Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
File:                     hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft (raw, json)
Hash identifier:          FXcep6Mhhg22VED0ZQMy2czVqRNsxZhr6TWOTBCwRys=
Subject key identifier:   B9:D7:02:07:FD:03:17:3F:46:9E:68:DD:EE:C0:71:41:20:13:73:E2
Authority key identifier: 87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
Certificate issuer:       /CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Certificate serial:       01962FAB1809F80E1AB46AB303837C5C19E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
Manifest number:          0299
Signing time:             Sun 13 Apr 2025 15:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:04 +0000
Files and hashes:         1: hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl (hash: Kz1gbTyGFfE9ysnEi/ykCMBIbTK9bYTeLNYOcp0sQic=)
                          2: xi5pD87H7qmbjEvJ4DLQQdWIHBQ.roa (hash: 0u3oeLmadIHdO8gJo9TuHf58jO+Kc4uU+vliawAHBrw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:18:09:f8:0e:1a:b4:6a:b3:03:83:7c:5c:19:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8736e9b1d01474af2c3e4f8c20f461d136801949
        Validity
            Not Before: Apr 13 15:01:04 2025 GMT
            Not After : Apr 14 15:01:04 2025 GMT
        Subject: CN=b9d70207fd03173f469e68ddeec07141201373e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:16:da:3c:af:ad:22:76:fc:9f:97:ad:49:09:
                    d4:5b:0a:bc:68:10:e1:b6:e2:a6:ef:0b:8a:94:11:
                    7c:cc:b1:49:2b:27:cd:3e:f2:dc:9b:ae:97:57:a0:
                    71:83:25:75:9c:86:9e:63:61:f8:96:57:0f:1f:65:
                    4b:ac:c9:59:0b:cd:63:28:7d:c1:cd:f3:26:b3:79:
                    8a:c2:3d:16:1a:e6:7d:af:54:4e:3a:38:b5:55:21:
                    fd:63:fd:e6:0e:f0:fc:85:75:5e:e4:e5:95:c0:51:
                    79:45:50:6a:cb:ad:b7:b8:1b:e0:9f:57:7e:2c:c9:
                    9f:54:4e:ad:42:75:eb:07:e2:af:33:b5:a9:76:59:
                    1e:06:9e:9f:2d:d0:36:b7:b6:ac:bf:41:56:19:36:
                    e3:7d:ad:c1:f5:62:bc:fd:c9:0e:a3:d3:d4:5b:33:
                    bd:fa:fa:22:b2:03:b5:e9:7d:7d:0f:a7:b9:f8:ac:
                    91:20:6f:d0:19:d7:39:90:54:c6:2c:76:e6:bd:9e:
                    35:a1:f7:19:ab:5c:9e:d3:a6:73:ab:76:d2:a8:7a:
                    27:13:20:d7:60:cd:60:e4:f3:01:7a:3b:a5:76:b0:
                    75:5d:bf:8d:5e:93:9a:2d:43:1a:79:e4:bd:5a:46:
                    d2:c2:42:ac:5c:38:55:95:d4:f1:3c:24:63:7b:11:
                    65:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D7:02:07:FD:03:17:3F:46:9E:68:DD:EE:C0:71:41:20:13:73:E2
            X509v3 Authority Key Identifier:
                keyid:87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:83:aa:61:c5:97:28:ac:cc:42:78:39:ea:18:f9:06:2c:d9:
         a8:37:13:52:80:7a:e5:f3:35:ea:7c:be:c1:ea:7d:af:29:4e:
         10:ee:5b:27:8f:18:06:0b:a2:93:db:58:83:1f:52:84:28:92:
         2c:49:69:4d:27:9b:db:74:a9:b7:6b:27:b7:c0:0b:28:a2:2d:
         1b:8e:68:c5:6d:69:05:dd:84:b9:6b:95:52:98:2c:53:90:e0:
         a7:9f:24:77:6c:93:6d:86:8e:ff:ce:37:03:ea:24:29:a6:8a:
         dc:33:db:11:ae:71:66:52:0e:ff:ff:28:eb:8e:54:d7:7d:f4:
         a6:06:3d:44:86:b1:4c:fe:6b:45:3e:6c:3c:f4:61:f7:d7:6e:
         9a:73:e3:fa:9f:42:ac:73:bc:5f:dd:37:d2:2f:41:2f:95:94:
         9b:0a:2a:29:9a:14:cb:9f:3c:96:4a:b4:aa:df:f3:43:81:5c:
         a4:dd:77:a1:f5:8f:0e:82:20:f7:2a:c0:2a:8b:6c:2c:1c:e1:
         41:d4:a2:36:9d:b1:40:e7:3d:19:db:4f:54:22:6f:df:72:ce:
         c3:d8:36:78:9a:e1:19:0b:bc:60:28:64:7f:cc:70:9a:b9:4b:
         3e:62:d2:41:bf:fc:59:52:3d:9a:c8:6c:ce:55:20:d8:29:cd:
         31:66:9e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----