Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft
File:                     hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft (raw, json)
Hash identifier:          53VugRnB+AAVB7CpXt30oWdUwqaf5BoTOftciTNf9q8=
Subject key identifier:   EE:0D:53:22:68:B7:B0:10:16:48:64:E2:9A:67:AD:2F:A0:3C:03:93
Authority key identifier: 84:A4:AC:A0:20:FB:2B:DC:93:A4:72:66:E8:7E:C6:7C:DC:88:57:C5
Certificate issuer:       /CN=84a4aca020fb2bdc93a47266e87ec67cdc8857c5
Certificate serial:       01962E2AF853E3386736AA1A59817E77D637
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hKSsoCD7K9yTpHJm6H7GfNyIV8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: RIDaaDvlCW6kZ_Qmkvg7iHhvkxs.roa (hash: TtEPT7gUdS6PVf0+fJoFxhyGOnl72shQIlFVnXWjJd4=)
                          2: hKSsoCD7K9yTpHJm6H7GfNyIV8U.crl (hash: d8r0Jp6TwU3w7TwwxfsLM3oMPbiZ2hEF00D2DH3u56s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f8:53:e3:38:67:36:aa:1a:59:81:7e:77:d6:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84a4aca020fb2bdc93a47266e87ec67cdc8857c5
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=ee0d532268b7b010164864e29a67ad2fa03c0393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ef:91:72:94:f2:d3:d8:07:16:e2:85:14:19:
                    86:45:ab:59:84:f2:10:12:94:21:97:c9:fa:24:e4:
                    de:ef:99:ff:b8:75:3a:b1:f4:d9:9f:92:db:de:97:
                    99:7a:52:d9:81:65:83:c3:26:39:1f:3b:e7:ca:4a:
                    68:29:c2:0e:52:de:38:89:bf:56:7c:c0:42:cf:91:
                    5c:87:a3:5b:36:0e:db:61:1f:1f:b4:23:dc:5e:7c:
                    90:39:15:31:f8:f6:da:2d:48:b0:63:db:75:bd:a5:
                    1b:14:53:61:15:82:d1:a5:22:97:6a:76:43:58:1d:
                    38:43:a8:b5:0c:df:20:d9:9e:f5:05:7c:00:6d:52:
                    be:6e:c9:e1:f0:92:ef:df:c4:c4:fa:97:ba:4a:ab:
                    29:95:90:91:ed:51:98:00:6e:be:03:d7:ee:5b:e9:
                    63:6f:fe:61:8f:b3:48:cd:96:c5:07:46:18:08:d4:
                    7a:7e:61:c9:90:46:ce:88:57:47:8f:01:5d:51:09:
                    35:bb:a5:ed:a8:e1:42:9d:7e:50:e0:a3:c4:df:3e:
                    e0:70:c2:b2:d2:1b:45:30:e9:30:27:65:2a:2f:80:
                    36:95:1a:a6:ac:67:60:fb:fc:9a:bc:29:13:d8:a9:
                    6f:8d:d4:d8:ad:83:e0:44:f2:ae:11:26:26:9c:84:
                    83:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0D:53:22:68:B7:B0:10:16:48:64:E2:9A:67:AD:2F:A0:3C:03:93
            X509v3 Authority Key Identifier:
                keyid:84:A4:AC:A0:20:FB:2B:DC:93:A4:72:66:E8:7E:C6:7C:DC:88:57:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKSsoCD7K9yTpHJm6H7GfNyIV8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:34:1f:40:bb:ed:15:46:6b:04:a5:bf:94:21:c3:47:c2:14:
         c8:77:d1:2e:41:78:ea:ba:d8:4f:2c:5e:7e:a3:4f:3f:f0:b8:
         dc:bd:72:d7:91:f9:7b:1e:dd:bb:42:bf:59:3c:35:20:c7:33:
         d9:6f:8a:5f:8e:90:a7:e7:9e:e3:cb:8c:38:8c:95:05:06:c1:
         79:51:84:64:fd:8d:dd:32:1b:b6:5b:3e:7a:06:93:ca:c1:b1:
         90:9e:d6:4e:96:07:64:11:4a:66:1f:19:64:0c:75:61:7a:14:
         42:f7:cb:c6:9f:6e:45:f7:ad:14:63:8a:f7:7f:37:2f:62:ca:
         d0:f3:b1:0d:ed:65:00:1c:cb:1b:65:10:55:9d:d2:bb:5f:91:
         dc:46:99:73:fb:93:f4:05:5e:f2:91:87:10:74:cf:41:9f:23:
         d8:fa:6a:8b:9a:5f:65:e4:6d:a6:db:b2:3d:ed:d1:81:ff:49:
         fd:73:60:3d:90:74:64:2e:27:64:01:01:76:19:9c:d5:ef:6e:
         a3:e2:4c:e7:37:7c:df:a2:53:1b:1e:30:ed:3d:5b:f7:e6:03:
         0e:70:bd:d8:23:68:45:93:b0:e6:68:73:2f:2d:69:a0:21:c7:
         59:31:c2:96:0e:cf:a3:a9:6d:d5:c7:2d:24:c9:d5:4c:a1:87:
         ee:b5:35:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----