Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
File:                     hFxYdS8zNkIv8O4XJkdFkeekHl8.mft (raw, json)
Hash identifier:          +jlD9Fu68rBAw3g4mzAp2sAYB4vsgOcOLq9YDkpbKC8=
Subject key identifier:   D4:C2:66:5A:D5:93:42:F8:6D:55:83:1C:F1:FE:B1:D1:41:C3:28:9E
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Certificate issuer:       /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial:       01962F74B89B046AFEBB4B967F6CD8AC232E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 14:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:40 +0000
Files and hashes:         1: 1-DR1I-0Q86yRegJRW48TcU9jkak.roa (hash: BbaoF4QpKICKvF2DFJvuoi1HekvHPPg57x8hdzzKsN8=)
                          2: QRsEK7Mm82AysiVwrsI0fcQwGZk.roa (hash: +14a6gbAtC3j39lO1seQMdbzRZUzjrGGX9KqhXCRQaA=)
                          3: bMolsew2aNfnwVEKpwDy2jyM58c.roa (hash: 6E9s83W/T6d5cC26/y3n1N8eAzWZSpgeiiEyiR8AjmM=)
                          4: exOJgZWKhs3CfxljzDJO3y7m_kg.roa (hash: sLEFa7RsALBhT6NfAUon7unSxy37m3yVXscXWcoyxvY=)
                          5: hFxYdS8zNkIv8O4XJkdFkeekHl8.crl (hash: Aoz16aXRTVZ81zfF/VgJjdkkJPKycBfzSCOIdU1Yf3s=)
                          6: nfEFUPm3YqGp7FQGkGbFir0VX4k.roa (hash: wcnZ1tdaEqbHq23LSrQJa3uBDPQRdB3Kf9OV1V7J1L8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b8:9b:04:6a:fe:bb:4b:96:7f:6c:d8:ac:23:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
        Validity
            Not Before: Apr 13 14:01:40 2025 GMT
            Not After : Apr 14 14:01:40 2025 GMT
        Subject: CN=d4c2665ad59342f86d55831cf1feb1d141c3289e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:c7:e6:17:c2:87:69:58:0e:69:84:29:40:
                    57:95:85:7f:a4:0e:19:70:b6:f3:fa:91:74:63:d9:
                    fa:8f:d4:43:81:8c:af:37:1b:1e:dc:76:2a:78:8f:
                    8b:9b:fc:39:d0:d4:bf:a4:76:9e:a0:84:88:aa:46:
                    f4:34:62:8e:70:16:f3:bf:8e:d7:5b:c4:1f:9f:ab:
                    a3:fe:9e:0b:6b:de:90:4c:ef:0b:7a:d0:ff:f4:4e:
                    25:1b:6a:5c:63:d2:e9:a7:9f:69:e1:90:bb:2b:7e:
                    04:0d:8b:45:fe:9f:c4:c4:88:e8:bf:a8:64:9b:a4:
                    ab:4c:c4:ac:01:35:a6:27:9d:0d:4c:21:d7:56:9d:
                    a1:2c:b8:f6:7e:35:7e:47:b7:52:a0:88:ec:41:7d:
                    13:be:f8:eb:9b:66:48:70:84:f1:1a:42:24:4f:d2:
                    d7:46:7d:80:f7:58:3f:4f:41:ed:49:c4:62:6a:86:
                    08:ea:48:d4:fd:b9:37:66:47:b5:f2:ab:c0:a8:cb:
                    10:6d:ae:ae:b2:7c:cb:74:49:46:5d:db:26:a9:2a:
                    f5:cd:e5:d8:b8:d6:7c:38:7c:0c:55:7a:4e:fd:68:
                    da:f5:a5:b9:3d:bc:e8:58:0f:56:eb:51:38:57:15:
                    19:5a:7c:6f:df:55:b8:e5:53:f4:ac:87:40:5e:60:
                    2a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C2:66:5A:D5:93:42:F8:6D:55:83:1C:F1:FE:B1:D1:41:C3:28:9E
            X509v3 Authority Key Identifier:
                keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:2c:d8:82:ba:23:17:05:e5:fb:33:7f:54:dc:0e:cd:14:9d:
         e7:f6:2f:14:a2:f4:02:cf:6a:39:4e:3e:ae:67:fe:b3:0d:a5:
         aa:a4:2f:88:21:d6:70:20:5b:4f:47:26:6f:68:a3:bf:00:6e:
         e7:28:83:f7:ff:a0:18:2f:d8:15:23:bd:eb:67:8a:fa:f1:ad:
         b4:a1:c7:10:db:1b:76:8b:8c:d5:c3:d7:a2:4b:96:72:bd:3e:
         32:26:16:44:49:9e:f3:ea:ed:e6:91:b7:eb:db:3d:0f:5f:4c:
         ee:d2:0f:2a:05:e1:09:28:48:50:4f:cc:00:05:85:2f:40:82:
         7d:0f:bf:d0:70:99:17:c6:98:05:12:67:08:68:37:c4:ec:9f:
         a0:e4:14:c9:6c:1d:02:e4:94:87:6e:53:5a:67:04:35:98:77:
         1a:6b:70:8c:e0:60:fd:46:a2:13:27:27:27:4c:11:f9:fe:2b:
         fc:0f:7f:5c:72:ff:09:ca:4b:55:73:9e:45:e2:33:ff:f9:49:
         4c:a6:a9:e3:71:27:ae:61:58:40:6f:63:27:eb:56:f2:4f:0c:
         bd:cb:79:ef:70:7d:3d:11:9a:8f:6d:76:07:39:57:33:0a:d7:
         59:dc:0f:fc:d5:76:ed:ed:26:2d:f9:2d:cd:9c:65:b7:f7:5d:
         7b:26:70:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----