Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
File:                     hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft (raw, json)
Hash identifier:          msJlXzXdEITRIV5/7T8NAB4i1Ta0/F0XgqYBogNbTNk=
Subject key identifier:   1F:4D:7D:73:53:CA:47:63:12:BF:A0:E3:9C:B6:83:E2:E6:88:FE:23
Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
Certificate issuer:       /CN=86623a8458eff347d424348588829ee137b45a3f
Certificate serial:       01962E62022887B95E2F63299AB7DBD5DD46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
Manifest number:          063D
Signing time:             Sun 13 Apr 2025 09:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:37 +0000
Files and hashes:         1: HrSCIGhI5pLFciUXIMT4CnC-hSs.roa (hash: eWiCHygAovdf0PgGIUiCzBDgPi+OqepoXf9QONvD3xk=)
                          2: hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl (hash: jT7uzJQQBClxgDsIYQ7rcQXsV961wQ3XASTxO3nz5YE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:02:28:87:b9:5e:2f:63:29:9a:b7:db:d5:dd:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86623a8458eff347d424348588829ee137b45a3f
        Validity
            Not Before: Apr 13 09:01:37 2025 GMT
            Not After : Apr 14 09:01:37 2025 GMT
        Subject: CN=1f4d7d7353ca476312bfa0e39cb683e2e688fe23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:cf:80:f1:0e:09:d0:18:e7:32:6f:f9:bf:32:
                    89:fa:6b:f7:8d:18:eb:9a:db:f5:d3:ef:cb:cd:7a:
                    a9:93:ee:ca:82:65:0a:8f:1a:b7:43:78:1b:9e:8d:
                    65:86:45:84:e0:ca:b3:d1:95:85:f1:4d:8b:31:a3:
                    0b:6d:3c:eb:77:30:90:51:1d:15:1b:10:1a:98:1c:
                    fb:a2:64:4e:ca:6c:af:32:5e:c9:65:c7:b0:b2:9e:
                    d3:4a:37:79:27:70:0e:13:8b:a7:49:d8:18:f5:ae:
                    6c:25:14:2d:8c:91:01:57:97:35:5c:d4:f6:fe:ff:
                    6c:e8:70:1c:ca:27:2b:47:e4:2a:0a:f9:ea:96:fc:
                    0b:75:59:d0:da:cf:18:2b:01:ec:36:ed:ee:11:1a:
                    88:ac:a9:eb:3e:15:ca:26:4d:4b:dd:c9:bc:cb:a2:
                    4e:b9:53:cf:4e:27:22:8d:39:68:0c:fd:b7:e1:f8:
                    24:3f:73:37:0d:ea:7d:2a:a3:85:03:8b:93:3a:ec:
                    66:d3:b7:08:5d:89:a0:f2:1c:22:65:d5:f3:b0:c4:
                    49:d8:a5:59:c1:01:bb:a9:d1:00:9d:d1:79:97:29:
                    0a:af:03:35:dd:cc:51:54:37:42:9f:d9:fa:90:10:
                    98:bd:a0:b6:da:7b:64:2f:30:97:c2:b6:58:3a:b1:
                    58:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4D:7D:73:53:CA:47:63:12:BF:A0:E3:9C:B6:83:E2:E6:88:FE:23
            X509v3 Authority Key Identifier:
                keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:76:c2:7c:11:ee:bc:37:95:46:91:0f:e6:93:23:8f:78:f2:
         b2:9f:2b:12:36:f4:01:af:e1:66:d3:79:0a:24:46:f2:c5:6c:
         83:92:45:1e:f6:2d:8b:82:c6:e3:aa:ce:62:62:ed:7b:1c:e6:
         4c:9d:7c:90:57:e1:03:b4:fe:ba:09:c1:b0:3e:0a:20:bd:73:
         7d:92:fc:1d:c4:54:78:2e:65:d5:75:29:41:10:aa:95:8d:1a:
         93:6d:db:be:46:1c:84:3d:c9:8a:2c:81:97:e1:03:66:94:d5:
         db:96:7e:6e:75:a8:72:ed:ba:40:24:48:b5:8a:01:d0:53:bb:
         3f:6d:cb:7a:d6:82:10:c0:35:63:96:34:94:de:41:a9:9b:b4:
         3a:ca:79:ee:9e:bb:4b:5e:75:61:92:96:14:92:e7:13:3c:34:
         a4:50:67:e7:84:92:65:3d:fc:bb:f9:45:3f:77:cc:94:af:29:
         9f:eb:0c:7a:f0:49:3b:92:43:dc:da:c1:e3:0d:7c:38:aa:a0:
         00:c6:c3:4a:39:7a:30:b3:84:ea:b2:f7:75:d9:bd:0f:a3:37:
         86:53:6e:1e:06:4e:6e:52:8b:8f:97:45:be:34:8c:97:9b:55:
         dc:05:76:eb:9e:e6:88:15:cb:2f:23:9b:d8:c6:4a:a1:59:91:
         ae:5b:b2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----