Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
File:                     ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft (raw, json)
Hash identifier:          BocwNQ9AKWtqw1dZY8uLh53gIf3/P2jRcMIzaH8gaR4=
Subject key identifier:   3D:92:35:16:A6:3A:79:B5:26:6C:A5:F9:9B:6F:A9:9F:59:03:33:DC
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Certificate issuer:       /CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Certificate serial:       01962E2B1453B43CC2A631F64C2901C6033F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
Manifest number:          13AF
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: U-9gs6-HPp-63tFVTgK5YJ7Vtx0.roa (hash: is1qZnviSeshx9o2Nm8hFCS4enc7GdrzL/0sgsJwTiY=)
                          2: WeH1WlhYDBMKUix1j52cA9uy8vg.roa (hash: LDMrba3gzwSdDXVT+UZ/jMO8QMSCHSdMpFhiaPS/CDk=)
                          3: ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl (hash: JM9/nYTpqBauF1Lg8KNGwS25PWv1sbVIllvH/L6b/QQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:14:53:b4:3c:c2:a6:31:f6:4c:29:01:c6:03:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=3d923516a63a79b5266ca5f99b6fa99f590333dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:52:6e:d2:ee:90:6a:fb:e3:ff:24:63:a4:e5:
                    5e:c2:fc:e8:19:f0:53:f5:78:bc:ec:76:72:73:2b:
                    a2:26:ce:8c:44:6a:dd:d3:d6:0c:be:e0:73:b8:9e:
                    d0:8c:13:44:cb:c5:4c:3a:96:77:5a:bd:bf:2b:13:
                    e6:b6:6a:87:dd:7d:0c:db:eb:a1:ca:41:67:3e:d9:
                    4c:cd:f6:ac:db:e5:84:69:c8:e9:90:9f:63:eb:b4:
                    2e:a7:55:19:74:60:f1:d0:4c:c3:0a:c4:d3:02:12:
                    bd:57:74:b7:2b:97:16:9b:2b:0f:95:e9:38:06:a0:
                    0d:b7:f7:70:f6:ab:09:a6:a4:36:81:c7:8d:94:8e:
                    b4:9e:28:0d:f3:6e:ae:0f:9f:02:68:12:c7:f9:74:
                    4f:56:8e:0f:83:b0:71:65:31:ff:b4:f3:90:3b:c6:
                    c5:18:c8:2b:44:24:60:eb:0f:87:0a:71:7e:ae:03:
                    67:6b:73:89:f4:c4:a2:c4:6d:af:a1:a3:4b:e3:1d:
                    5a:af:e7:b3:03:b6:5c:13:1d:f6:4c:43:d4:89:c4:
                    3c:12:0d:8a:01:7c:18:89:74:f3:7e:59:9a:57:40:
                    b2:5f:72:4b:ea:ff:bd:c0:a0:12:ad:54:4c:2e:c5:
                    65:71:b7:ff:75:34:63:60:4a:0a:06:97:32:a5:a6:
                    75:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:92:35:16:A6:3A:79:B5:26:6C:A5:F9:9B:6F:A9:9F:59:03:33:DC
            X509v3 Authority Key Identifier:
                keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:3b:39:24:6f:96:6c:bd:d7:09:88:50:78:ce:0e:b9:4b:db:
         a4:a5:01:df:eb:12:51:82:3c:cc:45:da:2a:05:93:d4:39:60:
         ef:ba:a4:ea:8d:b8:70:d3:ad:59:33:1d:0f:8e:2f:25:f0:3e:
         90:f4:01:77:32:a8:69:15:01:e3:aa:a1:bd:3e:3e:60:f9:01:
         bd:1e:78:68:31:6f:7e:ca:cb:08:67:f7:2c:73:f3:65:72:6f:
         12:1e:e7:a1:72:96:cd:cc:56:72:5a:88:8e:45:e6:8b:47:c3:
         fc:3b:a1:05:ae:77:8a:71:9b:fc:c4:d1:3a:07:7f:d4:ea:01:
         b4:e7:7b:ca:70:94:e6:35:ba:dd:be:dc:f1:e5:d2:c0:63:2d:
         d8:10:52:22:96:3a:07:71:cc:a6:97:d4:c3:16:1d:a5:10:3f:
         49:a8:9b:04:97:5e:83:a1:84:f2:9b:77:00:bc:17:81:16:ce:
         5a:86:e3:ce:57:3b:1d:a6:cc:28:f3:7f:7b:74:65:2d:ca:9c:
         0f:18:85:fd:f4:2d:f6:55:65:92:c5:ca:99:6c:6a:0c:d5:b2:
         d8:f1:66:8b:40:90:6b:c0:41:ee:8a:20:46:ec:4b:c6:7a:49:
         08:80:b1:e1:04:a2:4b:74:af:4c:fd:03:95:e2:39:20:90:aa:
         c2:5b:4a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----