Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
File:                     H_p_dysyOyTb5p0_Os91XmnWAc0.mft (raw, json)
Hash identifier:          fZAM7mPeT1O1MixoTnFOBMeRU0Fbag6XmJQ9095RuZc=
Subject key identifier:   3C:A7:60:88:86:BC:FD:22:D4:E8:33:91:3A:A0:62:3D:FB:7C:F1:98
Authority key identifier: 1F:FA:7F:77:2B:32:3B:24:DB:E6:9D:3F:3A:CF:75:5E:69:D6:01:CD
Certificate issuer:       /CN=1ffa7f772b323b24dbe69d3f3acf755e69d601cd
Certificate serial:       01962F063B73FFCE96C7C7D5698092ED2B9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:00:59 +0000
Files and hashes:         1: EmLYbat0-CjjrryGAbAlQnrrrrQ.roa (hash: 8A9ahdOL6eJIIDSIKOF59+Qm0B8lNaZhUtGUWL64Trk=)
                          2: H_p_dysyOyTb5p0_Os91XmnWAc0.crl (hash: ixSnXsjKk+z//xbZaKrqqILrQPeQ7yadNmuZudPe+Gs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3b:73:ff:ce:96:c7:c7:d5:69:80:92:ed:2b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ffa7f772b323b24dbe69d3f3acf755e69d601cd
        Validity
            Not Before: Apr 13 12:00:59 2025 GMT
            Not After : Apr 14 12:00:59 2025 GMT
        Subject: CN=3ca7608886bcfd22d4e833913aa0623dfb7cf198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:0c:85:c8:16:2a:dd:9a:2b:0b:6b:46:1d:
                    37:4e:1c:ca:d7:dd:f1:ef:16:30:e9:51:17:3c:47:
                    ed:3f:e8:4a:23:ef:77:d7:b9:6c:a6:78:9c:c2:a7:
                    75:38:80:1d:dc:eb:2a:a6:8f:ae:47:54:b2:45:1b:
                    30:45:95:b0:e3:df:b1:b5:d6:f4:bd:99:9a:d5:39:
                    9a:b4:14:97:70:11:be:43:85:fe:57:cb:e3:94:36:
                    d2:0b:87:53:9d:6a:1e:a8:da:aa:bc:b0:0a:d5:8d:
                    74:cc:5f:d2:76:8f:c6:ad:0b:d8:5a:62:55:c7:f9:
                    e3:44:b8:d6:52:e0:03:f3:51:d4:fc:03:b1:17:ad:
                    c5:09:bd:34:a0:ae:53:4f:c4:f0:e5:44:dc:2d:64:
                    ad:46:ac:97:7d:6b:d4:18:cf:47:92:88:95:91:b2:
                    40:d6:6f:27:38:a8:1d:cd:ec:e9:3e:e5:bc:0e:0d:
                    a9:46:96:30:52:5c:92:78:ed:72:e0:5a:ac:01:0e:
                    6f:e7:7a:ff:4d:aa:61:67:34:d3:c8:3b:c0:40:33:
                    89:eb:48:4b:46:ad:c9:cb:74:5d:e9:25:6e:79:25:
                    09:50:24:bd:fd:20:fd:49:0d:09:3d:b3:7a:f8:34:
                    37:b2:45:de:d5:85:ee:c8:b0:54:9c:3a:0f:bc:28:
                    2f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A7:60:88:86:BC:FD:22:D4:E8:33:91:3A:A0:62:3D:FB:7C:F1:98
            X509v3 Authority Key Identifier:
                keyid:1F:FA:7F:77:2B:32:3B:24:DB:E6:9D:3F:3A:CF:75:5E:69:D6:01:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:dc:0e:d0:10:01:4f:55:7f:a8:1c:a1:26:33:3f:f1:8d:26:
         bc:d1:ae:b0:1c:b4:2a:04:80:09:18:7f:4e:8d:13:29:f9:49:
         d7:45:45:7b:2a:2f:f6:e5:71:f1:a1:c0:39:16:68:da:cd:eb:
         80:43:0d:89:e6:76:ad:ec:6d:c3:d9:c2:03:39:8d:71:32:80:
         1d:79:8e:a7:44:d8:ce:07:81:ba:1f:7d:7b:bf:d0:35:2c:f5:
         5d:55:8d:99:a3:e5:7f:87:6e:76:9b:bf:f0:da:81:cc:81:eb:
         d9:8b:b3:e4:c8:d1:d1:07:2f:72:9a:ca:18:9b:4c:0a:12:07:
         8f:4e:b8:1f:ae:0b:71:d9:37:0d:5d:7e:a3:bc:21:65:38:22:
         db:c1:84:53:4e:6b:b5:4b:be:a2:fd:cd:5c:64:7d:bd:68:c8:
         20:b0:70:17:ea:ac:2b:d1:21:c4:03:2b:49:dc:94:4c:55:aa:
         86:75:77:2c:8a:64:42:cf:5c:8f:7d:7c:4e:13:71:cd:70:0b:
         f4:2d:77:03:b2:7a:f8:9b:61:cf:6d:5c:00:d5:b2:09:48:30:
         79:92:82:e5:a2:20:9e:d4:a8:26:2c:58:05:92:7a:42:06:a6:
         12:a8:91:0c:1a:e3:87:69:be:4c:82:e5:f0:dc:9b:43:be:78:
         0a:b7:fd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----