Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
File:                     ifTHhzt_6kn_brkNUCwdvDpfjDM.mft (raw, json)
Hash identifier:          hJuxPgUn4f5Q/m5+AQgfaud7xvpxU6ex58uVzdkQ9BQ=
Subject key identifier:   62:E1:DF:AB:AE:37:3B:AB:2E:A6:36:2A:FF:9C:EC:29:8F:62:4B:45
Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
Certificate issuer:       /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Certificate serial:       01962DF43C480CC2A4BB5C53315CA03DEAF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
Manifest number:          14CE
Signing time:             Sun 13 Apr 2025 07:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:42 +0000
Files and hashes:         1: 5dE_GC4RYmruYsEQCosEswqhvMw.roa (hash: PKjCYy3vCzlACHchkXt5SVZDwsnRqMCgtgL6CJOnCUg=)
                          2: ifTHhzt_6kn_brkNUCwdvDpfjDM.crl (hash: y/sayOEp/OR7NtgROgIuDq6LW+Le6P3iylKthEVeSBY=)
                          3: wITBUH3fVii4QvavQf9IYQ9sIA4.roa (hash: sUVkY3RRTmkWlOCgQmin3wil/Gjs5wSpMGd2nMYWzJU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3c:48:0c:c2:a4:bb:5c:53:31:5c:a0:3d:ea:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
        Validity
            Not Before: Apr 13 07:01:42 2025 GMT
            Not After : Apr 14 07:01:42 2025 GMT
        Subject: CN=62e1dfabae373bab2ea6362aff9cec298f624b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5b:9a:c4:1c:5f:0b:4f:fa:1f:48:c8:81:c7:
                    f5:91:50:16:62:71:17:49:66:f1:95:99:42:37:97:
                    ab:29:7c:0f:8a:79:55:86:16:48:14:d5:68:01:7d:
                    9f:7e:a6:f6:16:7c:7f:90:77:60:9c:34:2e:65:b5:
                    43:d3:f8:db:8f:fb:7e:eb:c6:61:be:92:7a:25:86:
                    bf:a2:7e:e1:c3:75:54:b9:94:ee:80:73:f3:d0:b3:
                    0b:89:9f:2b:b1:d2:f7:47:7b:0b:b6:bb:24:a6:d3:
                    83:52:3c:4d:2b:1e:9c:90:23:0b:38:ff:96:a5:36:
                    f6:f8:d2:40:99:24:28:8f:9b:83:f8:34:2d:eb:a5:
                    a3:63:8c:e3:67:dd:9a:cb:f5:33:24:1b:70:4f:74:
                    08:cd:b4:0c:28:50:83:2b:25:98:92:fd:54:9f:dd:
                    1a:e6:d7:26:64:d1:fc:94:62:df:af:d2:fc:2e:24:
                    de:2a:56:47:b0:6f:3a:59:ed:31:b4:49:a7:f7:ea:
                    1a:89:0d:b3:a4:4a:f6:ef:94:36:c8:a4:1d:86:fb:
                    55:a2:8b:0e:20:ea:18:f6:d0:77:ae:69:d7:a2:b2:
                    c5:00:45:3a:83:8a:72:e4:7d:5a:c4:b4:75:fa:05:
                    3a:5f:cc:02:6c:7c:ad:b9:86:8a:b9:72:c0:86:c0:
                    d8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E1:DF:AB:AE:37:3B:AB:2E:A6:36:2A:FF:9C:EC:29:8F:62:4B:45
            X509v3 Authority Key Identifier:
                keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:13:ed:f9:e3:26:b5:f7:96:db:42:1c:7d:ed:dd:5c:75:b4:
         c7:48:92:49:90:56:24:9a:17:47:3d:a6:c8:46:7d:42:a1:ce:
         78:ca:26:6c:74:64:f0:5f:ef:d8:6f:11:79:07:52:32:da:ff:
         a6:3d:79:6a:4a:58:57:b9:12:27:4a:1b:90:85:71:14:7a:1e:
         46:71:8a:e4:de:01:a3:59:a7:8f:9a:cc:7f:3e:ab:32:bb:7d:
         8c:e4:3d:83:0a:35:b1:d4:81:b6:27:9e:cd:6f:89:7a:0c:bf:
         de:2c:df:1e:7e:ae:18:64:aa:b5:2b:4f:53:6f:3d:b4:ac:7c:
         83:86:9b:f1:64:03:c1:be:f1:43:22:31:a2:ef:96:55:d4:fe:
         9a:00:f3:47:95:bb:2c:3e:59:86:f1:3f:82:e9:c9:1f:2d:22:
         cc:c4:d3:3f:60:a0:29:fa:58:11:db:b0:01:8e:e0:77:3a:be:
         5f:c6:34:a2:41:b4:b4:e9:fa:b0:d5:35:3c:da:e0:0a:68:51:
         69:cf:6f:ac:3b:44:53:bd:87:ca:96:12:1e:bb:9b:0a:4e:5e:
         85:56:4e:16:e1:05:ac:f4:8d:73:95:ff:28:c6:a4:73:b5:44:
         48:b3:59:b9:33:35:10:63:1b:40:c8:cf:06:1c:90:47:c3:0e:
         15:10:c3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----