Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
File:                     hBhM6RkCNkC7klbC2NGgSfoQJSA.mft (raw, json)
Hash identifier:          PfrOrA31nZ2YuYPLnFJTp3zeQk1bYcPXTdeh6VLeoEw=
Subject key identifier:   41:68:34:29:60:A0:C8:50:4E:97:51:67:C8:7F:13:9F:E6:F3:03:AE
Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
Certificate issuer:       /CN=84184ce919023640bb9256c2d8d1a049fa102520
Certificate serial:       01962FAB86EAF9A86A412CADBC54EF2EA78E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:32 +0000
Files and hashes:         1: HyOxfsfCg8-tkufuXac7nvkK01o.roa (hash: L5Ny6HNe08uh+c2YqS2y8m1kghjhUwTxv7PPQGLCeAk=)
                          2: Za1vvPAEMQLX9tFDLmhPbJ3BBlk.roa (hash: ny9mwL29fdAvRnLi4zBGCZuIouNHHSaZbEkA3+/PrUQ=)
                          3: hBhM6RkCNkC7klbC2NGgSfoQJSA.crl (hash: SJxFUedEZR2IkNe1VeQpAMCFi4QDSarxXk39bGCiVPE=)
                          4: pQKQijoa8QLl8H3UvggEgIJH4JI.roa (hash: JjHJzDNM1I3FEnY1/wJ+QeN9KOwj+3VjvvY6xPkS+9k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:86:ea:f9:a8:6a:41:2c:ad:bc:54:ef:2e:a7:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520
        Validity
            Not Before: Apr 13 15:01:32 2025 GMT
            Not After : Apr 14 15:01:32 2025 GMT
        Subject: CN=4168342960a0c8504e975167c87f139fe6f303ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ce:dd:8c:0c:b5:fb:e6:ea:65:b3:cb:a0:9f:
                    84:2b:01:4e:0a:7d:42:58:16:d0:2c:a8:5b:cd:81:
                    2e:54:98:02:49:2a:26:4d:e4:bb:9d:c5:24:8d:6b:
                    51:1b:c4:db:ec:19:86:11:73:00:00:8d:95:3a:65:
                    d7:1b:3d:d9:d6:06:79:48:20:7f:8e:c5:74:aa:c2:
                    75:1e:af:64:a7:25:12:24:8b:ee:23:25:bd:4c:78:
                    ef:76:47:69:9a:f5:7c:27:d0:0d:b8:a8:53:a3:2b:
                    33:50:45:cb:74:a1:fe:99:9d:93:70:a7:ea:c4:35:
                    d7:29:4d:71:c0:22:76:03:c0:ef:74:d4:43:50:70:
                    d7:7c:05:e9:88:c0:5d:e4:c1:dd:94:9a:88:72:f9:
                    10:55:ef:2f:48:bd:02:64:ce:5b:d3:c7:fd:2f:9d:
                    5e:4f:ac:ea:66:53:2c:2c:67:d5:ab:43:ff:52:12:
                    2f:93:ed:3a:f5:6d:dd:5d:db:70:d6:6d:6c:93:4b:
                    55:43:60:42:7b:30:da:20:ec:52:55:2a:75:0b:1b:
                    cf:62:e1:d9:f9:45:63:be:5a:4a:3e:f7:21:58:58:
                    7b:a2:19:b3:32:dd:fe:20:5d:d5:59:79:83:29:ba:
                    58:51:9e:79:60:cc:e4:23:5c:27:b1:db:86:e7:89:
                    0d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:68:34:29:60:A0:C8:50:4E:97:51:67:C8:7F:13:9F:E6:F3:03:AE
            X509v3 Authority Key Identifier:
                keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:36:64:55:a8:48:7c:19:23:85:9f:1a:58:b1:eb:cb:4a:b7:
         26:15:1a:83:cf:7e:02:aa:f5:34:d2:a6:20:9e:41:a0:47:6d:
         49:e5:b3:20:e6:0d:10:b9:d9:2b:64:5f:33:a6:0d:da:bd:ae:
         15:0c:54:48:ee:41:b7:15:ce:f4:44:ee:80:14:ea:1a:03:5a:
         78:8d:8b:b2:a8:93:e0:aa:ac:f6:a1:a5:00:6f:7c:66:95:64:
         0c:3a:e4:66:8b:e2:33:1a:57:cd:b1:5a:69:d8:7d:e0:f7:17:
         4c:ec:6e:68:02:86:34:cd:b0:93:74:36:ed:fd:23:fc:db:52:
         59:b9:49:b3:46:35:b5:88:1d:01:4c:3f:e1:6c:00:2e:a6:18:
         d6:29:f8:7a:64:44:ff:06:cb:4b:fb:21:bf:33:d4:c0:2b:65:
         cb:ae:88:d5:29:64:8b:6a:a9:57:15:8b:a3:2b:41:34:35:6b:
         9f:b3:18:48:1e:af:59:9f:af:55:ee:1e:4e:5b:96:39:b0:28:
         16:78:6a:f6:e0:42:86:ff:42:62:9e:86:24:6b:b8:66:2a:d5:
         ae:09:2c:a5:e9:4b:d9:f4:1f:12:e2:b7:78:bf:52:ba:8b:03:
         85:87:a2:db:ab:f4:ce:f1:4a:8b:63:bb:31:10:ca:76:f7:3f:
         3f:4a:1f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----