Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
File:                     hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft (raw, json)
Hash identifier:          NLRht7pCINaKkjXqFK0DJEsBhRJvmww4HGYqonQbwME=
Subject key identifier:   E2:FB:5B:C1:E6:7A:6E:D9:0F:6B:FA:1A:BB:B2:E1:42:DE:09:0C:B7
Authority key identifier: 86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
Certificate issuer:       /CN=86842274b3788b80b2fed916db3880fe08c37528
Certificate serial:       01962F3D599D1F27F6E005FD33114EE2A3C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: 9YAK0xIjvZ0jkU9GYhz1bySm8ao.roa (hash: YSdN3my3ymjfDNRBd0aA0z7OnehzvCW8RCNSPlN8quQ=)
                          2: hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl (hash: LwyTc7QtIx3lpD7fQIFJu2NaY8oCLxBkpYLMpucGk0g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:59:9d:1f:27:f6:e0:05:fd:33:11:4e:e2:a3:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86842274b3788b80b2fed916db3880fe08c37528
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=e2fb5bc1e67a6ed90f6bfa1abbb2e142de090cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3d:b2:d9:81:0d:55:f7:fd:c3:89:d3:92:2e:
                    35:f8:0e:38:69:e6:57:57:4e:9d:90:f9:1c:76:4b:
                    dd:19:75:1b:59:23:16:ab:97:12:7b:0a:9c:6e:09:
                    e7:f2:b7:02:ee:da:18:42:ff:02:ed:2a:6f:d8:4b:
                    b4:13:86:34:87:12:43:ef:91:93:2b:ca:90:ca:3b:
                    45:96:a9:f8:51:64:e3:f0:43:cb:64:e7:5b:ce:90:
                    dd:f0:c1:67:27:00:1e:04:41:17:cb:c2:74:47:af:
                    ad:23:9b:bc:aa:89:d8:57:43:1b:ef:12:0a:6a:2c:
                    ca:88:23:85:e1:52:aa:b2:32:77:dc:f7:cd:b6:c0:
                    31:5e:ce:76:c9:ef:fe:2a:2b:38:5d:15:87:b2:f3:
                    b0:57:b7:56:15:91:84:58:b3:d5:99:bc:67:b0:eb:
                    bd:83:06:03:35:c6:1a:a4:7b:b8:0d:e1:9e:03:78:
                    8f:50:22:99:05:0a:ec:19:ae:c4:1d:cd:3b:ea:80:
                    90:7b:b1:d1:98:74:eb:98:4c:a4:62:bc:27:17:e4:
                    a8:f7:c9:82:d5:4d:54:02:87:3f:de:9a:e5:56:95:
                    a9:a9:8d:3d:ca:74:39:dd:68:2d:8c:87:52:a8:47:
                    74:98:f3:5a:b6:04:05:99:78:29:89:04:99:d6:c1:
                    1d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FB:5B:C1:E6:7A:6E:D9:0F:6B:FA:1A:BB:B2:E1:42:DE:09:0C:B7
            X509v3 Authority Key Identifier:
                keyid:86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:4b:39:8b:83:d0:7f:ba:75:c0:7d:56:61:80:63:a6:cf:18:
         6a:4d:53:f9:59:c4:8e:3c:8f:d1:93:4f:51:37:12:9d:3c:ef:
         bf:35:b4:a9:ab:cf:08:65:38:41:d8:2f:72:5f:11:53:5a:c0:
         fc:b6:23:52:f6:0f:de:6e:5c:cf:c3:86:4d:c4:92:14:6c:7b:
         6e:ce:f7:fd:24:20:24:bc:24:6c:a1:5c:7e:db:5f:24:ea:74:
         7d:8f:40:2d:ff:5b:9f:25:32:b3:2f:c2:5b:e6:99:3f:59:cd:
         ff:5d:3e:de:af:c4:5c:fb:4f:00:15:05:a0:db:3e:1e:77:8b:
         ad:de:42:2b:99:e9:4e:f6:04:7d:11:1a:8d:8b:e2:4f:10:ba:
         23:09:60:ad:6b:68:7a:79:db:46:f8:de:f1:61:93:49:d5:65:
         b7:25:58:a0:68:35:20:73:17:12:9c:18:f3:dd:20:90:0b:a2:
         8e:41:0b:ba:0e:9f:27:63:27:64:07:fd:c9:46:3e:a2:8f:19:
         2f:08:e8:96:8d:52:35:54:36:c3:fa:b7:6a:97:88:10:0e:1a:
         a2:40:21:76:da:a5:3b:46:7f:3a:c9:e8:45:d8:f6:58:ab:53:
         8d:94:44:25:89:11:c0:a0:e4:a0:43:9a:34:60:be:99:6e:e5:
         cb:92:24:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----