Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
File:                     hfTuFPbTinzwcSed_3s5FwLjcTU.mft (raw, json)
Hash identifier:          vFJHjypODSLhC3QxoYV7IjQhvRNLm+V1Lby6fUWAamI=
Subject key identifier:   1F:E1:B2:B9:E6:FA:57:BB:EC:97:2D:09:FF:04:44:71:29:84:F4:9A
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Certificate issuer:       /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial:       01962DF4074DDB742A2207696A0799D7D782
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
Manifest number:          1387
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: 2mTo8VIXIrlcxcC_U7fWi211rFM.roa (hash: dDQv+ftOv7QcdnymuU8CSIpInH2sN5DMq5+DCb2C/AM=)
                          2: TOInyVBFZ29DxCH5Hz91KFjRkv0.roa (hash: 1HxYLosFyiepF2xCdMAL0QnFNZ36uK46iHqxZ8byih8=)
                          3: aMobsnKksVIngBq9PAQh6f0uc_s.roa (hash: MgPm9vdG5quTaP1hsCUOaYxEpwoMN/PPpfC7QE2zzrE=)
                          4: hfTuFPbTinzwcSed_3s5FwLjcTU.crl (hash: mm/QQuTwMo+NLVsNno+D24CY3aQtSCUNfV2VNKiAvW8=)
                          5: kHRA5W2PIyWNg3uKfxQ9zz9ybRk.roa (hash: GyaDxHXnOVqYowVqNzWMXYXPUi79rWH8RSfCQGy6dbQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:07:4d:db:74:2a:22:07:69:6a:07:99:d7:d7:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=1fe1b2b9e6fa57bbec972d09ff0444712984f49a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b3:09:fb:d9:40:f5:de:dc:97:1c:c0:7e:ec:
                    54:ce:0e:8d:d3:0a:b6:3e:e2:1b:b1:a0:90:bc:d2:
                    01:14:a0:c3:9a:2c:b7:80:7f:31:06:d7:98:5f:20:
                    6a:7b:38:8e:31:29:75:5a:8b:a6:f3:89:5e:3c:e4:
                    4a:f0:4e:b5:13:ac:f9:0c:75:13:3f:9b:bd:14:35:
                    48:70:60:39:61:99:ea:83:9c:f6:1f:42:f1:30:77:
                    f1:a7:79:bc:44:b4:b6:b4:83:2f:cb:66:ea:f0:1c:
                    39:89:a1:e5:8e:8d:88:67:6a:79:b3:01:8c:c3:0a:
                    ed:a2:27:af:ef:92:54:82:5c:59:e0:be:a5:a5:59:
                    12:8b:50:b9:ed:d0:4a:35:2f:d4:ed:0e:71:76:94:
                    48:2e:df:0a:8d:c6:eb:50:42:f4:50:32:00:aa:30:
                    f0:ba:be:79:44:ad:59:ef:08:9c:7b:d1:70:f3:67:
                    48:d3:b4:3e:69:3b:a9:74:33:18:4c:96:1a:7a:e2:
                    c0:fb:73:45:5e:2e:51:bc:73:36:45:70:dd:83:17:
                    b6:d3:27:9e:15:ea:1e:8a:22:72:fd:b3:ff:01:de:
                    d9:ec:b2:c5:61:7b:eb:fd:29:61:11:01:fe:1c:4f:
                    a4:d8:85:99:05:b4:b4:a3:4b:a9:6e:28:b7:49:70:
                    6f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E1:B2:B9:E6:FA:57:BB:EC:97:2D:09:FF:04:44:71:29:84:F4:9A
            X509v3 Authority Key Identifier:
                keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:47:1f:59:b1:e2:e4:59:43:ab:c4:34:6e:bd:45:be:7c:9a:
         f9:a6:38:86:00:1d:5e:b7:05:8c:43:b3:04:fb:ae:cc:41:c1:
         0b:d6:75:e9:d8:f0:61:e8:1c:d9:88:2a:79:7d:40:5a:1f:0e:
         c5:0c:ac:7f:de:3c:c9:8d:36:90:fb:69:0a:3c:21:c0:66:0b:
         6d:64:b3:6f:07:35:ac:ba:c4:d1:18:e9:d8:ed:7c:1e:00:ce:
         5c:46:f5:22:f7:f6:8a:b0:87:6c:bd:28:23:cb:98:4c:df:b8:
         c1:ad:3a:5e:e3:ac:3c:7b:3a:ce:e2:b0:63:65:76:c7:e5:4f:
         d1:ce:fe:61:c0:a6:ae:f5:bc:49:59:c3:77:dd:5c:a9:d3:79:
         14:60:e0:5f:1c:b5:6a:5c:86:ab:ae:3b:d7:e5:10:c6:b2:bc:
         f1:47:96:e7:0e:62:69:08:33:4d:e9:82:11:c4:f8:6f:e8:75:
         e7:e7:78:69:fb:f2:68:93:cf:94:73:15:a7:36:e3:06:38:c7:
         93:f1:30:25:6f:04:78:6d:6d:ca:7e:2b:93:16:21:0c:20:ad:
         6d:b3:e1:5c:03:fe:0f:90:2a:02:78:f1:41:d0:4e:e9:3c:c1:
         a6:be:4d:c3:66:7d:40:6c:32:8b:ce:0f:40:64:07:fd:8d:f7:
         bc:c0:7e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----