Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
File:                     rJHyMKDi7to4EFIudKaYIAcT5iA.mft (raw, json)
Hash identifier:          /TjK4btfB32Ds6SikbiOqqS4ZU543Mjh94bArfDjG7o=
Subject key identifier:   A1:B6:68:7F:DB:38:37:29:18:71:29:8B:84:43:D1:F3:E4:04:F2:8F
Authority key identifier: AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20
Certificate issuer:       /CN=ac91f230a0e2eeda3810522e74a698200713e620
Certificate serial:       01962FAB37C018A54E3AAC925CA216AD63F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
Manifest number:          0DFA
Signing time:             Sun 13 Apr 2025 15:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:12 +0000
Files and hashes:         1: gP_zsXfkqrzssG9MD4Zd7ibjL_Y.roa (hash: I686Ip553hliGvYAsWQzyhxBsV7CF+b8RDLkN0tXgB4=)
                          2: rJHyMKDi7to4EFIudKaYIAcT5iA.crl (hash: /cSi5QL0+WffUnxsf4vTufBxl6J5vHi8hyjbl/h1SVA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:37:c0:18:a5:4e:3a:ac:92:5c:a2:16:ad:63:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac91f230a0e2eeda3810522e74a698200713e620
        Validity
            Not Before: Apr 13 15:01:12 2025 GMT
            Not After : Apr 14 15:01:12 2025 GMT
        Subject: CN=a1b6687fdb3837291871298b8443d1f3e404f28f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c4:f1:06:af:ca:05:2c:ef:85:b2:37:d3:de:
                    d6:49:7c:f6:6e:c1:4b:b6:93:42:27:27:38:92:b4:
                    6c:af:b6:4d:b0:6d:20:02:be:e3:b5:7f:2d:b4:fc:
                    56:e7:33:06:47:47:a9:28:49:53:1c:10:ae:df:ca:
                    25:d6:24:ea:09:19:cd:bc:6b:d4:b3:27:fe:66:25:
                    0d:96:6e:fc:cb:7b:41:1f:74:9a:b1:c0:96:59:2e:
                    67:59:1c:04:eb:f8:27:1a:6c:d6:54:7e:b2:5b:b9:
                    78:6e:b5:7e:63:a6:d5:97:c6:7d:1e:7f:11:f2:9e:
                    bb:54:d1:24:be:f8:25:16:04:31:30:cd:fe:e4:1d:
                    39:ef:43:65:21:a8:14:68:71:1c:15:cb:4f:18:39:
                    b2:11:9a:1e:8f:9c:2d:27:99:1b:a2:d1:65:87:f1:
                    36:73:4d:68:fb:ed:6f:57:07:3a:ed:53:a3:c1:77:
                    a5:b0:92:d6:47:90:9e:ef:62:ba:91:83:f4:fb:1f:
                    9d:60:1f:1f:2d:86:fb:8f:e5:b5:90:68:86:d6:82:
                    fd:07:50:7a:2a:95:59:2d:ae:c5:19:86:55:60:a4:
                    45:a2:31:6c:31:33:ca:c9:8c:b0:71:9c:e2:9e:03:
                    42:7b:e0:b4:a3:a5:98:3f:ec:c4:a4:bb:77:02:17:
                    2e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B6:68:7F:DB:38:37:29:18:71:29:8B:84:43:D1:F3:E4:04:F2:8F
            X509v3 Authority Key Identifier:
                keyid:AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:67:b4:79:3f:2b:ba:ce:d2:01:b0:e0:20:44:eb:8f:42:cd:
         30:f6:4f:52:38:ca:73:4e:e9:5a:99:61:a5:bb:66:02:cc:ea:
         4a:0c:55:48:de:1d:13:b0:d2:6c:6e:a7:b3:52:52:a2:e2:c8:
         2c:3e:0b:fd:89:02:b9:f0:c4:3d:9c:ff:a0:db:b4:1b:07:b8:
         d1:d5:66:6b:3f:6a:49:71:6f:e0:b1:5d:9c:60:18:ef:ca:67:
         ba:a9:8e:53:41:b0:2c:64:a0:c5:a6:56:21:b2:22:0b:6b:2e:
         65:b3:ad:4d:b9:a5:83:16:75:fd:61:70:21:b0:64:01:67:61:
         b7:9a:b3:7a:0c:78:5c:69:c7:aa:68:16:a1:7e:63:dd:bd:a2:
         50:59:dc:fc:d1:8f:2a:15:d0:ef:9d:87:b3:01:6e:21:63:67:
         7c:ca:7b:4d:dc:a0:05:67:2a:4f:5a:2b:b3:1a:2e:50:72:7c:
         d2:69:c3:71:e0:45:5c:72:ab:58:5c:48:42:01:80:25:4c:b6:
         21:37:f6:b8:3a:a6:14:e3:0e:79:ab:7a:b3:93:43:d1:69:21:
         0d:4c:c1:1a:f9:4c:f9:2f:25:4f:42:51:a0:dc:44:c5:94:95:
         67:36:22:b8:44:08:48:40:b4:ae:de:31:01:18:f4:cb:95:0e:
         41:4b:c0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----