Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/bb6f34-347b-4bae-8f92-ea84a51eb3dc/1/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.mft
File:                     hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.mft (raw, json)
Hash identifier:          IKpTpB9B+s+1E4vCHA0sk3Rvc5V2mKlZn3TGAruCzPs=
Subject key identifier:   C2:23:BE:E9:5C:CD:8A:6C:0A:BF:C3:B9:0B:58:95:09:E5:35:CE:1C
Authority key identifier: 85:F8:70:11:9E:59:21:BF:12:49:5D:C9:02:DC:FE:3D:8D:4A:37:D8
Certificate issuer:       /CN=85f870119e5921bf12495dc902dcfe3d8d4a37d8
Certificate serial:       01962F3D430A9CF2968F280254958F2B8006
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/bb6f34-347b-4bae-8f92-ea84a51eb3dc/1/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.mft
Manifest number:          93
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: cllA8kNp-t480y7IfyyWuiklziY.roa (hash: 5bq8pPC98WVuN+UCw7i3OOCXOObrhETW5cCP805rEU4=)
                          2: hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.crl (hash: TY9qgzEWwFNvmgHdM7zc1KrcYGnhhANFR01+p6AEVBA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:43:0a:9c:f2:96:8f:28:02:54:95:8f:2b:80:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f870119e5921bf12495dc902dcfe3d8d4a37d8
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=c223bee95ccd8a6c0abfc3b90b589509e535ce1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:25:29:97:f1:77:37:c8:a8:7d:b4:ea:6d:da:
                    c4:60:3b:b8:be:7d:01:b5:70:65:52:c4:bd:83:1b:
                    05:64:06:39:7a:48:b7:31:dd:cf:33:7f:d0:88:8e:
                    ac:22:9e:f1:73:37:ba:f3:30:b6:c5:d8:a2:66:de:
                    8a:a3:f8:83:5e:bb:87:97:d7:22:3b:a0:57:87:95:
                    91:31:fb:15:8d:28:ad:3e:cb:3c:c1:d9:58:28:3b:
                    0f:bf:04:4b:2f:0d:51:9a:8d:af:18:27:b2:89:ef:
                    b2:b9:01:58:f0:44:bb:83:5f:a8:70:4e:03:3a:a1:
                    b2:01:91:69:b6:4e:a3:73:dd:c3:39:2a:ec:79:6f:
                    ef:4b:54:ba:86:fd:bf:b6:ae:07:6a:52:17:8a:8b:
                    a5:e7:0c:68:0c:f4:17:25:83:3c:4d:a1:f0:00:3d:
                    ff:3d:25:c8:e5:08:81:34:79:cf:02:a2:d1:56:3e:
                    e0:78:e4:f1:3d:77:46:e6:df:fd:bd:b6:24:ea:c0:
                    97:cc:c4:05:76:0f:bb:2c:7b:75:6f:8d:c2:39:0f:
                    d4:0d:e2:71:38:1b:19:0c:04:8a:35:3b:05:31:a1:
                    cf:e3:ac:2a:e3:a2:3b:18:07:80:48:e8:2b:7d:eb:
                    0c:13:9f:16:8d:2d:35:e6:05:71:ad:6f:7f:17:0f:
                    77:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:23:BE:E9:5C:CD:8A:6C:0A:BF:C3:B9:0B:58:95:09:E5:35:CE:1C
            X509v3 Authority Key Identifier:
                keyid:85:F8:70:11:9E:59:21:BF:12:49:5D:C9:02:DC:FE:3D:8D:4A:37:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/bb6f34-347b-4bae-8f92-ea84a51eb3dc/1/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/bb6f34-347b-4bae-8f92-ea84a51eb3dc/1/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ce:ed:74:3b:1a:a5:56:54:33:ac:67:c8:1e:d2:df:67:75:
         21:f7:55:46:a2:99:9c:bf:b0:e3:a7:0f:01:3b:51:2a:c4:be:
         f5:cf:e7:3f:9b:da:62:e3:f0:11:92:fd:3a:9d:75:a6:d1:8e:
         d5:9b:b5:1e:ea:ea:34:8c:9e:75:ca:17:18:e2:58:a2:d2:ea:
         43:f6:2f:c1:d3:69:df:0e:e0:98:a3:de:b8:b5:dc:78:5e:bb:
         c5:c9:e6:bb:7d:1b:16:5c:a0:ef:30:0a:2d:80:35:7d:f6:4e:
         47:74:0d:cf:22:44:ef:ba:3e:c4:3a:3a:e8:36:60:86:7b:66:
         f7:6b:25:7b:9a:64:96:55:5b:f7:0c:2d:33:87:72:dd:8c:7d:
         4e:28:eb:63:1e:aa:b3:38:35:11:4a:7b:94:0c:72:3d:a7:42:
         87:49:34:61:e3:17:87:47:03:03:9a:ba:e2:4e:56:7e:15:db:
         72:0d:09:36:be:99:94:17:82:7e:f5:71:22:4a:e5:9e:26:e8:
         fb:51:fa:f7:3e:96:aa:56:34:84:0b:ee:86:7f:97:c5:b5:20:
         48:29:20:2a:89:fa:cb:1b:0c:54:ed:09:11:8b:b3:cd:ab:b0:
         00:51:f4:89:59:46:45:45:3e:c2:8b:46:a6:c4:ce:b6:46:70:
         ca:4d:14:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----