Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
File:                     hGbpF0La0bn0x5ayOzfres2FgWE.mft (raw, json)
Hash identifier:          N7qwz1Ze4fDrxlx/MixEvUVTb5jRuFELlEYe5pDuNdo=
Subject key identifier:   6D:76:E3:CF:C0:3A:FA:FF:82:4A:A5:A3:90:CE:5D:AD:69:8C:60:58
Authority key identifier: 84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
Certificate issuer:       /CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Certificate serial:       01962F065DF2CBCB2C791FA7A54A6FEC079E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
Manifest number:          0F8B
Signing time:             Sun 13 Apr 2025 12:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:08 +0000
Files and hashes:         1: bbcA4RxlQmcQjNn0rG4goHNMuOU.roa (hash: R2hOoSIVcz11ndb2ZPvvYv6Kv8fgZfMkny+ajnRe2GQ=)
                          2: hGbpF0La0bn0x5ayOzfres2FgWE.crl (hash: CNm6K/V9s0/T16rGxJUbA80Ig0d3CaGjTK4702dcPrg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5d:f2:cb:cb:2c:79:1f:a7:a5:4a:6f:ec:07:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8466e91742dad1b9f4c796b23b37eb7acd858161
        Validity
            Not Before: Apr 13 12:01:08 2025 GMT
            Not After : Apr 14 12:01:08 2025 GMT
        Subject: CN=6d76e3cfc03afaff824aa5a390ce5dad698c6058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e0:9b:89:16:c2:b1:78:80:3d:ab:d0:25:fd:
                    af:f2:3a:8c:ef:33:78:bb:9d:f7:92:e8:ae:ef:24:
                    72:f0:b3:2e:8d:a0:27:7c:17:92:89:10:20:39:c8:
                    8f:a6:1a:23:4a:7b:07:82:30:17:74:31:2d:2c:32:
                    b7:42:76:14:9e:7b:54:b6:4e:50:34:a9:a2:d7:6e:
                    1e:ab:75:13:9a:86:e5:2e:f0:17:07:61:f3:f3:12:
                    96:d9:15:a3:0f:09:4a:c8:41:b2:be:b7:be:27:a4:
                    b4:db:7e:9b:ab:21:b9:0c:4d:10:e3:11:2c:86:50:
                    87:f6:32:6e:1e:3b:15:a6:90:f5:26:1f:2e:dd:fc:
                    96:a6:47:c5:2a:2b:36:07:57:1d:81:ee:b8:70:df:
                    dc:6d:61:70:c2:8a:e5:6b:f8:e3:ef:3c:21:b3:9a:
                    a4:bd:b5:8f:82:68:09:bc:fb:0a:1f:80:d4:bd:90:
                    7e:d0:ce:68:73:f9:66:09:b4:e0:02:26:3d:78:8f:
                    09:23:24:3a:cb:92:1a:cf:7e:7c:e0:ab:68:59:33:
                    1a:e4:4e:6d:f1:49:5d:23:96:5c:d5:2f:ea:45:65:
                    3c:b4:21:01:48:68:52:dd:ff:b0:04:37:b5:f7:56:
                    81:87:d2:57:65:f7:3a:4b:2f:6f:db:2b:99:5a:90:
                    34:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:76:E3:CF:C0:3A:FA:FF:82:4A:A5:A3:90:CE:5D:AD:69:8C:60:58
            X509v3 Authority Key Identifier:
                keyid:84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:d9:fe:ff:04:25:fe:6f:40:fa:78:0a:cd:29:d8:bb:5a:4d:
         93:b9:02:7d:c3:7c:ab:18:cb:8b:c0:73:7d:aa:6b:c4:5d:bd:
         e7:a6:de:f8:b8:6e:78:b4:a4:ed:6d:ef:1e:01:e4:a7:f5:36:
         dd:c7:0d:af:54:b5:9c:f6:6d:86:11:3c:ac:84:3d:e3:0f:3a:
         af:17:c6:80:4d:8c:58:ff:67:02:d4:05:e3:38:dd:a3:6f:9a:
         f3:fb:78:2a:68:08:27:bb:f4:72:17:e5:ea:91:61:7d:36:41:
         6b:f4:68:b5:23:1a:e6:e8:9a:ba:af:0b:51:cb:9c:d1:02:12:
         3e:54:a7:ff:7f:1f:bf:0b:a9:fb:32:da:b2:d2:95:ad:ac:9b:
         63:31:7c:96:e3:3c:ba:8c:ec:a8:69:7c:ad:15:99:a6:53:9c:
         ca:b2:5c:d2:1d:f9:4c:50:f8:44:95:64:ea:42:e4:34:b1:dc:
         3d:49:13:b4:2e:17:9d:84:a5:b6:80:f9:02:d9:ab:92:b3:c1:
         18:7f:43:11:48:2e:cc:14:c5:5a:2f:91:6c:ea:62:63:20:a6:
         f1:5d:90:6a:37:42:7b:0b:c6:b2:ae:ae:47:4f:2f:1a:43:17:
         15:df:1f:c8:8c:a3:22:a4:c6:e6:96:38:92:37:84:4c:a3:65:
         cc:da:54:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----