Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
File:                     hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft (raw, json)
Hash identifier:          3pJxAK4ns3p5i3/hqUlZ2Lj9iIYzVhIo84rfYezret8=
Subject key identifier:   06:28:AD:9E:FF:1A:D1:65:E8:74:74:B8:71:8A:0D:A1:DA:B2:81:97
Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
Certificate issuer:       /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Certificate serial:       01962E99BC633E814EFC15E6F95518D2ADCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:02:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:29 +0000
Files and hashes:         1: KUCsTzvnwNnMm7Jeca6aVL9k1f0.roa (hash: 08CBdTpQIdxpgYISvMqyNDiM+ICQK0H520OtR31swUg=)
                          2: hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl (hash: BCPoniSQKVWzC2k3YjvdzkaFEd9j+QKqluNz0TxzrhI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:bc:63:3e:81:4e:fc:15:e6:f9:55:18:d2:ad:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
        Validity
            Not Before: Apr 13 10:02:29 2025 GMT
            Not After : Apr 14 10:02:29 2025 GMT
        Subject: CN=0628ad9eff1ad165e87474b8718a0da1dab28197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a2:c3:09:ca:5c:90:09:0e:8c:a5:2b:c1:d9:
                    49:4c:14:2e:24:3c:26:a6:1b:49:f3:fb:76:8b:a6:
                    07:62:1b:f7:79:be:48:d8:72:26:32:41:98:c0:ed:
                    5b:3c:de:00:99:ab:38:6e:db:77:f1:86:e9:a6:a2:
                    2f:0e:97:27:35:d5:a1:d5:10:c7:e7:ca:bf:c1:2e:
                    24:a1:32:82:85:e4:f3:c1:e0:af:c3:12:96:3a:21:
                    68:43:8e:1e:b2:14:d0:73:a8:4a:98:70:09:a6:97:
                    10:e0:f0:e3:b1:9a:fa:5a:4d:57:95:a4:49:89:90:
                    3e:dc:4c:21:2e:c7:e5:f8:50:c8:c3:0d:fb:43:01:
                    ae:38:76:59:ae:db:af:b4:14:e6:75:87:f2:bc:a4:
                    53:51:3d:8a:69:5b:88:27:44:82:a8:b9:90:30:b5:
                    0f:3d:22:0a:31:89:6b:a7:4c:3b:1d:6e:c4:9f:23:
                    7c:89:f9:3e:8e:5b:77:8d:9b:bd:76:05:18:72:dd:
                    d3:65:93:ef:18:3b:2b:8e:cc:f7:1a:dc:ef:0a:09:
                    90:6c:b6:60:9e:43:21:89:d0:c1:11:8e:8c:2f:10:
                    59:05:ba:42:ad:72:a7:f7:cc:5e:af:94:90:35:e3:
                    d3:07:8b:79:88:36:ad:4e:a4:f0:1b:84:17:01:cf:
                    f7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:28:AD:9E:FF:1A:D1:65:E8:74:74:B8:71:8A:0D:A1:DA:B2:81:97
            X509v3 Authority Key Identifier:
                keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:91:51:81:85:0d:0c:9c:86:55:1f:ff:9e:fe:60:6c:09:96:
         20:ad:18:af:fb:80:f3:79:59:14:4f:ef:2d:78:3e:a9:71:97:
         5b:e9:89:26:36:1c:36:84:06:fb:70:24:73:fc:bc:6a:61:b9:
         cc:7c:06:d5:a6:ae:d6:33:dc:eb:b3:d9:8b:57:f8:f1:2d:fc:
         4e:3c:66:57:ad:cb:b4:b9:19:0a:71:15:40:fb:44:ac:e1:88:
         31:92:7e:72:1c:66:e7:ea:72:07:88:6a:ee:fc:76:3c:a5:e2:
         e8:cd:e0:61:6a:87:e5:d8:91:41:d9:8d:d8:9a:a5:be:8d:26:
         07:49:25:9c:2a:f5:3f:dd:f0:9c:85:05:b1:e5:65:83:b5:68:
         36:45:c7:11:c5:89:8c:9a:34:90:1a:fe:ea:a3:41:95:42:ff:
         83:11:5a:9a:93:72:a7:38:23:de:82:94:a8:98:fb:ff:d5:01:
         b0:c6:10:fc:52:29:3e:50:23:e9:d6:81:8a:47:78:9c:aa:1d:
         fd:97:ce:41:78:09:e1:3d:2b:0d:6d:68:43:16:14:07:3c:69:
         e6:31:fb:34:5d:19:b3:b6:56:dd:54:60:19:32:bb:5b:bb:f9:
         7a:68:c1:8a:f4:f6:1e:b0:e6:6e:a4:ff:9f:98:d4:d1:22:ba:
         98:99:0c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----