Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
File:                     CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft (raw, json)
Hash identifier:          v81H6t7adoUA/RPY8c+dUB3DaSXAzqu3OOZXcQGcbxc=
Subject key identifier:   F6:64:60:32:60:1D:60:31:DC:0B:1E:96:86:F5:97:E9:C9:A6:CA:20
Authority key identifier: 08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
Certificate issuer:       /CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Certificate serial:       01962F3D33068B45E4E7BDC30E20E6C76822
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
Manifest number:          10EE
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:01 +0000
Files and hashes:         1: CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl (hash: LYxrdg4MVu75Cze1UEwZNNgeRnKgaJ6UQ6cPwnLcDnM=)
                          2: NSQQr0dchBVb5NqeR8z3x_MXCeI.roa (hash: XPvSVq5h7mPPG5QqR8bg1ZJJPL/y/MfsW5VYh5EY4C8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:33:06:8b:45:e4:e7:bd:c3:0e:20:e6:c7:68:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Apr 14 13:01:01 2025 GMT
        Subject: CN=f6646032601d6031dc0b1e9686f597e9c9a6ca20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:71:30:18:b1:c7:11:47:f4:b3:74:dd:ef:ce:
                    6e:6d:c3:f7:5f:6e:6d:ce:2d:38:ad:89:8c:39:ee:
                    4d:37:97:02:1c:61:60:22:b1:00:37:a3:5a:ec:4a:
                    98:db:9f:84:49:fb:0b:80:cb:00:3a:9d:23:7f:b9:
                    1e:d3:fa:5c:1c:2e:f9:c6:c9:a0:b4:d1:07:66:b3:
                    cc:c9:e9:e8:01:a0:f2:e2:2c:0a:86:c9:7b:51:df:
                    6d:1a:c3:86:17:f2:ae:ef:4a:7f:6c:56:d3:ee:29:
                    db:27:ff:6f:35:53:a8:cf:99:f1:bd:0d:94:fc:63:
                    5b:45:fb:1c:7a:25:fb:2e:3d:d4:69:62:d8:85:10:
                    84:62:73:40:d3:dc:52:9f:24:b9:1e:bf:ee:56:ef:
                    3c:89:e7:f4:2f:df:a6:94:c5:6d:61:bc:a5:9b:28:
                    20:bb:88:a8:c3:66:24:ff:36:f2:0e:21:81:0a:ed:
                    b9:8e:fb:6b:7b:14:e4:89:5a:72:46:78:6a:5e:ed:
                    26:1e:d8:28:f3:82:4f:67:3f:b4:23:60:63:20:c3:
                    8a:ac:f4:8c:f4:55:83:41:0d:d0:14:90:07:d0:73:
                    15:56:e8:f1:bd:fe:60:3b:33:ef:25:3d:df:9d:30:
                    ed:4c:e7:05:5b:4d:74:4f:0a:5d:fc:e8:29:74:61:
                    7c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:64:60:32:60:1D:60:31:DC:0B:1E:96:86:F5:97:E9:C9:A6:CA:20
            X509v3 Authority Key Identifier:
                keyid:08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:d3:4e:c7:2a:2f:12:58:c3:95:49:e8:9a:de:33:08:1a:b7:
         3e:e7:4b:10:8c:e4:db:e4:fd:4f:f4:73:fb:e9:8d:8e:d8:12:
         ec:72:09:b0:fd:59:32:45:cf:d1:a2:a3:c6:63:c8:d6:ac:ee:
         42:f0:ae:d9:f6:30:9f:f1:ad:00:9a:24:86:c2:0d:4b:54:ef:
         00:e6:73:e9:ce:26:68:48:26:34:29:6b:8f:7f:dc:03:4e:1f:
         2a:36:1c:95:66:4b:37:9b:5d:bb:63:e1:59:98:86:b5:40:fe:
         84:90:36:bb:cb:4b:1b:31:c4:5f:ac:04:0e:24:4d:ff:d3:65:
         e5:ed:a5:8b:1c:d6:52:a0:b6:7f:9b:88:2f:2f:1a:da:92:88:
         0a:98:f3:26:5b:31:73:bd:b1:e1:f9:71:de:f9:66:92:e8:79:
         36:d0:12:72:2e:48:bd:b0:48:c5:06:cb:d7:fe:ed:ac:c9:b7:
         e6:de:d5:e7:34:69:78:b7:fc:2e:49:8a:16:dd:4e:2e:37:61:
         9a:9e:e6:3e:18:a0:90:61:49:85:2b:40:aa:a5:68:e1:07:62:
         cd:f9:c3:a5:74:f4:38:64:89:bc:90:11:9c:b1:59:f0:18:2e:
         59:21:dc:4e:08:3a:8a:4d:54:b6:93:52:9a:93:3d:b2:b8:f7:
         1a:b0:bd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----