Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.mft
File:                     hnWNin7SGnQXLM7sM4xk02sDeNQ.mft (raw, json)
Hash identifier:          L/n1+Dd4398O/2zBa5WArWSuJNbgc9lsAUI8o/lnjDk=
Subject key identifier:   D4:1D:E9:03:CE:FD:C3:CB:EC:D3:0D:4D:F5:A8:91:EE:A8:03:EA:51
Authority key identifier: 86:75:8D:8A:7E:D2:1A:74:17:2C:CE:EC:33:8C:64:D3:6B:03:78:D4
Certificate issuer:       /CN=86758d8a7ed21a74172cceec338c64d36b0378d4
Certificate serial:       01962ECF8F0BA9BABF33CDD1E924862B4C8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hnWNin7SGnQXLM7sM4xk02sDeNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.mft
Manifest number:          0352
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: Tmqal5XUVoUE8c77AFlzaqU97c0.roa (hash: r3d2ZcS64ApbYh564RwP4TPidKg35TEhpwQ3BNXhcQw=)
                          2: hnWNin7SGnQXLM7sM4xk02sDeNQ.crl (hash: icnuYYhUNDV4cZWNBUzouAlFEszjTL1Ps+xWQyN3HRc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8f:0b:a9:ba:bf:33:cd:d1:e9:24:86:2b:4c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86758d8a7ed21a74172cceec338c64d36b0378d4
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=d41de903cefdc3cbecd30d4df5a891eea803ea51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7f:14:8e:fe:11:47:3c:22:e2:37:eb:22:43:
                    79:6c:46:14:69:bc:55:d8:68:94:48:3a:67:a5:b4:
                    6f:c3:33:a5:c9:85:af:3f:e8:7a:39:1d:2d:80:82:
                    a1:8e:23:23:bc:e3:72:2a:49:a5:bd:2e:44:a5:65:
                    11:98:c4:07:f8:fc:06:35:ee:2e:28:0b:40:e0:86:
                    77:e7:2e:4b:ee:99:ad:2e:2e:fc:c5:b7:ff:f7:f2:
                    ae:3e:b8:ca:44:61:e1:0f:a1:f2:d9:6c:3b:be:8f:
                    9b:5a:31:13:de:35:5e:db:61:30:c3:10:88:00:3e:
                    25:ff:f8:38:a7:f6:8f:80:a9:d2:0d:93:cf:7e:a9:
                    4b:39:3a:46:5c:54:0d:62:33:f7:c7:bd:63:42:d7:
                    40:23:28:52:24:d7:a3:0c:0c:96:26:e9:68:75:62:
                    50:8f:39:73:af:e6:72:69:c3:5d:55:3a:4a:74:16:
                    25:d9:62:c1:2c:e5:42:3c:6f:01:c8:2a:ba:df:a3:
                    4d:eb:90:fa:20:4b:b4:08:5a:90:80:f9:f0:05:b5:
                    7e:10:d5:40:79:71:23:48:59:32:45:fc:ce:07:7b:
                    67:b7:44:0a:3b:08:4b:0b:81:a1:70:0e:5c:aa:08:
                    bb:c8:ff:67:37:b2:85:86:df:ab:4e:07:fa:23:85:
                    c1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1D:E9:03:CE:FD:C3:CB:EC:D3:0D:4D:F5:A8:91:EE:A8:03:EA:51
            X509v3 Authority Key Identifier:
                keyid:86:75:8D:8A:7E:D2:1A:74:17:2C:CE:EC:33:8C:64:D3:6B:03:78:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hnWNin7SGnQXLM7sM4xk02sDeNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d7:71:92:ee:53:e8:aa:d5:d3:20:82:43:10:b4:07:92:46:
         12:37:c6:1d:8e:db:ff:a9:a7:d1:5a:9d:a1:82:51:83:34:7e:
         7a:49:69:7c:e2:9e:1d:e1:7f:bc:f3:45:35:69:bf:b9:84:3a:
         51:92:b3:30:bb:86:47:79:63:54:3b:39:8a:aa:b1:87:4a:5e:
         30:cb:27:60:89:47:43:18:4c:81:2c:6b:8d:de:a0:c8:8d:37:
         21:92:85:e8:42:0e:ee:f2:d6:a5:18:be:c2:b4:f3:7c:c6:cc:
         07:d1:67:b3:f1:05:de:b8:7d:97:80:40:66:76:40:7b:26:50:
         e9:7c:6c:81:73:cd:81:bc:b8:6a:7e:b7:22:81:96:aa:40:c7:
         da:f0:80:79:51:ec:d6:e6:8d:16:8d:56:6a:b5:ab:2a:d9:71:
         38:50:95:8c:aa:7e:0b:f9:d8:6c:25:a5:54:35:4b:8c:32:96:
         fe:c9:3a:07:7f:2e:26:49:7c:26:89:b3:20:b4:de:c3:81:d1:
         b6:7a:98:de:5d:cb:ca:5f:58:27:d4:da:95:e8:33:46:2f:e8:
         4a:aa:f7:35:0c:bb:91:2a:78:f9:de:22:1a:83:f7:7f:33:66:
         d7:ca:68:6b:e2:1f:f8:71:ec:98:80:66:24:27:59:63:6d:27:
         81:f1:3b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----