Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
File:                     hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json)
Hash identifier:          CfSyCrwwW+bl/pdjdIRISvUGC8quRelUrx12T0Suu3w=
Subject key identifier:   AF:6B:11:1D:27:ED:CD:17:6C:7E:E1:E4:C2:C8:FD:D9:65:77:6C:A4
Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
Certificate issuer:       /CN=845de8732b1017138f87032b70fa3b7b8776ef71
Certificate serial:       01962F0733CF2FE37F8C9467E88E25962469
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
Manifest number:          01F0
Signing time:             Sun 13 Apr 2025 12:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:03 +0000
Files and hashes:         1: am3Sy264Yl-JO5WdEXeWKKEs9ps.roa (hash: 9k8mynHVOZTwg4WDO/sfA0hKUXErmcKqWcYze5ZqrNU=)
                          2: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: vrEaNV9agxN6vaowXnw2PQIlJjEb5PNW5MCjdNCeDqo=)
                          3: sXyVeEgdrOK8h5ebOKwuNo_SSAg.roa (hash: ESBdMDmOcBiwaOXHXdAgFsuBwburzoKdU0lwdUGfYAg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:33:cf:2f:e3:7f:8c:94:67:e8:8e:25:96:24:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71
        Validity
            Not Before: Apr 13 12:02:03 2025 GMT
            Not After : Apr 14 12:02:03 2025 GMT
        Subject: CN=af6b111d27edcd176c7ee1e4c2c8fdd965776ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2c:79:4f:e4:71:d8:0b:e2:18:08:51:fe:51:
                    24:7b:a0:f4:6f:41:96:54:33:99:c2:a8:91:37:b8:
                    1f:5a:31:34:9f:5e:8f:0d:b5:db:63:8a:a1:51:17:
                    c8:68:9d:42:72:e1:91:7d:09:d7:35:82:a6:0c:dd:
                    bb:25:1b:54:55:33:72:28:8a:cf:d6:79:e2:38:c8:
                    b3:29:bb:f3:39:9e:2b:ba:fd:d8:4a:8e:fb:fe:dc:
                    bb:c0:99:b1:a0:86:89:28:35:7b:a8:d4:1c:0e:d6:
                    9d:1f:1f:0f:f0:98:04:60:a8:1f:5b:16:30:e0:6c:
                    71:a9:07:a1:56:81:28:55:e1:de:9e:2d:70:97:c2:
                    63:c7:c6:fa:a9:b8:69:b9:12:bb:36:62:35:18:2c:
                    28:c8:d2:95:95:79:70:4d:a1:ef:0f:dc:3e:26:88:
                    a4:21:ec:5b:6c:bb:1d:5d:41:3b:54:e4:88:10:72:
                    4a:ab:05:94:62:c5:dc:fc:14:40:52:30:aa:ff:c6:
                    2c:77:d2:49:80:b8:22:82:72:14:0b:64:e5:58:2d:
                    42:d5:40:18:7b:8a:be:3c:28:72:30:51:6c:46:d0:
                    56:52:3b:86:75:73:d4:fe:64:af:c6:91:a0:ad:ee:
                    c2:b6:b0:c2:ec:db:51:16:8f:dc:5e:7c:39:0e:be:
                    60:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6B:11:1D:27:ED:CD:17:6C:7E:E1:E4:C2:C8:FD:D9:65:77:6C:A4
            X509v3 Authority Key Identifier:
                keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ba:3d:f4:67:8e:b7:01:7c:fd:4d:be:f4:4e:f8:f4:6b:51:
         af:99:f0:23:88:7d:ab:3e:f5:ec:27:fa:e0:a2:c6:a7:26:f4:
         36:4b:11:e3:51:b0:66:47:59:ff:c0:1c:e5:c0:81:92:fc:c5:
         79:1e:01:66:26:7e:5b:0a:01:02:7b:27:38:d2:70:9b:16:99:
         f7:d5:58:78:6c:b5:36:0b:57:d5:61:62:4b:d2:99:1f:21:bf:
         cd:b0:56:ba:0d:f0:6e:6f:ef:46:33:7e:95:dc:18:c9:7a:b6:
         47:93:89:63:c1:54:82:e2:ce:a6:32:21:10:3f:07:90:87:ba:
         55:9a:78:44:48:04:7e:96:47:10:86:83:fa:38:7e:3c:be:27:
         cc:2d:2c:74:06:f4:ee:14:f5:31:4f:ab:89:67:c7:11:bb:8a:
         e6:e5:99:1f:39:59:b7:f7:38:3c:c4:15:57:3f:27:de:ef:94:
         14:ec:01:25:24:cd:8c:d7:17:a4:f8:b1:b2:2a:bd:c3:a7:2f:
         5d:3b:c9:d3:94:b8:90:20:76:16:07:9f:d1:d2:d0:83:94:0d:
         ca:54:c3:4b:78:bc:38:df:54:c8:02:2a:b7:49:80:43:ce:97:
         fb:35:dd:15:19:f2:84:be:ad:e2:43:f3:1f:e5:3c:2c:be:3a:
         6c:c9:e6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----