Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
File:                     hLWkCydKlj5e0-8C6DmcubG7DHs.mft (raw, json)
Hash identifier:          PIv59noQ5n0WF2rbOsHbdZwC1nR9zZ7MKiOM6w7jtSQ=
Subject key identifier:   FC:80:00:65:CC:AF:C8:66:2E:22:68:3D:A0:15:2D:8E:50:B8:E0:2E
Authority key identifier: 84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
Certificate issuer:       /CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Certificate serial:       01962F7496D69AA3877D55F331CA510780C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:32 +0000
Files and hashes:         1: O8vYugo1IMFhRrolkiJ5A2F_9k4.roa (hash: vT082QVsehcKVaVyOGMEheCQhaYoT8jhfxj4aHEzNiI=)
                          2: hLWkCydKlj5e0-8C6DmcubG7DHs.crl (hash: cVGUA6ivrVnbnKgPhmej/49dIMD08dLfMevIDuf7PCk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:96:d6:9a:a3:87:7d:55:f3:31:ca:51:07:80:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
        Validity
            Not Before: Apr 13 14:01:32 2025 GMT
            Not After : Apr 14 14:01:32 2025 GMT
        Subject: CN=fc800065ccafc8662e22683da0152d8e50b8e02e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:99:db:03:84:ca:79:66:31:72:f8:87:9c:65:
                    07:65:7f:b6:ba:37:4b:4d:3d:99:3d:ba:39:f9:8a:
                    19:6e:21:b8:b7:fb:49:62:4a:c4:9d:e9:a4:73:85:
                    dc:4f:77:38:91:36:27:84:e0:81:7e:be:83:f2:d9:
                    4d:f3:57:8b:b3:cd:e2:73:3a:38:5a:cd:ce:77:9d:
                    85:39:c1:c6:cb:73:39:8b:f7:75:50:eb:f1:8f:e4:
                    b2:4a:b5:25:77:53:31:20:f0:10:e4:90:42:08:56:
                    6d:cd:47:65:a6:41:fc:b3:bd:57:7c:e3:4a:2b:a3:
                    bb:3f:5d:6e:28:40:30:e2:b8:88:d0:ad:a4:bd:22:
                    d3:eb:fd:d8:47:87:cb:d3:2d:9e:3c:03:9d:9d:68:
                    07:05:7f:75:72:9c:34:9f:e5:c7:15:8c:22:b2:4d:
                    b5:5d:ff:49:38:05:73:f1:87:a1:6c:56:92:0a:34:
                    04:18:98:9d:5d:75:3e:b7:44:78:f2:07:34:4c:6d:
                    b4:27:a0:85:b3:2e:17:3f:a4:87:c6:70:80:6c:e1:
                    e9:c6:e6:03:7b:14:b0:2c:f8:01:99:83:d3:64:f9:
                    d4:f3:d2:81:79:ea:da:25:2d:75:36:1b:63:a6:d6:
                    93:0a:17:4e:9a:28:4e:4d:9c:1f:7d:f6:f1:5a:05:
                    36:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:80:00:65:CC:AF:C8:66:2E:22:68:3D:A0:15:2D:8E:50:B8:E0:2E
            X509v3 Authority Key Identifier:
                keyid:84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:45:bd:1d:e6:db:1d:bf:f4:40:ff:b5:b0:31:30:aa:7f:c3:
         56:88:84:dc:0b:d4:4b:55:ad:41:be:19:c1:86:79:85:51:e7:
         13:c1:f5:c9:ff:c8:50:6c:b0:48:ae:d5:81:94:06:b1:1e:32:
         8f:b9:0b:54:e3:b7:4c:b6:51:30:3f:04:de:56:76:a0:f0:5e:
         bc:57:11:ff:44:70:9a:31:fc:4d:1d:97:d2:f6:9f:3b:48:85:
         e0:a2:b5:85:eb:7e:87:69:c7:07:bd:88:45:78:f5:27:df:f1:
         3f:99:e2:f3:cb:e4:12:61:41:af:30:94:85:39:fd:15:27:6a:
         3e:6c:c2:e6:86:89:39:49:a2:97:12:ce:81:0f:23:66:b9:b7:
         29:13:33:bd:68:eb:39:be:1b:76:e2:30:9c:94:3d:46:09:68:
         d3:5c:9e:4b:52:23:9a:da:5c:ba:90:67:10:73:3e:62:d8:38:
         a7:ee:73:39:fd:5c:bd:59:2d:46:3f:8d:bd:25:64:b9:26:a2:
         c0:17:75:34:4a:78:90:60:28:1c:0c:0b:6b:32:69:5b:c7:d1:
         c0:02:d4:eb:c0:42:8e:84:56:5e:2a:43:90:04:f3:f1:0b:19:
         b7:d9:bf:fb:9f:14:bc:33:34:12:7d:2d:00:24:21:40:4b:81:
         22:f5:23:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----