Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
File:                     htVCMjwOMFHJx7uO0dHorP09uDQ.mft (raw, json)
Hash identifier:          YmngaRv+GPUpMr0ZDNkxsSUIV1E92HZmqBWr52+/fb8=
Subject key identifier:   9D:BB:D9:44:03:62:15:8F:09:D3:EB:4A:70:DE:FC:19:23:DA:8F:38
Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
Certificate issuer:       /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Certificate serial:       01962E99AE16488FB0D0ACA8E7067624D19A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:02:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:25 +0000
Files and hashes:         1: 8RAc371ukABbTWcTiK04QzcyelY.roa (hash: I+sCdVGv/TleBprM3JJBzhdIfzsQV+d2G7DqXk+y4rc=)
                          2: bbCSbkJ69E4ZyMcMf3FWG13o9vw.roa (hash: QLK4XGB/GAetu80z0dQMeItgOqPLMqF/gY1QoYjWP2U=)
                          3: htVCMjwOMFHJx7uO0dHorP09uDQ.crl (hash: mIgXz1uuuCZ1pR4VgItmD6wiC9Ukr+qfe4VihbImD1Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ae:16:48:8f:b0:d0:ac:a8:e7:06:76:24:d1:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
        Validity
            Not Before: Apr 13 10:02:25 2025 GMT
            Not After : Apr 14 10:02:25 2025 GMT
        Subject: CN=9dbbd9440362158f09d3eb4a70defc1923da8f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:51:85:49:97:a1:ed:99:6b:5a:21:92:a0:bd:
                    f0:45:6f:1f:d3:fd:ec:89:f7:50:d2:d0:b8:e2:6c:
                    5d:8b:84:85:aa:d1:1b:ce:4f:38:2d:00:f2:0a:0a:
                    1d:77:5f:14:f8:70:11:d2:e2:fa:8a:5a:63:3d:cb:
                    77:b3:ff:f0:83:42:a9:df:cd:2e:70:05:67:9b:3b:
                    97:49:1c:c2:43:dc:62:69:a6:cb:20:81:51:55:60:
                    b4:46:d3:f9:9b:62:97:aa:36:09:a4:0a:31:db:a9:
                    41:f7:78:94:31:ca:5c:91:0c:86:90:03:c9:30:69:
                    cf:e6:10:7e:65:5d:d1:a1:3c:12:6b:fc:db:3d:c0:
                    1f:c3:f4:7a:f5:ce:a6:b5:85:b8:33:1f:d6:ab:f2:
                    f2:40:7c:c0:8a:b8:b8:ed:0e:3d:4e:e4:6d:93:9d:
                    e5:71:45:47:43:15:d2:d6:13:5f:18:f9:e2:aa:cf:
                    87:c6:3a:4c:dd:16:24:de:07:a2:7c:2f:69:81:48:
                    d1:df:8d:de:e3:12:ca:3a:bb:86:ab:c7:92:74:de:
                    0d:3c:06:8c:a4:5b:e5:5e:4a:35:ee:19:f2:c5:1c:
                    ba:d9:33:14:ac:6d:1d:0a:e5:eb:f3:1e:25:16:30:
                    b0:c2:d5:19:dd:13:01:19:64:73:ad:93:e3:9d:56:
                    7d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BB:D9:44:03:62:15:8F:09:D3:EB:4A:70:DE:FC:19:23:DA:8F:38
            X509v3 Authority Key Identifier:
                keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:55:1e:77:c3:ed:21:6b:c3:b9:d2:1f:5e:ea:99:db:ca:e4:
         00:22:8a:14:26:27:70:c0:6e:ff:ac:18:99:3a:42:96:ba:d5:
         61:11:69:0c:08:73:a8:21:bd:ae:5f:79:a4:1f:59:92:09:37:
         c7:37:e8:79:f1:5b:51:cb:9e:38:9f:7c:19:d9:3a:45:1e:aa:
         34:5a:3f:85:62:9f:81:6f:0c:a5:53:a5:be:82:62:83:83:1e:
         ba:f0:91:cd:7b:16:0d:66:92:23:8a:81:0f:59:be:3a:5a:35:
         81:b3:99:80:00:4d:83:8d:1d:63:77:3d:17:cb:6f:e7:a8:d4:
         4d:f1:41:64:28:5e:80:88:d5:ea:bf:7f:55:d1:2b:cc:2a:d0:
         61:70:3e:f7:30:8b:14:79:a6:23:5b:99:e8:ab:ef:6a:97:94:
         b1:1a:4c:64:82:c5:0b:6d:b6:4d:4c:42:6b:81:ac:1c:2a:78:
         26:a1:56:f6:b8:a1:42:1c:4b:a3:5f:a8:f3:b4:2e:c8:e7:15:
         9b:d6:50:69:a5:0c:31:95:70:f1:60:eb:1a:5b:d5:ad:d4:28:
         9f:73:e8:f9:b4:90:fa:c6:81:e7:1f:d4:2b:65:ff:f0:f7:80:
         cf:60:f4:75:15:d3:37:c9:fc:c7:5b:2a:5b:de:b6:f9:50:64:
         29:c5:ff:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----