Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
File:                     hUyBdtnELHBLMQkTMJRwNRu1meU.mft (raw, json)
Hash identifier:          isiAvI01YHK75vcOF3JFtj9dZBb1JOZuRdNRx1DGo8E=
Subject key identifier:   B4:C1:1F:00:1A:7F:57:DE:EB:88:BC:02:80:23:E6:CE:EA:33:F8:F7
Authority key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
Certificate issuer:       /CN=854c8176d9c42c704b310913309470351bb599e5
Certificate serial:       01962E99992606F58E2B3747B67165EEE154
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
Manifest number:          1012
Signing time:             Sun 13 Apr 2025 10:02:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:20 +0000
Files and hashes:         1: FYfGapYZgv1rSx7oxjUTR0AEqSI.roa (hash: /yS9+tjgVqFWik3KkW3YA5pzZoZBBA4Y+IeN8zVnoxw=)
                          2: d12qVgxDPPHiE2ljm9qZxxkNLxQ.roa (hash: zX9r1B9nDeSmX0ma2mBmx6eNhz70tybIXv2tasEp9Z0=)
                          3: hUyBdtnELHBLMQkTMJRwNRu1meU.crl (hash: tRINvCum7XuZm6K6N33+OifTvPXzT36FDbVGAm7UhVI=)
                          4: j-Ef-_ZUrA-AY6ZXYzU0wKA0MAE.roa (hash: xMubkcRgzBEAU63sGA3yqVsJQIJj2JYDdMpLJL8yY80=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:99:26:06:f5:8e:2b:37:47:b6:71:65:ee:e1:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854c8176d9c42c704b310913309470351bb599e5
        Validity
            Not Before: Apr 13 10:02:20 2025 GMT
            Not After : Apr 14 10:02:20 2025 GMT
        Subject: CN=b4c11f001a7f57deeb88bc028023e6ceea33f8f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5e:70:be:e1:8b:a3:01:89:05:a9:31:19:f1:
                    c6:3b:bc:42:61:9f:42:e7:29:f3:5d:3b:f0:23:3d:
                    3f:8a:23:cd:48:97:f5:b5:43:ad:42:0d:cf:f6:b6:
                    f8:2e:36:ea:66:d4:7b:37:e7:4d:5e:3b:83:1d:34:
                    e2:8b:86:3c:8c:0e:c3:94:7d:c8:85:ca:d8:74:ac:
                    a9:b7:2d:bd:bb:14:a7:b4:36:5f:52:3d:46:dd:85:
                    4b:75:d9:0a:80:1d:c9:d5:c7:22:8b:24:22:88:41:
                    1e:33:32:7f:0e:30:07:1e:03:1d:cb:3b:36:2b:29:
                    4d:9d:9b:b4:51:0d:b5:58:a4:c9:54:cc:4e:04:75:
                    9b:2b:df:04:af:7e:5b:99:95:a7:04:93:db:77:e0:
                    3e:05:52:f7:ce:c9:d7:b4:a9:5f:f1:aa:d9:55:16:
                    45:35:7d:c0:52:ea:4b:de:92:07:6d:6c:8f:76:e1:
                    54:e9:5c:0c:90:7c:db:d9:d4:98:53:88:30:58:d6:
                    18:54:67:49:a9:f7:c9:f4:54:b0:53:44:ec:9d:e0:
                    f2:c5:a5:8b:94:9d:34:d4:41:36:c1:48:e1:56:b9:
                    d3:c2:b1:f5:a5:11:a1:75:fe:0e:d8:0c:d5:1e:a7:
                    b0:c9:ba:84:5f:8c:38:be:1d:62:60:f9:95:a8:ce:
                    9f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C1:1F:00:1A:7F:57:DE:EB:88:BC:02:80:23:E6:CE:EA:33:F8:F7
            X509v3 Authority Key Identifier:
                keyid:85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:d3:36:bb:0c:82:e9:fc:d8:06:95:79:8d:bb:75:de:38:e7:
         dc:6a:3f:23:01:c9:4f:ff:ca:90:0f:67:3b:b3:07:14:ff:27:
         a2:20:2a:4d:36:7b:3e:fc:7e:39:51:5c:52:44:83:6d:ee:ae:
         df:f4:5d:77:c5:9d:1e:f9:6c:3c:fe:e1:7f:06:94:fb:01:06:
         8d:b9:9c:1f:6b:32:5f:71:38:ac:ab:a2:b4:d8:48:58:13:60:
         c9:2c:1d:81:17:76:60:13:25:d5:9f:9f:4f:07:88:16:5a:dd:
         4b:91:f0:e2:ba:44:7d:b4:c9:ba:73:b3:62:b7:ff:be:91:72:
         a9:f5:3a:b0:bf:38:b6:cc:d1:23:ec:79:21:59:4a:8c:f1:ea:
         56:77:5b:20:69:a6:3d:23:36:f5:84:9c:2a:cf:fe:34:c3:b8:
         f8:d4:19:99:78:12:23:2f:9d:da:14:99:0e:7d:1d:14:9e:ca:
         f0:a9:ce:fe:c4:e2:c8:7f:56:ce:8f:fe:0a:fe:26:d2:7f:68:
         d0:07:4d:f4:1c:75:71:ac:80:90:e8:1a:19:b0:38:de:28:05:
         04:4f:e0:e1:9e:8f:c6:8c:91:59:f5:83:3d:3b:6b:35:f4:db:
         c5:52:0b:f2:ae:30:f7:64:5f:58:13:c2:98:e4:83:c6:fb:c2:
         f2:07:e9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----