Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
File:                     hAKSSGHLwIjGVahyU1qQMQige_E.mft (raw, json)
Hash identifier:          8HOzqHPcuUqVU8QqwIh7M+Z0J2ZLrXmZiazajNGw9L8=
Subject key identifier:   68:95:91:95:88:75:D3:06:B1:5D:42:1D:75:99:CF:70:7E:FC:EC:DD
Authority key identifier: 84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1
Certificate issuer:       /CN=8402924861cbc088c655a872535a903108a07bf1
Certificate serial:       01962F065565D9679CAB64B5E3522923E51B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
Manifest number:          1123
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: V4HzyqT3UdFuM-GyIseILy4xTfQ.roa (hash: 1TwXBA5f5XgP5uZG5yeFX6kZqTX4W9t72jbcfsBpAgw=)
                          2: hAKSSGHLwIjGVahyU1qQMQige_E.crl (hash: rP8s+zdIAR7fYw4C6P8l5y7OXzkoE4WbTz8T6NTAmUo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:55:65:d9:67:9c:ab:64:b5:e3:52:29:23:e5:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8402924861cbc088c655a872535a903108a07bf1
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=689591958875d306b15d421d7599cf707efcecdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ab:69:3a:23:d9:29:f3:b9:c4:d7:e0:90:0c:
                    51:40:1b:86:05:e1:ab:1b:12:8a:0a:21:2d:f5:6d:
                    3a:72:44:e6:64:cf:67:19:2e:f3:c7:1c:a6:0d:21:
                    b4:29:c1:57:67:ec:9c:09:bd:c1:6e:97:ce:ac:bd:
                    b1:31:b5:28:79:7a:07:8a:e4:20:a1:39:73:f4:fd:
                    59:d6:64:7a:3b:f4:1b:e3:5d:21:fb:16:35:c6:97:
                    6f:47:57:31:c8:23:4d:ed:f1:0b:d2:13:5b:88:9e:
                    2e:9d:d2:08:82:bc:a1:c3:41:51:38:b3:f1:5c:6c:
                    e8:9c:91:a4:1a:8e:a4:bc:fe:f9:46:c4:4f:04:a1:
                    75:33:50:2b:6c:40:ac:b6:39:5f:50:73:23:e9:78:
                    99:a9:3c:69:40:d4:1e:92:cf:bb:03:df:4f:c2:98:
                    c0:4c:9a:76:e4:9d:83:c4:fe:cb:3c:15:7d:b2:df:
                    eb:fb:cd:76:9d:ff:f6:60:22:ca:37:0e:5e:b0:b2:
                    aa:ed:13:04:1b:c7:a1:94:b8:04:9b:71:25:1e:0e:
                    f3:dd:4a:22:4e:da:54:a9:13:3c:c9:c2:ee:1d:d4:
                    22:96:48:52:f2:5a:4d:b4:0a:14:df:92:81:f6:2a:
                    eb:29:c2:4c:ce:8c:99:52:e1:a4:86:8b:61:f0:f1:
                    56:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:95:91:95:88:75:D3:06:B1:5D:42:1D:75:99:CF:70:7E:FC:EC:DD
            X509v3 Authority Key Identifier:
                keyid:84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:2f:35:4f:ce:a9:54:cd:4d:ac:44:b3:72:55:3a:43:ec:da:
         db:a4:0c:6f:df:e4:a2:91:f1:0d:ca:5e:3e:ac:a8:4b:7e:c2:
         5e:c7:37:02:9f:3d:98:7b:8e:d3:5d:15:35:6f:62:b4:f9:bf:
         00:57:38:e2:9d:3d:5e:e5:c7:51:af:f3:46:f6:87:0d:fb:0f:
         d8:5e:a0:20:72:01:a8:18:ab:6b:a8:1d:fb:7b:9a:2c:18:b7:
         8c:e5:31:64:62:31:51:9f:3c:bd:08:7b:5c:d0:d3:ea:ef:89:
         8c:ea:70:31:ac:68:93:21:a5:b8:9f:4c:e8:5f:f4:79:b5:1d:
         89:cd:ab:1c:b6:39:8e:f7:72:63:d5:3f:23:f9:f0:53:b9:c2:
         99:3b:f3:e9:96:4c:02:a8:23:47:b6:51:41:a7:f2:76:ab:5d:
         76:e7:65:12:74:a0:40:13:10:4b:7b:2d:23:e4:43:73:24:57:
         b8:23:95:e2:77:94:84:59:7a:39:f4:80:31:d4:d2:81:56:cf:
         d0:50:9f:f8:fc:47:cd:40:ec:d4:17:a4:4c:97:fc:5e:0f:d0:
         58:bf:58:d4:83:11:d7:21:ff:87:d4:fa:bc:1d:38:b7:c4:22:
         4d:b5:4d:38:3e:cf:fb:e2:69:3b:aa:92:0b:3c:db:78:43:a2:
         34:02:28:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----