ab:43:28:
         a3:fe:f4:1e:66:28:76:51:2d:bf:9c:2c:2e:62:d1:e2:24:4a:
         55:8f:11:f2:8c:b0:70:02:a2:31:8a:93:68:c3:c1:a9:26:62:
         e7:81:cc:85:f5:19:a8:4f:33:c9:a3:ad:29:06:38:d8:48:76:
         96:25:aa:b2:30:14:78:28:bf:b6:ed:5b:b8:44:f1:bf:fb:29:
         18:79:e1:f7:87:27:df:f8:3e:82:74:3c:86:d8:5f:9d:32:5d:
         3d:9d:c4:b3:20:be:50:9d:e3:db:68:ef:58:70:b8:95:6d:7a:
         63:22:aa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----