Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
File:                     ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft (raw, json)
Hash identifier:          fxPAsXxt+VyBAshaNZUwZ950jAwhnc8vi4nx2cal6Y0=
Subject key identifier:   73:6E:CB:E0:74:26:C6:9C:6F:73:E4:3B:F7:9E:17:0F:A0:A0:1B:76
Authority key identifier: 85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28
Certificate issuer:       /CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28
Certificate serial:       01962ECFA15720ECE3A6EFE8F48751CA1CA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
Manifest number:          02E7
Signing time:             Sun 13 Apr 2025 11:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:21 +0000
Files and hashes:         1: bnBiazYSImw_ApoJseLeYwZStp4.roa (hash: I2WcGK9ihJdOIVnj78YrG67UcyAn3LlxUVqcoFs7moE=)
                          2: ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl (hash: 10+dEgOWy1yhKrP1QLUjgnKkUkqQEQnBwo0x2epZmUM=)
                          3: qHz8JgVyW7Y2ey-2uD49I-CkUds.roa (hash: nfGpEgDs7AV87sCTHpwjPD+dCfTR2zl6OCzmjs1XoeQ=)
                          4: sOcMNTKEK2vEMDsn_cwPjTFtrV4.roa (hash: pJ6YvqIq3DawUThWjacZ6kiuFXQ2zw291qAdZv05g/Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a1:57:20:ec:e3:a6:ef:e8:f4:87:51:ca:1c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28
        Validity
            Not Before: Apr 13 11:01:21 2025 GMT
            Not After : Apr 14 11:01:21 2025 GMT
        Subject: CN=736ecbe07426c69c6f73e43bf79e170fa0a01b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6d:ce:a3:fc:d6:ed:e4:a4:28:e6:f0:1e:10:
                    7b:33:3e:d4:4b:eb:a7:49:95:b3:52:6f:88:f4:dd:
                    9e:4e:5c:83:9d:9f:96:e5:f5:3b:bc:ec:3d:6d:c7:
                    47:fb:48:33:da:e4:8a:c8:60:4b:d8:d6:6c:43:06:
                    75:02:1e:94:de:bd:f3:02:ba:03:8d:89:a7:f6:26:
                    70:99:dc:c0:38:a9:f5:86:df:ce:31:99:5a:8c:1e:
                    8f:7e:d7:0f:ed:36:81:e6:64:be:1d:e6:9b:60:5c:
                    d1:a7:d4:46:22:e4:9e:0f:ba:10:25:d8:ee:27:07:
                    25:2a:ca:1f:8d:b3:61:cd:dd:43:fb:e8:fa:3a:51:
                    e0:49:3b:60:cf:1f:cd:82:ba:31:f4:e4:2a:e5:e0:
                    66:cc:10:ba:4a:78:6b:bb:b3:0b:b5:c0:49:f7:38:
                    22:5e:a0:d0:be:0b:d6:19:7a:83:04:3b:69:04:7d:
                    ae:59:f5:9f:47:34:19:7c:a1:81:1b:a4:4c:a4:7a:
                    ab:68:ff:26:de:fd:a1:5a:59:b7:f4:0e:83:1c:14:
                    12:62:74:62:71:c2:5e:54:a4:cd:d1:79:49:dc:93:
                    e2:2e:23:02:42:1f:81:05:25:ac:01:fa:ff:98:aa:
                    98:cb:ad:9b:a2:75:d9:f2:94:e5:09:fb:ab:14:ec:
                    98:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6E:CB:E0:74:26:C6:9C:6F:73:E4:3B:F7:9E:17:0F:A0:A0:1B:76
            X509v3 Authority Key Identifier:
                keyid:85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:cf:6f:7c:fb:a0:02:fc:21:5f:8b:eb:81:7d:1f:2a:14:f1:
         06:97:bc:25:c5:9f:8e:7e:62:e1:b8:c0:80:e4:a2:f0:c9:a3:
         cd:68:fb:16:67:13:4d:2d:7b:25:00:f3:86:a3:2f:3c:6b:67:
         fd:4f:f2:c1:43:70:c2:d6:d4:cf:f2:13:e2:99:40:69:9d:3e:
         b3:d2:0f:d8:98:47:ae:83:2e:30:76:82:cc:a6:85:5b:0a:f7:
         08:30:25:07:80:54:44:34:93:52:e3:51:22:3f:2b:52:b9:10:
         cd:4d:e9:48:c7:06:db:ba:a3:d3:a3:99:da:33:1a:47:e8:25:
         19:46:0d:e4:d7:32:de:90:03:9e:7d:c4:bb:c4:95:da:b4:a4:
         f6:1a:bc:06:6f:41:cc:86:ea:f3:fd:90:20:c1:62:fb:42:eb:
         43:5d:41:6e:25:04:2a:96:f1:1c:66:fa:39:89:2d:25:05:e3:
         b8:5d:7c:65:4a:97:e8:d8:ec:47:38:41:ab:a5:4c:87:f5:4b:
         f4:bd:17:33:fe:ab:5f:64:8d:5f:47:8c:a2:85:d2:ae:19:9c:
         f5:c5:8a:bb:4d:e5:5a:b3:40:7b:a2:de:7d:d0:4b:09:e3:51:
         8d:c7:19:a6:28:a5:3c:b2:9e:ee:d5:4d:1b:38:b4:c8:8a:3e:
         f9:fc:68:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----