Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
File:                     h7PLLW-2jm7bhEL-sKv8la61sVc.mft (raw, json)
Hash identifier:          6FPxnH/Z6GFbztCWu+s8hyhfbDikjZQDBWGHiVayMcE=
Subject key identifier:   5C:A1:F4:0E:C8:34:B6:EC:08:C8:C0:F3:59:09:CC:2C:AE:91:24:53
Authority key identifier: 87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
Certificate issuer:       /CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Certificate serial:       01962E61AC4690922D953C1B8F9621B36614
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
Manifest number:          0411
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: 8D4nHWbrxa4LMrteZKswft15Ubc.roa (hash: He/s/LCduWYytOAbci1/a/w6a3udHX5vgmJxc1muikE=)
                          2: h7PLLW-2jm7bhEL-sKv8la61sVc.crl (hash: 37dN/3HPow4M+eT1iL5XGSddOBO/aca4jQnjaa/NAG4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ac:46:90:92:2d:95:3c:1b:8f:96:21:b3:66:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=5ca1f40ec834b6ec08c8c0f35909cc2cae912453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:03:87:c3:19:ec:13:2b:16:22:ff:5f:2b:53:
                    59:56:48:5e:55:33:4d:ce:72:bd:09:6c:27:51:e2:
                    c4:9f:75:f2:c0:ee:0e:39:6b:50:fc:80:2e:cc:20:
                    01:1d:8f:57:fc:00:c0:1b:1d:e2:e6:97:63:5e:33:
                    29:8c:ca:6f:1f:86:24:c9:eb:50:dd:47:04:35:91:
                    8d:54:ee:1c:18:ef:00:24:63:b7:2f:52:4e:9e:bd:
                    58:f6:9e:54:f6:e6:a3:96:1d:8e:63:23:f0:c0:d9:
                    53:91:22:f1:89:2b:60:f6:87:5d:ef:82:cb:5a:d5:
                    49:e8:88:b0:e0:8f:a6:c3:af:fa:11:b8:59:49:97:
                    71:1f:31:ac:78:13:48:84:ce:a5:54:c9:aa:5a:be:
                    eb:8d:34:25:50:85:2d:d2:0a:03:ee:53:a8:22:e7:
                    c0:91:6d:d7:62:d8:6e:5e:96:bf:3e:ae:5a:8a:74:
                    1a:f6:a4:ab:9e:37:dd:26:4a:72:96:31:6b:1e:5d:
                    cb:06:cf:91:16:b7:2c:cc:1f:5f:51:bb:71:a9:24:
                    35:39:19:05:f9:3b:c1:db:8c:13:e1:27:8e:8e:46:
                    3a:67:46:40:1b:82:97:3c:27:a2:08:19:b5:c7:dd:
                    96:a0:94:84:da:d8:6d:85:1d:ba:f6:3a:4a:a4:c2:
                    54:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A1:F4:0E:C8:34:B6:EC:08:C8:C0:F3:59:09:CC:2C:AE:91:24:53
            X509v3 Authority Key Identifier:
                keyid:87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:df:35:70:11:56:f6:0c:03:de:d4:59:e0:a9:93:35:2d:b8:
         17:72:38:76:46:c1:15:31:7e:22:53:fc:57:96:08:2d:e1:d8:
         b3:d6:70:3c:e4:0a:06:e9:e0:24:13:c4:66:c1:71:bf:bb:6e:
         f5:6e:61:8b:5d:0d:51:6a:d8:51:7b:b8:37:87:6e:f2:a8:c3:
         d8:55:91:82:2e:4c:ac:ec:d7:7b:15:a6:68:fe:3e:e7:b1:95:
         23:f0:56:6d:59:0f:b9:9e:fc:cd:33:98:86:63:0b:c2:22:3f:
         10:3d:48:d0:d6:53:11:76:00:61:92:d6:08:7f:0a:ab:d4:db:
         cc:c8:98:11:76:17:74:4f:82:44:74:71:dc:8a:c1:ee:d6:0c:
         1e:1d:97:5e:b3:55:c2:87:32:a6:99:77:62:fd:cc:2f:c6:a4:
         a1:00:13:fa:5c:38:fc:6b:36:8e:a5:eb:f2:12:db:be:35:7d:
         b6:f2:ae:97:77:d0:fe:13:d1:6a:07:57:d5:93:d8:48:64:ad:
         cf:16:1c:31:ca:6d:3f:92:f5:45:85:3e:eb:22:b1:d4:71:5f:
         3f:d3:51:67:c0:a6:2d:3b:1c:13:54:d3:43:e6:30:a2:35:6c:
         24:3a:30:1d:83:3e:d7:94:64:dd:3d:14:29:d4:c0:2c:ef:7c:
         de:dd:e7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----