Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
File:                     hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft (raw, json)
Hash identifier:          WDOV6TDnw48e3sz5CBd8RpAwNdhftjuCw2gXI/YBdWI=
Subject key identifier:   2A:6A:93:5F:9B:89:17:4C:95:7F:B6:83:23:E3:C2:A2:98:3E:4F:15
Authority key identifier: 85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
Certificate issuer:       /CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Certificate serial:       01962F743C7440BF44895D851AA5037ADB57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
Manifest number:          0C10
Signing time:             Sun 13 Apr 2025 14:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:08 +0000
Files and hashes:         1: 574W7z-0GVSyQ6o383reYXA7QZc.roa (hash: 7oxCz8Z8dYajS9esPzPSpl386CuN+PzQh5YVWvXB59o=)
                          2: hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl (hash: Ubckv9EQ7BrqV1olGjLncUvbMBKXr/DdHYyS2nKYjuk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3c:74:40:bf:44:89:5d:85:1a:a5:03:7a:db:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
        Validity
            Not Before: Apr 13 14:01:08 2025 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=2a6a935f9b89174c957fb68323e3c2a2983e4f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2d:82:40:2b:8d:54:ef:a7:a7:93:83:de:22:
                    f9:52:ad:8c:10:f8:4c:30:b4:a5:3e:58:9d:d9:7a:
                    21:96:30:39:59:13:66:91:09:bc:2b:62:8b:b1:3c:
                    3a:63:65:37:56:27:34:35:44:59:e4:39:0e:fc:f2:
                    55:e0:e4:aa:40:49:4a:16:08:e9:c2:80:c5:36:de:
                    fb:81:52:af:ff:04:1f:c3:15:88:99:d7:32:23:d5:
                    f4:2b:54:0d:a1:f4:15:63:db:86:a6:df:04:74:0d:
                    55:55:d8:be:c2:d6:ae:3b:ad:9c:21:bc:5f:04:7c:
                    5a:57:96:b7:e1:75:4c:63:7d:3a:79:73:db:1c:7c:
                    81:cc:af:6f:be:9f:07:a5:2b:5c:dd:a5:ec:64:b7:
                    e8:9f:52:69:40:2a:df:8c:a6:6f:67:da:bd:0a:db:
                    4a:e2:6d:00:9f:d6:26:4f:39:f4:bd:6c:67:33:eb:
                    c5:23:14:97:e3:8c:8e:a8:86:dd:40:bf:fb:fc:ab:
                    53:d1:e4:6f:fb:e2:01:eb:77:12:94:84:ab:f8:cd:
                    56:1a:2e:43:4e:15:1a:85:80:56:54:ed:3c:3e:b9:
                    ab:64:4a:be:c5:72:58:d3:a0:29:3f:38:5a:a3:fa:
                    90:d9:e8:bc:b5:3e:28:0a:8d:5b:3b:cc:f0:97:93:
                    aa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6A:93:5F:9B:89:17:4C:95:7F:B6:83:23:E3:C2:A2:98:3E:4F:15
            X509v3 Authority Key Identifier:
                keyid:85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f9:78:ec:8e:7d:e3:90:83:89:21:45:a1:f7:94:a4:b3:0d:
         1e:ef:40:8d:6f:b8:8d:f3:6a:ee:b6:2e:e2:8e:0e:7f:15:b0:
         a4:c0:da:17:24:94:5c:a0:1f:a3:c2:79:b5:7f:ca:46:39:b6:
         d7:44:eb:3f:65:7b:c3:36:04:51:b1:15:dd:c4:59:1d:c7:9d:
         f5:3d:9a:50:43:eb:29:96:79:0c:ad:95:dc:0c:4d:bb:6d:61:
         1c:6b:77:50:29:1d:34:0b:98:84:d8:8b:50:13:c4:85:c2:3a:
         a0:ef:78:e1:50:c1:33:8a:14:39:72:81:96:8d:d8:b1:40:dd:
         1b:d2:57:e5:e3:c5:80:43:5f:60:c6:3f:7c:ea:0c:a9:62:f9:
         c6:16:04:d6:dc:8c:b2:18:00:a4:9e:63:90:d7:a0:da:20:56:
         b7:9e:fc:64:68:43:8e:dc:a2:65:9f:ba:f4:c7:bd:eb:e3:dc:
         4a:10:e1:e4:c9:02:8d:75:aa:ea:13:14:4a:f5:89:55:8f:60:
         48:cb:ae:59:c6:b8:1e:b7:f9:c9:bd:8f:56:8b:5d:a6:f8:1d:
         d2:d9:aa:83:f8:9d:89:89:74:e3:ed:70:71:d9:81:7f:37:49:
         52:21:ce:10:1b:33:2b:07:9f:2b:f9:e6:03:9e:9a:b6:50:08:
         00:95:e0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----