Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft
File:                     hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft (raw, json)
Hash identifier:          vJf5iy7ce119fP0q8oRHhK4G0ohD6KuuEw2WmJnnSBY=
Subject key identifier:   62:9C:D3:95:89:B4:A0:73:73:BA:49:37:4E:34:EB:3D:86:0B:AC:D7
Authority key identifier: 85:9D:51:77:07:7B:90:81:8C:6F:90:AE:4E:44:33:2D:8C:AC:BB:74
Certificate issuer:       /CN=859d5177077b90818c6f90ae4e44332d8cacbb74
Certificate serial:       01962E61949EC816F549F7A5F6C03D764714
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 09:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:09 +0000
Files and hashes:         1: PbEykFk95Qp-GzLhGQEzPuqSxmk.roa (hash: Hvk7rTnua0DJqMwP5Nyh8b4Zk2rUSg2r4snTzFoJ1wk=)
                          2: hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.crl (hash: 2TmG3F1r2yW3d/q67WdNKfHoC5Pb8k9JYFHqugNyg98=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:94:9e:c8:16:f5:49:f7:a5:f6:c0:3d:76:47:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=859d5177077b90818c6f90ae4e44332d8cacbb74
        Validity
            Not Before: Apr 13 09:01:09 2025 GMT
            Not After : Apr 14 09:01:09 2025 GMT
        Subject: CN=629cd39589b4a07373ba49374e34eb3d860bacd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d0:b3:91:ef:a2:7f:5a:15:ec:b4:fe:0a:94:
                    01:8f:db:f8:d2:99:45:fc:19:9c:bc:2f:ee:cc:c9:
                    56:38:cf:7b:c3:a7:69:dc:7f:05:30:0b:34:32:cc:
                    56:30:9f:e1:9c:ec:f2:df:e8:58:42:d9:4c:27:28:
                    eb:5a:15:bb:01:12:01:97:4b:2c:8b:b9:aa:ec:2f:
                    45:7a:eb:3d:f5:78:bf:d5:b4:b6:d8:4d:69:8e:c8:
                    70:d0:f5:77:ec:cc:84:5c:c5:be:7d:ab:9f:9a:c4:
                    e7:85:3c:8e:0d:e0:c8:00:36:0d:a2:ce:ed:ab:34:
                    90:77:ad:5c:1a:87:3f:79:4d:ea:70:ab:49:da:90:
                    af:34:9f:4d:97:2c:c3:aa:09:51:9d:b7:73:e7:91:
                    34:d3:bc:52:28:e3:80:3b:6e:69:75:3e:df:66:0a:
                    3a:a2:af:8b:c5:69:fd:a3:6d:06:34:8a:64:32:ac:
                    97:a6:a7:f7:79:74:e5:38:d9:16:90:f3:11:f4:e7:
                    92:06:ca:fc:fe:fc:34:66:66:4f:24:a0:25:db:83:
                    dc:1f:15:8e:54:ff:8d:2d:92:d6:7c:86:89:33:cc:
                    8c:ab:0f:4a:e9:37:ab:4e:cc:76:c8:27:88:f8:e9:
                    87:67:74:51:66:11:4d:57:0a:c1:2c:b0:f6:68:ec:
                    84:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9C:D3:95:89:B4:A0:73:73:BA:49:37:4E:34:EB:3D:86:0B:AC:D7
            X509v3 Authority Key Identifier:
                keyid:85:9D:51:77:07:7B:90:81:8C:6F:90:AE:4E:44:33:2D:8C:AC:BB:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:be:02:98:a5:d3:2e:ff:be:d9:35:da:be:80:bd:d2:eb:d0:
         46:11:7d:fe:6e:15:9b:90:f7:ad:72:55:58:e5:98:2d:13:8b:
         be:d2:8a:25:66:f0:3a:bd:45:af:1f:98:68:a7:ed:a2:25:d2:
         74:ee:59:fe:d6:1f:be:e3:6a:40:21:c2:b1:6b:ea:27:56:7d:
         ff:2f:20:4f:b9:5b:ed:52:5f:70:0d:4e:08:07:91:6a:63:03:
         01:37:6b:23:05:5d:dd:72:f2:b2:e2:d9:06:ae:20:f9:e6:ed:
         3c:38:df:78:12:ad:4d:29:a3:cf:d3:46:d8:bc:0b:2f:14:e4:
         80:0a:d8:db:85:f6:2c:55:a7:95:8c:1d:62:47:46:5f:98:25:
         ce:dd:64:34:3d:6e:77:4d:fc:81:6f:b6:1d:95:45:68:32:ad:
         28:4a:31:35:5b:44:a3:f7:9c:5b:1a:4a:cf:ae:91:5d:39:f1:
         06:90:b1:1c:56:c8:9c:86:7d:e4:52:fd:33:63:e3:24:ad:65:
         36:b2:68:4a:4f:ef:52:24:20:92:f2:54:2c:26:72:d0:ca:c6:
         11:f5:9d:3d:40:a0:35:ea:f4:e0:ac:65:0e:b6:d7:c2:1d:b1:
         81:d1:e8:76:09:82:7e:04:d3:b0:ad:a6:60:5f:6d:14:b4:c6:
         2a:2c:d3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----