Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft
File:                     RHxS2B7cEklkSteUvgKK-Q4CShY.mft (raw, json)
Hash identifier:          6euIUILpvX8M1LUrAj9nMN4LdQBjEpwjS0wj0K+ofuI=
Subject key identifier:   46:13:19:8A:B3:40:FB:23:43:A0:16:00:2A:6F:EE:39:A6:09:03:A4
Authority key identifier: 44:7C:52:D8:1E:DC:12:49:64:4A:D7:94:BE:02:8A:F9:0E:02:4A:16
Certificate issuer:       /CN=447c52d81edc1249644ad794be028af90e024a16
Certificate serial:       01962F3DA3DF51BBCF68DF18208A830BBC55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft
Manifest number:          0896
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: 0RTmTUPTdqVwMU5i8iRqJZA86F0.roa (hash: eIjsDcha7FolfU5e8Eelou/OO0UBzir5atE5Gevb/B4=)
                          2: RHxS2B7cEklkSteUvgKK-Q4CShY.crl (hash: 7OGAxeO5UMIAPVwiwzEIw+jHM046XZ7piAnEyXVBQcM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a3:df:51:bb:cf:68:df:18:20:8a:83:0b:bc:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=447c52d81edc1249644ad794be028af90e024a16
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=4613198ab340fb2343a016002a6fee39a60903a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:04:50:19:07:af:64:1b:9f:ca:a2:0b:94:a0:
                    d3:56:67:49:5e:3f:3c:8c:f2:68:d0:fc:56:4f:d0:
                    67:59:64:64:cc:b0:d6:24:c6:6d:96:cc:21:84:b8:
                    91:84:47:06:85:3d:ce:7c:65:9c:c6:8a:d2:67:c7:
                    04:b1:34:10:28:37:ac:53:e7:bc:5f:a6:75:25:cb:
                    a6:f0:b2:a5:8f:e8:84:ce:a5:92:7b:df:3d:e6:76:
                    67:2c:e4:f6:b4:99:48:2d:8f:05:2b:13:ec:c0:c9:
                    16:bf:25:ae:55:4d:42:84:d2:6d:0f:40:05:a9:29:
                    9f:02:f1:0a:b6:a3:4d:6f:cb:a5:32:ed:e6:60:e1:
                    80:00:52:40:f1:7d:fc:10:b0:77:79:61:8a:9b:a2:
                    4d:00:bd:9f:08:a8:35:0e:45:53:23:eb:09:87:70:
                    11:51:03:5d:f2:d3:cf:93:77:ad:f3:22:03:ec:35:
                    27:ed:f0:3e:17:a4:e2:8c:8b:3e:41:21:5e:d1:c2:
                    12:48:fd:07:6d:a8:d3:f2:04:a7:8c:6c:f7:1d:0b:
                    56:8c:c2:60:b3:7e:d1:d5:51:d5:71:50:6f:5c:f9:
                    84:8f:5e:8e:6f:1f:cf:31:b3:29:29:42:ac:ab:02:
                    33:05:45:8c:d0:6d:2d:4b:24:1b:92:d8:7f:6c:f8:
                    59:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:13:19:8A:B3:40:FB:23:43:A0:16:00:2A:6F:EE:39:A6:09:03:A4
            X509v3 Authority Key Identifier:
                keyid:44:7C:52:D8:1E:DC:12:49:64:4A:D7:94:BE:02:8A:F9:0E:02:4A:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:7f:ff:30:d1:6b:b1:d4:4c:c0:51:da:72:f5:63:c1:5b:77:
         5b:62:d9:de:49:46:1d:d6:0a:41:13:b7:95:dc:50:8e:8c:b1:
         c2:33:4a:1c:04:44:91:6d:f8:70:d4:70:49:1e:f1:97:75:e0:
         c9:e6:11:0f:40:a4:89:5a:6f:12:73:76:af:6b:ed:61:22:7b:
         28:b8:ce:40:61:f2:b8:cc:1a:7c:85:19:fe:ac:46:d8:4c:0b:
         de:41:92:d8:32:1f:04:af:ad:50:d5:ac:c4:80:9e:08:c0:73:
         80:6e:d3:64:8e:50:76:53:b6:87:31:70:39:0f:c1:a0:b8:fb:
         1a:07:0a:e9:84:7a:04:0d:16:f6:d7:10:f8:b8:94:2e:62:1d:
         25:49:ed:37:2f:ed:d9:c3:b0:be:90:c0:0d:1d:73:32:ea:21:
         16:06:3e:74:ee:eb:7b:54:bc:ef:cd:09:51:e9:c6:b1:c3:38:
         26:c7:a3:fe:05:9e:7b:a7:f7:5b:de:53:14:9b:53:62:c5:34:
         2e:10:73:80:41:9b:c4:70:77:87:a5:bd:59:8e:66:8b:6c:16:
         a3:a7:43:d0:fb:9a:ab:2c:5e:32:f9:66:33:8e:58:23:7b:d3:
         7b:df:51:0c:78:ca:9f:94:d9:4e:96:af:6e:ec:77:34:14:61:
         0b:da:0e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----