Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
File:                     hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft (raw, json)
Hash identifier:          wM2ffMHdvbpErEkECV0V4pPVebHVxCzaMj7M5KIS/CQ=
Subject key identifier:   F7:63:76:7C:79:1B:26:F6:E8:3A:48:72:6D:95:C7:38:2C:C2:E6:50
Authority key identifier: 85:5D:D9:3F:2C:7E:6F:52:2F:2B:28:94:B0:35:9F:66:79:BC:8D:FB
Certificate issuer:       /CN=855dd93f2c7e6f522f2b2894b0359f6679bc8dfb
Certificate serial:       01962F3DE6914D90F92837B8274C0F02C9B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
Manifest number:          0551
Signing time:             Sun 13 Apr 2025 13:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:47 +0000
Files and hashes:         1: gBy9cD3j_tP--kqjiHxj-BEz2w8.roa (hash: GWls9v+X93Qb6tijazZ0OBt3/3oq/+caZQ2/zTy7cZA=)
                          2: hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl (hash: yYO/YF0vqr+HJ49tX96ifQrw6ORKRzWY1OxuYFJeEqU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:e6:91:4d:90:f9:28:37:b8:27:4c:0f:02:c9:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=855dd93f2c7e6f522f2b2894b0359f6679bc8dfb
        Validity
            Not Before: Apr 13 13:01:47 2025 GMT
            Not After : Apr 14 13:01:47 2025 GMT
        Subject: CN=f763767c791b26f6e83a48726d95c7382cc2e650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:8a:38:f2:07:35:c0:9d:6d:03:47:4a:eb:f5:
                    2b:08:c8:f6:cc:f7:43:59:d0:ba:3f:87:3e:9b:2a:
                    96:93:ac:ad:ee:c3:69:98:31:c9:73:a1:43:40:f8:
                    25:a3:96:2a:8f:ea:60:9e:cf:2d:5a:2a:50:1c:0d:
                    57:cc:93:01:a2:d5:b4:42:cd:ed:9e:c9:7a:be:75:
                    5a:1b:ba:54:8b:7e:9b:40:f2:d0:95:bf:2b:c2:e7:
                    06:9c:69:67:68:38:59:97:77:f2:60:19:70:c4:fc:
                    70:c7:ad:ea:95:76:42:c8:e2:f4:f5:52:a4:94:59:
                    66:08:d9:10:21:ae:11:21:f0:d6:05:91:8e:b2:bd:
                    a8:a6:e2:11:dc:9e:72:a3:83:a1:aa:0f:4f:b8:26:
                    39:4b:26:c9:de:89:27:5f:49:07:fa:1a:4b:d3:2c:
                    c9:2e:81:a4:9a:9b:7e:8f:9c:29:99:ed:93:f0:03:
                    af:a3:aa:b7:48:03:fb:ec:b5:10:9c:f7:fd:ea:55:
                    c4:e5:a5:06:1c:9f:85:0c:0b:c3:74:86:b4:b9:60:
                    ed:42:a2:bd:44:61:04:90:73:cc:ba:a9:49:58:da:
                    21:c3:05:ee:26:dc:6e:a9:4a:61:aa:4d:70:84:1b:
                    6e:2f:a9:ab:d4:be:9e:40:22:06:58:2a:f9:df:9d:
                    58:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:63:76:7C:79:1B:26:F6:E8:3A:48:72:6D:95:C7:38:2C:C2:E6:50
            X509v3 Authority Key Identifier:
                keyid:85:5D:D9:3F:2C:7E:6F:52:2F:2B:28:94:B0:35:9F:66:79:BC:8D:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ef:b2:00:6a:64:77:d1:43:a5:06:c1:0d:f2:8d:8c:b7:4f:
         53:9f:89:a0:7d:05:08:0a:d7:16:b8:d3:10:16:11:4f:1f:41:
         57:1f:dd:a7:b3:80:64:45:70:c9:9b:20:59:c2:65:eb:5e:a1:
         68:f0:59:54:51:63:97:00:c1:6c:57:c0:1f:b2:3e:0d:ed:20:
         e2:7c:ca:03:b2:6d:ff:89:20:f7:7f:d4:27:c1:d6:71:05:00:
         a3:c9:17:b6:47:5a:1b:96:fd:d1:c5:d7:8f:7e:18:ef:ae:a6:
         9d:84:bc:0a:94:67:d4:a7:e0:39:5f:da:76:46:a1:cc:f1:2d:
         64:e8:67:08:e3:71:e9:c8:9f:ac:d8:47:54:b2:f9:4f:c9:d9:
         05:60:c2:a8:13:87:8f:d4:32:e6:e6:4e:12:b7:db:ee:3d:ef:
         f2:c5:5e:38:c9:69:9b:1e:95:05:bb:94:87:30:e8:9f:4d:65:
         e5:e2:da:03:0d:1a:a7:c8:9f:bf:f8:38:c4:d9:e4:d1:7a:d8:
         39:5a:39:0c:a4:dd:43:10:cd:d3:5b:e5:2c:d5:f7:42:7c:43:
         c6:66:cd:9b:a1:27:13:b5:f0:ff:59:e2:2b:66:1d:05:4a:e9:
         03:c9:9a:05:64:c6:70:f2:db:6d:68:9e:1a:be:4f:ac:5a:6c:
         3b:fe:09:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----