Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
File:                     D4nIaX93ksqvWZZk6JrOZSRPiug.mft (raw, json)
Hash identifier:          dlm6qZw1iX/rooVNTC9cCAbkQpTjgOGASF3vCUq+VuI=
Subject key identifier:   54:AF:86:FC:AD:6C:8F:57:A9:9D:61:41:CE:C1:0C:51:3F:78:A2:67
Authority key identifier: 0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8
Certificate issuer:       /CN=0f89c8697f7792caaf599664e89ace65244f8ae8
Certificate serial:       01962E995CD72F796D6CF265A7DDC41A3BA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: D4nIaX93ksqvWZZk6JrOZSRPiug.crl (hash: jBtkMoqq/liJbmIPANis0RXYBOGRJdyB/ZtlIhoY0sc=)
                          2: M1fWkBIHAuVSUFxtDGIthqqmrJE.roa (hash: +6gCxjSejI/as6boiaKhDkfwSxB7S4u8Oz//yZsKkyM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5c:d7:2f:79:6d:6c:f2:65:a7:dd:c4:1a:3b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f89c8697f7792caaf599664e89ace65244f8ae8
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=54af86fcad6c8f57a99d6141cec10c513f78a267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a8:ba:99:01:a6:36:dd:83:22:02:b0:ba:af:
                    d6:8f:85:0f:a5:cb:4f:bc:ff:64:da:6a:ca:ae:b7:
                    00:4f:20:91:93:28:ca:92:a5:8d:36:0a:b6:d5:74:
                    90:d7:ea:ac:71:01:c9:9e:0a:90:81:d2:48:ba:96:
                    36:81:9e:b4:46:f4:94:29:cc:91:45:64:7a:6a:aa:
                    36:aa:6b:0f:e3:05:25:42:d2:41:ec:e5:39:67:5e:
                    0d:08:bb:24:9e:09:57:e4:aa:09:2d:b5:27:27:33:
                    fa:80:d2:ec:bd:08:93:f8:45:7a:ee:e4:37:6f:c4:
                    4a:fb:94:c4:8d:2c:71:bf:2f:ac:52:17:cb:00:20:
                    39:4b:6d:c8:12:50:91:df:19:29:d7:e3:b9:7e:c8:
                    ae:8a:5e:3b:a0:6b:6f:55:cc:24:c2:a4:82:94:09:
                    78:da:99:c3:65:ed:1f:3a:25:4a:6f:2e:3d:1e:5b:
                    00:ae:3e:97:01:f8:11:1e:57:50:c2:f9:d2:29:50:
                    b0:48:61:2d:6c:ad:4d:7c:00:1f:d7:a2:88:45:78:
                    39:d1:92:a5:bc:ff:51:88:ce:49:25:d4:50:3f:8c:
                    15:e5:cd:a1:50:13:32:19:6f:ad:de:c2:62:01:7e:
                    c3:cf:14:ea:3e:c4:2b:e4:8b:f7:db:3b:b1:83:cc:
                    d8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AF:86:FC:AD:6C:8F:57:A9:9D:61:41:CE:C1:0C:51:3F:78:A2:67
            X509v3 Authority Key Identifier:
                keyid:0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:33:ea:21:27:fe:cd:77:40:5f:f0:6f:87:00:1b:d4:e7:75:
         6a:13:52:42:b1:0d:e5:a7:29:47:72:7f:51:e9:b1:a4:64:d0:
         2c:8e:07:88:e5:ab:c2:91:00:4b:86:43:6e:1f:b2:8f:ef:29:
         23:e9:2d:e6:8c:62:fc:35:6a:82:3a:0f:f1:d1:25:46:62:20:
         55:4a:73:d0:43:9d:5e:f2:41:82:73:bf:fb:65:c4:29:0b:36:
         f1:01:f6:44:ed:0b:f8:a2:7a:ce:6d:c4:5f:f5:49:46:cb:33:
         89:bc:2c:99:b5:0b:f6:fc:32:e9:41:b6:53:d1:bd:83:ea:6b:
         16:fc:ef:4a:c5:ef:c0:f1:b9:9f:0d:4b:fe:85:23:c4:bf:12:
         f2:08:e9:29:a8:a2:e3:9c:53:c8:0b:77:76:b6:2e:ef:ed:97:
         b8:07:12:95:96:2d:d8:ff:f3:a5:a6:98:a0:09:5f:9c:1b:21:
         1d:5e:7c:b1:b0:3d:93:94:33:c6:8d:1c:9b:e6:fc:b5:c3:e1:
         70:e8:29:0a:2a:c7:4d:21:ee:c9:0d:9f:6c:60:f2:e6:c6:60:
         c5:21:4a:2b:00:ae:ab:5f:3c:ee:6a:57:af:ff:51:23:bb:c4:
         9b:96:64:6f:af:4a:6a:dd:e9:29:20:b9:cc:62:e2:ff:6f:f9:
         07:bc:9a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----