Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.mft
File:                     hDz1u4drdyt63kMpBctpbxNMqjk.mft (raw, json)
Hash identifier:          0kF/TT/enkRyo1WxfZ+3HYbl30bVXRjUEKV4YxLFUss=
Subject key identifier:   C8:4B:65:35:E8:7F:34:0D:8D:00:E6:76:5A:E1:26:46:4E:61:65:16
Authority key identifier: 84:3C:F5:BB:87:6B:77:2B:7A:DE:43:29:05:CB:69:6F:13:4C:AA:39
Certificate issuer:       /CN=843cf5bb876b772b7ade432905cb696f134caa39
Certificate serial:       01962F068846523985D4F4BEBFC0ED532B66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hDz1u4drdyt63kMpBctpbxNMqjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:19 +0000
Files and hashes:         1: 8SOVzbdZRi1TiXuPdQBPQag2b1I.roa (hash: 4UxgH1Bm5rLISlPUt1abtwizcDNcCBaAAK4mH1Wxzxk=)
                          2: hDz1u4drdyt63kMpBctpbxNMqjk.crl (hash: KmYuqM24FF3BBFAppC909PtWmI+wfElGDM8rq9p7c9Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:88:46:52:39:85:d4:f4:be:bf:c0:ed:53:2b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=843cf5bb876b772b7ade432905cb696f134caa39
        Validity
            Not Before: Apr 13 12:01:19 2025 GMT
            Not After : Apr 14 12:01:19 2025 GMT
        Subject: CN=c84b6535e87f340d8d00e6765ae126464e616516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:52:13:a5:3c:3c:d1:90:10:62:36:8a:c6:71:
                    ee:1d:29:00:54:bf:01:6f:17:12:73:91:bb:59:55:
                    b9:c1:b7:22:f6:2b:56:12:35:90:b3:86:ab:82:42:
                    bd:c7:ec:fc:c6:ba:25:78:53:e6:38:bc:46:75:c6:
                    59:03:14:8c:6e:eb:e9:95:de:bf:b3:2c:91:ba:85:
                    29:09:b8:5e:52:74:96:ac:d3:cc:54:36:a3:72:6e:
                    90:e3:8f:73:04:d3:2d:fa:1d:b8:0a:a7:d3:bc:25:
                    b9:b7:91:40:4f:ee:50:60:56:14:b3:98:d4:49:c3:
                    0b:30:d9:3b:5f:ce:da:db:57:19:3f:76:eb:e8:29:
                    6a:69:9d:13:4e:8c:d4:b7:01:8d:ab:df:36:87:7d:
                    18:05:bb:a6:2e:68:67:17:aa:c1:1a:69:a9:aa:67:
                    af:ee:d0:3d:a7:30:1c:60:3e:93:b2:76:6d:d9:c7:
                    b5:06:e6:39:b5:0f:77:c9:63:2e:2e:a0:97:35:27:
                    f9:68:ba:c0:83:39:17:f4:f3:82:06:c5:2a:d1:16:
                    76:63:36:3d:dc:c5:d8:74:46:e8:ea:03:58:95:de:
                    2f:83:4c:4f:e1:29:36:b2:9a:69:aa:5c:9a:8c:ce:
                    9d:87:e5:80:34:7a:cd:2c:6b:5c:8f:1b:7f:1b:ab:
                    52:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4B:65:35:E8:7F:34:0D:8D:00:E6:76:5A:E1:26:46:4E:61:65:16
            X509v3 Authority Key Identifier:
                keyid:84:3C:F5:BB:87:6B:77:2B:7A:DE:43:29:05:CB:69:6F:13:4C:AA:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hDz1u4drdyt63kMpBctpbxNMqjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ff:d1:20:38:d0:90:7e:0f:e5:d4:ff:5d:a4:cf:da:64:aa:
         3b:01:9b:9d:2a:5e:5f:39:08:7f:55:8e:44:2b:d4:1c:c0:35:
         25:17:11:df:20:72:77:f2:20:cc:6f:9f:10:44:47:98:75:9f:
         b6:f1:c3:63:f2:9b:d4:01:d3:26:d9:2b:ce:8e:ce:28:53:29:
         17:ab:f7:6c:a8:16:b5:81:2a:36:66:1b:34:5c:fb:f8:11:74:
         23:1b:72:9c:7d:3e:ce:2d:76:7d:25:0a:f6:f0:1b:56:21:94:
         a8:4a:06:7e:f1:63:c9:07:22:e3:7b:7e:99:00:9b:38:3e:3d:
         ea:50:16:24:08:0b:5b:c7:b4:91:52:9c:9a:e6:e7:5c:78:14:
         03:70:15:bd:ff:d8:d4:11:92:53:57:35:5e:8e:bf:f2:24:0b:
         ec:31:64:4c:0b:b1:64:ce:28:26:6f:32:94:94:89:6e:93:18:
         e5:44:20:41:fc:fc:3d:f3:79:7e:1a:4b:f1:ff:3a:2e:59:c3:
         d1:65:61:d6:2e:9a:6c:8c:08:44:82:9c:dc:15:64:3c:0f:a6:
         15:da:a8:ff:72:bc:a4:b1:89:19:45:24:8d:ac:8a:bf:59:91:
         46:de:55:f7:6b:05:d3:4a:c6:46:e4:f2:fc:da:03:61:d1:96:
         ba:df:23:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----