Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
File:                     86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft (raw, json)
Hash identifier:          6JgpprVHkDG1ITjKI3L2ycuv4+KkOKifQarxbm0SHYg=
Subject key identifier:   0F:03:D1:ED:84:6F:44:00:88:41:1D:B5:4E:F7:CD:82:E9:62:F0:6F
Authority key identifier: F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
Certificate issuer:       /CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Certificate serial:       01962F74B5AADC0C4D7FEFAF2FA4F29BEDFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
Manifest number:          022D
Signing time:             Sun 13 Apr 2025 14:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:39 +0000
Files and hashes:         1: 0aywYTi5Sc6yVfxfBxLpHYbIDYs.roa (hash: XltTkT+5iNEXCHy8WnwN+9b+D1DDxHii8Hapue8Rijw=)
                          2: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl (hash: EoWers4f7N76lCEB/D7bIAXY0dC47Q6vnBjkB/sfS2Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b5:aa:dc:0c:4d:7f:ef:af:2f:a4:f2:9b:ed:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
        Validity
            Not Before: Apr 13 14:01:39 2025 GMT
            Not After : Apr 14 14:01:39 2025 GMT
        Subject: CN=0f03d1ed846f440088411db54ef7cd82e962f06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4e:5a:63:be:af:b4:ec:9e:c7:32:12:37:a9:
                    8d:f5:07:c6:9b:a5:2a:b6:ac:27:c7:ca:e4:82:87:
                    ff:9d:75:1a:fa:43:7f:4c:f9:23:b4:57:aa:9d:e5:
                    a6:89:92:89:2a:1e:2a:2b:04:65:5b:27:a3:9a:15:
                    26:4f:78:c4:66:34:c1:35:36:63:d0:92:24:c0:a8:
                    8b:45:1d:d5:a8:32:ec:ff:9f:7b:a5:93:fb:30:c5:
                    f5:b6:81:2d:05:98:73:b5:f3:ba:4b:4d:87:30:fa:
                    0d:a7:a0:29:d5:98:12:51:ca:59:69:22:79:f4:8c:
                    ef:8d:45:f2:59:2b:13:4e:5e:c2:1e:31:ac:92:a9:
                    4c:c5:45:7d:79:47:38:6a:c7:07:c4:e8:67:b4:79:
                    da:56:ec:20:d4:4f:6b:a8:19:66:fa:87:d8:96:15:
                    a2:52:2e:da:18:9a:b6:3d:5f:c6:40:df:56:c1:b2:
                    f7:6e:08:58:b1:2e:df:65:e4:9b:36:30:ca:29:87:
                    cb:e0:8f:c1:82:a2:1a:41:e3:33:88:d1:7f:eb:ba:
                    80:81:17:e4:1e:99:ca:b9:7d:da:41:64:43:40:77:
                    67:a0:31:0c:8e:fc:9f:4f:12:ec:24:88:86:28:fd:
                    74:f8:58:21:9c:76:6a:ac:1a:f2:fb:fe:ee:d0:f8:
                    8c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:03:D1:ED:84:6F:44:00:88:41:1D:B5:4E:F7:CD:82:E9:62:F0:6F
            X509v3 Authority Key Identifier:
                keyid:F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b1:f1:3e:af:ca:b0:ee:91:c0:54:9d:c2:94:be:b0:cf:a7:
         91:09:bf:2b:1c:2c:41:ba:80:57:bf:b6:05:3e:c0:c6:83:4c:
         13:dd:1a:b1:6b:6f:6b:a6:c5:e7:66:d9:0a:de:d6:5f:4f:71:
         cd:96:a9:87:de:45:83:c7:58:b4:08:d1:08:84:4d:76:6d:11:
         50:e7:33:f6:15:06:51:4d:32:47:43:0f:52:80:57:fe:2e:f9:
         80:49:0e:bf:52:3f:64:9b:4d:41:63:ed:0e:f6:e3:df:43:c8:
         e2:38:c7:a8:48:03:f2:90:24:2d:e0:74:f9:6e:cc:72:36:21:
         44:37:e4:80:79:7a:e4:bd:9e:6a:9a:5e:aa:f4:55:9e:38:71:
         cc:df:42:d9:8f:66:d5:6f:cd:22:ac:aa:7f:84:05:21:10:be:
         e6:f5:ce:c4:52:33:ca:ab:ce:39:a8:ef:b5:e7:89:a4:e4:10:
         30:43:50:da:3a:08:23:18:65:31:71:89:68:ee:d4:b8:7f:9c:
         12:12:43:b7:ed:87:80:5f:d2:8c:6e:35:73:81:57:c1:47:78:
         ad:73:e2:92:7e:91:f6:bc:53:07:de:e5:1a:2a:d5:ae:7a:08:
         d4:f0:71:e6:0f:a1:ac:83:49:ee:e2:c7:37:24:59:0b:31:f0:
         6d:c8:d1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----