Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
File:                     hh3iAyQAiy0n65dJWszi67zch8c.mft (raw, json)
Hash identifier:          5CqQqeu5Q4gJkUcTaqMeUUw5BHcHB5TT6E+HyiQUs0Y=
Subject key identifier:   E8:CF:4E:C0:1F:88:83:07:5F:30:69:88:DC:C4:9E:C3:F9:DC:C1:10
Authority key identifier: 86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
Certificate issuer:       /CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Certificate serial:       01962F3DE4EF27081D9A28E286E2E922BFEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:47 +0000
Files and hashes:         1: cdpye_KyS4EmcLPLYSZp6vr21yY.roa (hash: Zz0lFiDAwglkcbO2M8ukF/dTePvCgzsApZfE0jU6Bcs=)
                          2: hh3iAyQAiy0n65dJWszi67zch8c.crl (hash: +RI4jizISHrgr9eGa6M3N4e2GdeWCS5reQ9ovac8ubU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:e4:ef:27:08:1d:9a:28:e2:86:e2:e9:22:bf:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=861de20324008b2d27eb97495acce2ebbcdc87c7
        Validity
            Not Before: Apr 13 13:01:47 2025 GMT
            Not After : Apr 14 13:01:47 2025 GMT
        Subject: CN=e8cf4ec01f8883075f306988dcc49ec3f9dcc110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:94:77:c6:26:2c:1f:f9:91:16:52:62:b3:49:
                    c0:b6:87:e0:1e:10:cb:e9:8c:40:79:e1:47:e0:f3:
                    89:a2:34:90:8b:b9:67:42:1d:e4:89:02:2a:82:99:
                    30:24:a3:a3:a0:60:ca:e8:04:f7:42:51:0e:bd:81:
                    71:88:66:72:55:ab:c7:a2:24:62:09:05:04:5d:5e:
                    d8:13:9a:fe:fb:45:02:26:db:0e:48:70:e5:20:ae:
                    b6:e4:76:74:95:59:58:47:c6:25:bf:7f:37:7a:a7:
                    77:07:33:fd:b3:0c:62:f6:fb:7c:28:9c:b2:e4:3b:
                    f3:72:c5:1a:7a:76:9a:78:d6:a8:b9:35:7f:45:f1:
                    e9:22:bb:a9:c9:96:89:c8:62:8b:69:ca:26:01:e0:
                    fd:b4:84:bf:6e:61:ae:5c:2f:cc:de:04:be:a0:9e:
                    e1:a9:ff:6c:11:e0:38:c1:f2:37:52:b3:01:77:80:
                    ec:8b:56:36:12:4b:bf:52:55:af:7c:c0:24:c9:cd:
                    6a:dd:19:71:6c:32:b1:df:f5:38:c5:ff:49:87:ff:
                    39:81:17:a9:0d:06:83:df:2b:82:cb:50:29:99:b9:
                    61:17:ca:e8:2c:5d:ef:17:2d:52:5c:14:c4:5e:17:
                    ce:1e:cc:9b:ab:c9:3a:51:c0:75:65:02:cd:ec:a0:
                    ed:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CF:4E:C0:1F:88:83:07:5F:30:69:88:DC:C4:9E:C3:F9:DC:C1:10
            X509v3 Authority Key Identifier:
                keyid:86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:fb:62:ab:f5:85:52:55:0d:b1:0e:84:f3:05:55:b8:73:b1:
         be:84:f3:88:e1:ca:3d:cd:9a:26:eb:a3:10:dc:66:ec:9d:34:
         59:5f:6d:a6:fb:13:0a:3b:4e:e5:66:0d:79:ce:7b:83:91:c3:
         17:a9:0b:c9:fd:4c:ce:3d:88:15:80:6c:68:9d:6e:fd:fa:9d:
         d3:b6:df:eb:6a:d4:07:b4:cc:bb:31:f8:30:b6:e4:fa:09:be:
         e1:28:90:8e:60:cc:a6:23:a1:de:e2:19:d0:d3:71:a4:d7:af:
         80:7a:09:f4:2e:f5:c4:02:98:93:ea:5a:60:15:3f:9c:0f:84:
         b5:ae:bb:d7:bc:8c:d0:80:39:ee:0d:f1:ef:62:f5:ce:16:0e:
         b4:54:c6:90:43:2a:d9:99:d9:ac:8b:86:c9:7f:d9:25:e4:b7:
         7a:5d:da:2b:54:87:3b:7c:6b:0f:79:64:d7:36:cd:92:eb:b2:
         21:b1:13:8e:33:0a:90:1e:06:4d:53:10:ae:25:e7:bd:1b:d5:
         ae:b7:1c:77:74:88:d1:23:9d:77:4f:a6:b7:32:b0:88:c7:37:
         4c:f9:a3:95:53:32:2c:11:30:79:9b:06:5f:82:33:40:42:eb:
         3a:98:75:f0:7e:ae:63:d6:91:a8:99:cc:aa:cf:fd:b4:49:81:
         ed:7f:09:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----