Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
File:                     hHi3bGnJkVKU_cORNeINrHN2IiU.mft (raw, json)
Hash identifier:          W4+T6iDu2TzDAP5Gmi0LFIZnzIo9wR7K6AEsSlUna5o=
Subject key identifier:   78:D0:A9:7A:3F:2D:18:62:01:F6:78:90:23:41:5C:45:DE:35:67:24
Authority key identifier: 84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25
Certificate issuer:       /CN=8478b76c69c9915294fdc39135e20dac73762225
Certificate serial:       01962DF43107DF4D7A4FC28614E6F1D993BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
Manifest number:          1482
Signing time:             Sun 13 Apr 2025 07:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:40 +0000
Files and hashes:         1: hHi3bGnJkVKU_cORNeINrHN2IiU.crl (hash: lUJw0cjWT5fpCVm/zL5t/GW7e1nixB3u6y9ESrJVm0s=)
                          2: kclE4AGa3IQ3ANoqx8hNmFyyOPc.roa (hash: era/rLdikRzOubIlTwlZQUllh2OgF4bxbh9GfJNQo5I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:31:07:df:4d:7a:4f:c2:86:14:e6:f1:d9:93:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8478b76c69c9915294fdc39135e20dac73762225
        Validity
            Not Before: Apr 13 07:01:40 2025 GMT
            Not After : Apr 14 07:01:40 2025 GMT
        Subject: CN=78d0a97a3f2d186201f6789023415c45de356724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:13:db:01:b4:09:4b:75:36:1c:3e:c1:58:0e:
                    84:b8:29:24:c2:7e:73:41:47:fc:43:40:eb:7f:d3:
                    1a:7a:a2:e3:d9:61:4e:21:b1:25:71:93:7e:c5:73:
                    d6:4b:0c:e6:8c:01:e4:3e:2e:09:66:5f:4f:90:5f:
                    b9:60:72:ac:dc:c2:20:0d:ad:2a:7c:bc:60:91:f8:
                    c4:05:7d:48:5d:3d:0e:85:02:ba:b2:bc:0a:6c:0d:
                    6f:43:22:dc:3d:65:6b:be:f3:df:29:c0:bf:f9:21:
                    00:34:cf:ef:07:58:6c:1b:8d:fa:b0:97:af:4f:18:
                    2e:2d:ea:38:7e:87:8d:4b:aa:2a:f0:cb:5e:d5:2e:
                    ad:a9:61:12:f3:aa:a1:ad:ee:d9:8e:3d:8a:25:7e:
                    f0:4a:f7:65:bb:54:d4:6d:f8:b1:1d:e4:65:9c:c9:
                    eb:5d:e4:65:1b:1d:d2:d1:1c:96:c3:b3:e5:89:bc:
                    2b:69:d6:10:04:96:05:c2:8b:cf:b1:e3:95:c7:c2:
                    53:36:cd:18:ab:e5:25:16:de:57:27:06:9a:9b:e0:
                    ad:5b:d7:a2:ce:f7:ad:ea:32:35:58:e7:e1:61:38:
                    29:41:f6:72:83:8d:e2:00:04:14:df:df:43:23:6e:
                    d1:96:f8:3d:cd:11:64:ff:2d:31:58:fe:53:3f:7f:
                    72:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D0:A9:7A:3F:2D:18:62:01:F6:78:90:23:41:5C:45:DE:35:67:24
            X509v3 Authority Key Identifier:
                keyid:84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d3:be:35:56:fb:b6:b7:f7:74:1f:9a:9f:0d:29:e6:72:33:
         06:8c:f0:82:71:02:fb:1b:7c:fe:22:47:ff:ce:a6:67:25:92:
         a2:eb:8d:fd:12:a7:25:1c:6f:dc:51:87:3f:1b:6f:b6:db:0b:
         ea:00:75:0f:57:53:be:65:bd:b2:d4:de:7b:48:26:47:cf:74:
         3c:3b:5f:51:7a:e8:06:93:0a:53:61:1f:07:d9:2f:15:46:7f:
         69:5c:a2:0c:ff:65:d1:53:e2:88:4d:00:69:6e:23:fd:3d:ea:
         c2:96:b0:0e:dc:79:34:a1:a5:b1:76:bb:ac:ce:20:6d:08:4d:
         20:db:b5:b8:46:c2:45:14:00:fc:4f:6c:40:45:de:8a:85:9a:
         e5:e1:a5:79:87:ba:43:7b:e2:62:51:01:67:22:1a:06:8b:72:
         b4:a5:ba:a6:a0:9c:dd:08:5c:98:7e:a4:76:5a:f7:b9:11:f4:
         04:19:52:03:eb:c3:5b:dd:a6:af:80:0f:91:c3:8f:29:0d:0c:
         ef:36:44:d0:32:64:2b:91:73:1d:d3:40:e9:1a:e2:0b:3a:5e:
         1a:5f:8c:42:92:cc:ad:90:5d:93:fe:26:92:00:70:ba:5f:06:
         d3:39:0f:19:d1:0b:23:e0:08:9a:cc:45:f3:dc:66:c3:25:26:
         7e:51:66:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----