Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
File:                     hst0KgO8nIVQcheiUgTf_4L8zfk.mft (raw, json)
Hash identifier:          hmaAkhvPlngA7IdYFf0RJHFJ+h3TZJxIQ9gAp4Yv8VM=
Subject key identifier:   07:7F:45:08:A0:B5:77:D3:CC:0A:1B:D3:B2:04:11:C3:47:53:DA:FF
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Certificate issuer:       /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial:       01962ECF5F55695555282ADBECB8CB924A07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
Manifest number:          0DF5
Signing time:             Sun 13 Apr 2025 11:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:04 +0000
Files and hashes:         1: 1-TKHNCKbZE8g4XJcuPLU9wUNwXw.roa (hash: 4YE3N5IWvrJIb1gbK5UKUvbBqNqAEHWjC5reIu6mjb8=)
                          2: LbhZMBeDnr1qMQnMxvTged4AkBg.roa (hash: emzGjVkdxSZb/ajPZYnZYJApon4Jb9kZGLpvd1zwrzU=)
                          3: P4l18X0E6wGAiypR58C2CsBAfew.roa (hash: V35a2kBLapjAgjmC/NuotWMp7OBF1Qv4aZCQYf/dZTg=)
                          4: YfG3Zer9S1-dTwVZ058bt2jGz7A.roa (hash: 2aerzGz5WDeQmLCPvnO2oE90pi2KsboywKSSiTQQgEI=)
                          5: hst0KgO8nIVQcheiUgTf_4L8zfk.crl (hash: 0b56lJ7dy0u2wnu8G/iNIU4rY6hN8Sjc+reqaKF++j0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:5f:55:69:55:55:28:2a:db:ec:b8:cb:92:4a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
        Validity
            Not Before: Apr 13 11:01:04 2025 GMT
            Not After : Apr 14 11:01:04 2025 GMT
        Subject: CN=077f4508a0b577d3cc0a1bd3b20411c34753daff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:1c:ed:c0:3b:ae:38:3c:bf:0f:32:a8:55:
                    ff:8c:59:e5:4b:52:77:2e:08:5e:22:45:28:91:8b:
                    1f:e3:ca:f3:65:3d:d3:50:bc:66:27:12:f5:ae:4d:
                    52:68:ea:b8:d4:3a:4f:fa:db:16:92:78:74:12:18:
                    d0:d0:3f:d4:7d:a8:5c:4f:dc:a7:2e:f8:22:b2:35:
                    9f:d1:c3:ab:5a:5b:ae:2f:28:41:0f:aa:17:17:99:
                    42:51:80:8e:41:d4:aa:d7:51:00:c7:de:a8:47:3a:
                    ca:9b:8d:35:85:d6:c8:18:1c:5b:ea:41:35:24:b8:
                    92:89:6f:31:2e:1f:81:a7:81:95:a3:12:b6:dc:da:
                    92:3f:21:55:f1:75:ae:df:ff:cc:8b:51:6f:d7:b2:
                    ca:31:28:8d:82:a4:3b:be:a6:46:3f:72:59:3d:65:
                    01:4a:d9:eb:12:aa:37:3d:4d:70:55:45:5a:f0:12:
                    e4:45:93:37:2c:53:07:70:43:a8:ef:4d:d6:10:7e:
                    5b:d0:86:d1:b1:e7:3c:d3:f8:eb:f5:65:e5:a0:61:
                    82:b6:63:fc:1c:f4:b0:da:fc:ff:64:87:d9:b7:44:
                    0d:6f:e8:31:1b:ad:6f:aa:15:d6:bc:c7:8f:c4:18:
                    25:d0:73:72:64:90:e3:af:40:57:22:d3:2b:75:7f:
                    64:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7F:45:08:A0:B5:77:D3:CC:0A:1B:D3:B2:04:11:C3:47:53:DA:FF
            X509v3 Authority Key Identifier:
                keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:d9:61:d1:eb:3a:71:2b:cf:95:76:33:8a:a9:04:ef:9f:d3:
         92:ce:6f:d3:12:84:15:10:79:df:67:6a:c8:ad:e3:77:10:0a:
         6d:1f:62:8c:92:a6:cd:fc:22:cf:1b:62:37:50:d5:29:28:df:
         2b:c4:96:68:b4:6c:d9:1d:85:94:6c:5c:59:72:40:28:3a:6d:
         c1:bc:e6:b6:32:45:d2:3c:6e:ab:4d:05:e7:eb:51:bd:3f:d2:
         08:f4:ff:37:13:4d:9a:2e:25:a3:05:b6:9a:95:f6:39:8a:5e:
         09:7b:b7:99:4e:e3:0d:5e:b1:42:9b:ef:3f:63:be:b4:67:31:
         cf:7e:91:d6:d9:d0:d1:1a:67:e4:73:02:05:3f:91:3e:91:68:
         a3:8b:0e:41:ec:2f:c2:5f:38:1e:23:94:0a:d3:8c:38:53:a1:
         e7:19:dd:23:c6:37:57:63:d1:02:64:01:be:1c:09:c1:79:03:
         71:21:a1:15:d5:f8:01:0e:bc:0c:7f:e8:23:0f:f6:52:c0:3c:
         28:94:a9:ac:2d:af:68:ad:9f:5a:fb:12:7e:ec:24:be:34:c6:
         f3:32:8c:80:13:41:48:2a:c6:3e:bd:45:80:ab:ad:d2:71:09:
         58:ab:8b:fc:3b:60:58:f5:57:67:3d:08:cd:af:a2:93:94:17:
         d0:36:75:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----