Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
File:                     hUavGPcHiqwAwvzSymf5MoAhfhU.mft (raw, json)
Hash identifier:          qQZNPiwCfTRQcjg30+qme8tFT+ooqcGFqYUgditO668=
Subject key identifier:   86:68:BE:75:EB:BC:0F:06:F8:97:DA:8E:56:CE:90:67:94:9D:1B:0C
Authority key identifier: 85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
Certificate issuer:       /CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Certificate serial:       01962E2AD4D953DBCDAA844D66D5B076A66F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: hUavGPcHiqwAwvzSymf5MoAhfhU.crl (hash: qDNAku/s2Xm0+5Gz5LBPTdKFKvfZTql+BJEV1ppiW+s=)
                          2: jg1_qGOypFs-Omg84eci-XkXn6M.roa (hash: Hutcm4lZFs78dltAQDGy1uUI7H+2kpc6tWhDJ8JMDfc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d4:d9:53:db:cd:aa:84:4d:66:d5:b0:76:a6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8546af18f7078aac00c2fcd2ca67f93280217e15
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=8668be75ebbc0f06f897da8e56ce9067949d1b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:eb:80:f7:f8:e2:9a:ff:d2:df:44:d1:00:a0:
                    c8:bc:ce:5a:85:2e:4f:e7:29:53:9c:7b:17:f9:c3:
                    a4:74:d0:4f:5a:f6:31:57:60:df:1b:ba:5b:12:e3:
                    be:cd:69:83:8c:cf:62:49:f9:54:5b:1f:80:71:be:
                    1c:7d:34:90:29:e4:ae:a6:32:d8:05:b3:b4:1a:7f:
                    98:85:ae:4d:2b:f7:9a:a7:24:3c:f9:02:2c:67:f1:
                    f7:1c:3e:3c:4c:02:e4:ab:f6:16:3c:75:90:ca:ab:
                    a6:f0:1a:ac:ac:de:92:f8:07:53:ff:3a:8f:5e:93:
                    96:d6:69:80:3f:e4:86:0c:ae:e9:24:ff:a9:19:14:
                    46:04:09:b8:3b:9f:f0:72:e7:31:02:c0:fe:11:4f:
                    2b:54:ed:30:5e:4c:8a:a5:af:01:36:51:12:5a:08:
                    29:fb:58:46:97:98:58:c6:77:21:16:93:80:03:1d:
                    45:1e:bc:80:05:ea:c5:36:19:aa:f0:3d:67:42:99:
                    0b:61:1e:70:e8:14:cc:cb:ea:f0:ed:2b:d6:ca:55:
                    36:db:a7:53:0f:18:61:b4:e2:17:49:7c:b3:fd:f7:
                    74:8b:81:d8:e4:7c:19:e0:9b:85:8b:dc:5d:f7:31:
                    c6:51:6b:c6:05:f3:fc:4f:72:46:11:af:3f:ac:49:
                    30:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:68:BE:75:EB:BC:0F:06:F8:97:DA:8E:56:CE:90:67:94:9D:1B:0C
            X509v3 Authority Key Identifier:
                keyid:85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:47:d9:e0:13:f5:c4:4b:75:bf:2f:bf:3c:95:9a:09:12:9c:
         b8:23:3d:c1:4d:6a:0b:fc:19:94:8d:91:12:e5:d2:12:32:8f:
         57:49:6e:fc:d6:9a:bc:45:cc:62:4e:7c:8a:11:bb:e2:d7:a0:
         de:59:45:bb:7e:ae:4a:76:9d:03:f1:af:bb:4d:4b:4e:1f:91:
         47:61:ad:b2:1e:94:16:04:94:8a:e7:21:71:17:fd:b3:44:47:
         4d:3b:fa:69:ac:6a:41:59:4b:7b:69:92:f3:76:e9:c6:7b:db:
         54:0e:c2:48:ec:d3:55:cb:d7:36:db:a5:27:7c:9f:2b:4c:59:
         79:62:f8:e2:17:87:83:55:ba:49:ef:5c:fa:24:fa:91:ca:3c:
         c4:d9:5a:29:64:a0:5d:03:0d:44:3a:d1:27:ef:99:e3:ab:9c:
         03:4d:7e:bb:8d:93:d5:ab:92:d4:e0:69:e9:d0:69:1a:43:b5:
         33:45:09:4b:23:4c:a4:ec:8c:d2:0d:c5:a5:98:1a:b7:51:a4:
         d1:71:db:7c:b9:34:ca:4d:5c:65:59:3e:e5:cf:d6:e4:11:63:
         1c:44:5a:82:19:47:50:a0:3f:4b:74:f2:22:a9:19:d4:85:14:
         0d:b8:b3:51:f8:55:60:bb:aa:a8:40:8f:f9:7e:0c:8f:21:fb:
         b0:5c:9f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----