Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.mft
File:                     hGhM2vJd5AvvwejkIoWo1ew4kEc.mft (raw, json)
Hash identifier:          3OzBA66a1En5vkBfJQDlQsks4N+hyDh4gnhahxG/80M=
Subject key identifier:   E2:5B:9A:5A:E0:17:BE:D2:95:E2:58:9B:F9:C4:9E:D5:D8:76:FA:96
Authority key identifier: 84:68:4C:DA:F2:5D:E4:0B:EF:C1:E8:E4:22:85:A8:D5:EC:38:90:47
Certificate issuer:       /CN=84684cdaf25de40befc1e8e42285a8d5ec389047
Certificate serial:       01962F3D82FCAD76A2BF8F7D2C15605ECF85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hGhM2vJd5AvvwejkIoWo1ew4kEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.mft
Manifest number:          0308
Signing time:             Sun 13 Apr 2025 13:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:22 +0000
Files and hashes:         1: hGhM2vJd5AvvwejkIoWo1ew4kEc.crl (hash: Ay5vj90ceS1PQ2dlXPO5ejeoB4/m50QXiieOKdJel8E=)
                          2: oidwYZW8G2o74OS_a_nCcJCpjCg.roa (hash: ogxgsB9YER6I/w+iNtW/Wqu1gf3XIhY2x4sxgGoaIJA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:82:fc:ad:76:a2:bf:8f:7d:2c:15:60:5e:cf:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84684cdaf25de40befc1e8e42285a8d5ec389047
        Validity
            Not Before: Apr 13 13:01:22 2025 GMT
            Not After : Apr 14 13:01:22 2025 GMT
        Subject: CN=e25b9a5ae017bed295e2589bf9c49ed5d876fa96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:63:41:fb:92:6d:63:f5:f8:34:a3:87:c4:1b:
                    dc:0f:87:6c:82:aa:6c:4c:f9:8d:c7:f1:70:ab:ab:
                    e5:e2:01:cd:73:b4:9a:ce:8c:e0:34:0d:e1:1c:ef:
                    7d:8d:9e:da:ff:6a:35:03:52:d8:e5:f5:4f:dd:c0:
                    06:ea:ef:99:05:84:31:d9:fa:01:b3:93:00:63:ae:
                    ed:86:33:a3:3c:27:c3:1c:d5:24:6f:5b:6d:04:87:
                    9b:90:ce:2c:cf:d2:36:bb:02:40:41:b4:4d:93:7e:
                    5b:81:41:fc:d2:bb:4e:c3:91:1a:4a:1c:3d:15:fe:
                    85:3d:ee:be:d8:45:fa:52:e8:91:18:ae:eb:d1:70:
                    5f:95:c6:d5:56:38:fa:99:63:bf:b4:bd:dd:76:6a:
                    86:13:37:dc:56:85:70:46:4e:45:10:b2:b5:f6:08:
                    30:ca:6b:bc:2c:28:6e:64:05:8d:25:c3:de:48:4e:
                    f8:53:bc:6d:7c:ae:38:8c:7d:ef:0d:c8:83:e0:a8:
                    ad:b8:09:18:ee:0c:9b:2b:8e:99:c7:b2:68:02:d6:
                    80:ea:40:6d:b7:2c:26:a6:62:db:e7:8e:cf:73:14:
                    a9:89:a2:86:54:bf:f8:42:36:55:e8:d8:c2:84:91:
                    d5:52:23:3f:92:e0:ca:0a:6b:f9:51:7b:42:36:4e:
                    c4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5B:9A:5A:E0:17:BE:D2:95:E2:58:9B:F9:C4:9E:D5:D8:76:FA:96
            X509v3 Authority Key Identifier:
                keyid:84:68:4C:DA:F2:5D:E4:0B:EF:C1:E8:E4:22:85:A8:D5:EC:38:90:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGhM2vJd5AvvwejkIoWo1ew4kEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c0383a-f271-4c1e-b5ca-decb22062c70/1/hGhM2vJd5AvvwejkIoWo1ew4kEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:aa:1b:84:72:8c:29:25:89:3a:e7:a3:f6:f7:9a:85:f0:d0:
         14:7c:3c:86:17:b4:54:4d:1d:4f:58:7a:2b:dd:24:25:6d:82:
         1f:c9:80:1a:6b:75:68:5b:1e:a7:a8:39:6d:22:36:30:d4:e7:
         c9:80:92:fd:c3:60:17:de:ce:b2:c3:cc:fd:ce:33:9a:14:10:
         b9:2b:0f:3d:4c:26:7e:42:a7:e1:47:be:1f:6d:ed:c7:e5:1c:
         be:ee:d2:57:e9:44:b3:d8:bb:5c:99:a2:0b:ef:16:00:45:90:
         bd:1d:cf:3d:c4:d6:7d:24:bc:1c:3e:0e:b1:7e:ee:21:79:0d:
         24:a6:28:8e:a2:cd:68:12:65:aa:7e:e8:47:b7:64:8e:9b:e9:
         15:cd:3c:f3:c8:56:42:a7:cc:10:86:40:ed:de:06:43:0e:4d:
         7a:c3:e4:08:e7:c3:82:08:b6:62:9e:2f:85:33:02:01:74:e0:
         1b:42:fc:27:92:e2:7b:3f:12:39:97:56:2c:e3:60:b4:46:f2:
         3d:61:b7:28:80:43:9d:e8:b8:15:87:88:71:0f:36:11:1f:19:
         d1:e0:d9:f5:ac:78:43:b5:8b:a9:46:02:8c:c1:89:20:b7:bb:
         79:64:a2:5c:5b:01:a2:d3:31:a7:a7:49:e6:e3:45:c1:14:e9:
         06:de:33:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----