Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft
File:                     hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft (raw, json)
Hash identifier:          UZHiicAfr9FU4dcZcXxqjyxeARRdEokyWXbbYS/9qWE=
Subject key identifier:   9D:EA:E0:28:D3:1D:02:2E:E2:12:ED:32:32:EE:BF:B8:D7:9D:88:67
Authority key identifier: 84:6D:45:22:5C:F0:D4:FA:9C:65:AE:E8:88:61:D2:26:12:03:AD:00
Certificate issuer:       /CN=846d45225cf0d4fa9c65aee88861d2261203ad00
Certificate serial:       01962F74A85E5BC0B96FCE306DB349CC5C30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft
Manifest number:          0F85
Signing time:             Sun 13 Apr 2025 14:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:36 +0000
Files and hashes:         1: XLQfftOCYwZhCKWBFvPgcWtM3ng.roa (hash: e5IwRRubP2iih1RAenDvyf84x82YlIWC8mC3l2YoKV8=)
                          2: hG1FIlzw1PqcZa7oiGHSJhIDrQA.crl (hash: nx8SvgjvMQl/yJTwcAepIcYXN+Lfn1fHc6ZEDu1yvqU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a8:5e:5b:c0:b9:6f:ce:30:6d:b3:49:cc:5c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=846d45225cf0d4fa9c65aee88861d2261203ad00
        Validity
            Not Before: Apr 13 14:01:36 2025 GMT
            Not After : Apr 14 14:01:36 2025 GMT
        Subject: CN=9deae028d31d022ee212ed3232eebfb8d79d8867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a0:1c:46:6b:42:19:f0:80:91:b9:17:d2:e5:
                    8f:f4:d6:86:0b:33:e5:5b:85:1c:1c:31:82:d7:7f:
                    33:cf:43:71:c8:1c:c2:d3:b2:59:18:29:14:77:9e:
                    bc:a6:19:ea:2f:50:2e:87:05:d9:89:a5:60:75:3f:
                    0b:a2:fb:42:62:69:35:ac:90:05:ee:da:fa:df:86:
                    a8:c9:96:2c:67:cd:81:85:6c:9f:f7:ea:37:ad:86:
                    71:16:7d:46:cc:8f:93:f5:66:44:e6:b4:88:c6:fb:
                    67:cf:b0:1a:3b:6f:8e:f5:91:b3:77:a6:4d:7e:2a:
                    fe:72:75:9b:54:c6:8a:30:7b:4e:96:b5:03:f7:0e:
                    49:2b:ff:5f:6f:d4:32:f6:a8:b4:55:9e:d9:07:d2:
                    e5:0f:6e:1f:13:cc:b2:a4:97:73:f9:56:40:24:cb:
                    bf:c0:78:37:44:91:cb:71:5a:7f:1b:4a:24:5d:87:
                    1c:c1:73:90:d0:61:46:f2:99:54:48:74:63:4a:91:
                    ee:6a:16:91:37:35:fe:60:52:36:d4:97:b3:97:12:
                    15:14:1f:d0:d7:64:9e:2b:a2:fa:ab:06:38:83:2f:
                    80:36:42:07:9d:6c:0c:f4:1c:38:ea:53:32:b6:c5:
                    2f:d4:ff:22:c7:2a:93:b4:b0:27:dd:e3:42:14:ab:
                    5a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EA:E0:28:D3:1D:02:2E:E2:12:ED:32:32:EE:BF:B8:D7:9D:88:67
            X509v3 Authority Key Identifier:
                keyid:84:6D:45:22:5C:F0:D4:FA:9C:65:AE:E8:88:61:D2:26:12:03:AD:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:f2:c4:8a:c1:eb:a0:d4:2f:3c:a6:d0:41:9a:14:ef:7b:cb:
         80:f8:60:27:f7:2c:90:5a:07:90:62:5f:a0:58:ee:8d:e8:aa:
         7d:35:28:59:25:29:5e:3c:22:fc:6a:2d:11:a2:0b:6b:df:b5:
         2c:e8:40:bf:69:c2:78:c9:d5:58:54:d5:83:ac:a7:35:26:72:
         e0:48:fb:04:f1:b0:61:4a:89:77:0a:3c:e8:04:64:8f:f7:34:
         46:3f:c1:4a:50:fd:d5:80:52:47:cb:24:97:a1:8d:f0:29:4b:
         e2:89:5e:ad:1d:c0:1a:61:c6:87:1d:df:ac:f7:94:3a:a0:e2:
         f7:78:a1:fc:1e:ba:87:52:fb:46:23:ca:5b:db:16:b4:f5:07:
         a1:b2:49:02:b1:2b:67:82:62:8a:0b:e1:20:73:f9:e6:06:3a:
         33:6b:ce:dc:09:1c:35:ed:07:60:d5:0f:18:c6:bb:d6:e5:90:
         61:c2:02:71:25:73:d1:1b:88:82:66:8b:21:a1:c3:29:5a:78:
         b8:04:fc:91:05:05:c8:61:10:27:a7:e0:c2:6c:6e:ac:8e:42:
         d8:fe:9f:9d:6c:ea:f5:a4:6d:81:8f:e8:dd:bd:6f:f1:76:fb:
         ae:be:b7:c2:c0:08:35:31:1c:af:e4:38:16:6b:69:9c:88:f2:
         b8:28:b7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----