Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
File:                     HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft (raw, json)
Hash identifier:          PDlMkoCKraAY6J5dhWQ4+noIY/4h2H2KgmKJVV5a2RU=
Subject key identifier:   0B:8B:66:50:39:05:4C:88:07:46:C2:B8:2C:0F:81:79:FE:66:B8:BF
Authority key identifier: 1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0
Certificate issuer:       /CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0
Certificate serial:       01962FAB61317D3F29F4A0FB32954988BF1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
Manifest number:          0BE0
Signing time:             Sun 13 Apr 2025 15:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:22 +0000
Files and hashes:         1: 8seasK16GsaOFWr-SwwyW57ek-Q.roa (hash: qX7qnakcmcX1EuhGkXbf2jHBxhoO6I07uSRi1nBbABs=)
                          2: HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl (hash: FEv1YmNvkvEb+2VUwwgJUPsWL2S4rpoVPcO6d5WxzCQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:61:31:7d:3f:29:f4:a0:fb:32:95:49:88:bf:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0
        Validity
            Not Before: Apr 13 15:01:22 2025 GMT
            Not After : Apr 14 15:01:22 2025 GMT
        Subject: CN=0b8b665039054c880746c2b82c0f8179fe66b8bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9d:b1:b3:bc:ee:66:a8:16:c4:be:29:f5:db:
                    ba:58:52:45:34:8d:24:dd:6f:18:d5:bf:25:e5:af:
                    4c:72:16:61:40:c5:16:49:c4:d1:3f:5d:31:8c:6c:
                    00:ac:e3:36:6e:e8:ac:a4:3e:24:ab:ce:91:5d:6e:
                    b4:2c:4c:37:96:c4:6e:63:52:dc:eb:88:bb:92:6b:
                    b1:86:72:ce:53:0e:54:e0:8b:c2:8d:d7:08:a1:b5:
                    8a:90:6b:43:c3:92:74:73:66:62:ca:20:f0:a8:50:
                    c0:42:b5:2d:1d:a4:59:60:89:5f:59:ed:e5:f2:5f:
                    82:79:ad:cb:a5:c2:c2:43:ad:ad:50:88:1f:7f:2f:
                    ef:5b:ef:2c:3d:b2:e9:c5:ff:5b:59:8b:e8:d8:ad:
                    59:61:b4:37:1b:0a:ee:0c:a3:ef:09:0e:40:19:fe:
                    d1:49:af:56:a6:76:aa:0f:1a:5b:84:7d:3e:fa:23:
                    62:b0:27:0b:1f:40:a2:ac:b3:18:37:b7:f8:3c:a2:
                    4a:a6:fd:fb:fa:fc:ee:44:6a:d9:0a:89:99:2f:f0:
                    0e:86:98:76:b4:8f:e1:eb:c1:16:50:5c:1c:9c:ed:
                    f9:64:ce:32:8a:a0:f9:4e:58:63:07:e3:77:77:08:
                    97:7a:96:1f:94:47:54:d1:ce:a3:09:6c:34:e8:05:
                    ec:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8B:66:50:39:05:4C:88:07:46:C2:B8:2C:0F:81:79:FE:66:B8:BF
            X509v3 Authority Key Identifier:
                keyid:1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:a0:48:c0:72:32:07:7d:b8:4b:47:3e:73:f0:16:5b:86:a9:
         e3:0c:31:61:17:f4:23:01:f7:fc:76:8d:87:22:bd:07:77:1c:
         b5:5f:bd:31:fe:07:e1:a3:f2:3c:1d:46:ce:87:e8:7f:e1:43:
         ef:1f:ed:2a:c6:3b:8a:09:02:d2:b1:30:39:8d:d9:15:44:6c:
         22:66:b3:5b:93:b2:79:af:e9:67:f7:19:c0:ae:90:e8:24:d6:
         9d:a8:20:4d:e8:be:39:de:b8:3f:29:f1:24:f2:32:e0:3f:24:
         3a:b5:db:28:80:03:d6:94:84:0c:80:33:8d:8b:58:f0:79:95:
         db:cf:fb:e0:aa:29:5f:8d:34:8c:ee:aa:22:6c:79:8d:2e:a6:
         d2:e1:7b:75:43:7f:4a:7e:f5:5b:04:49:63:a9:bf:f9:18:4f:
         e8:1b:88:e8:20:e6:c9:37:b0:e6:a2:77:b2:06:3f:c6:94:2d:
         dd:a2:ca:e1:cd:28:4b:ca:3d:f2:cf:d3:b8:26:25:d5:fc:74:
         a4:09:ab:61:be:b0:98:a0:b6:23:b8:6e:7d:79:ee:18:81:37:
         07:6f:72:86:ac:15:b7:07:a6:ac:0f:bc:12:9f:c1:99:46:7a:
         a8:6c:f1:35:d1:9e:71:db:87:d7:ca:fa:65:a5:01:9a:ff:b5:
         ca:61:cf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----