Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
File:                     hbhx1pOVYQRld5MjuRs05pv89bU.mft (raw, json)
Hash identifier:          Sso/00NuWk/Bm4mDJMtBAbko0FSlq5arIMfqR/+nnAo=
Subject key identifier:   E4:37:11:A3:EC:BE:AF:EF:B4:76:EC:0D:0C:13:CC:87:74:00:82:20
Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
Certificate issuer:       /CN=85b871d69395610465779323b91b34e69bfcf5b5
Certificate serial:       01962ECF74B0F47C95733D27BBDED6DD5BE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
Manifest number:          03D8
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: hbhx1pOVYQRld5MjuRs05pv89bU.crl (hash: X9eNZ+T1IStVzWIc2KX8WPsfj84AFpgYAwbdx13Q89E=)
                          2: kbsmCVo1MuAxbWK2Mk_FNqJ4o-Q.roa (hash: FxGgyIXbAaHbajTUZb5rQl/upi6b8yc9JYqmBZ7HbLE=)
                          3: mCquFh2XBWkg-YOpmNb3-W_LQ_o.roa (hash: 6gQDaDFUWcD/jv1rl9eJBOecJII0xNwqHgOM59i+hCw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:74:b0:f4:7c:95:73:3d:27:bb:de:d6:dd:5b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=e43711a3ecbeafefb476ec0d0c13cc8774008220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bb:c0:66:e1:6d:21:94:4a:8b:df:86:81:42:
                    00:6a:94:7e:af:f5:e4:9e:bb:2f:3f:f8:35:63:a2:
                    9f:d2:d2:93:0b:4a:a1:5a:26:11:af:83:11:7f:7d:
                    d6:1b:9e:28:84:8a:34:33:dc:95:28:d8:6e:09:91:
                    7f:6c:39:ff:57:43:92:a1:27:65:e8:43:63:e4:26:
                    10:5d:1a:83:7e:0b:2f:af:49:fc:30:9b:13:5a:8b:
                    16:d1:64:1b:40:57:b3:b4:ef:c2:d2:53:dc:4e:b8:
                    dc:81:93:a9:45:49:cb:bd:6a:b0:ee:db:8f:98:48:
                    13:6b:28:34:7d:c1:71:fe:89:a1:25:a5:54:6e:01:
                    be:f0:07:b0:9a:8e:82:e7:a7:10:79:fb:aa:72:c9:
                    bc:6e:4c:b4:bd:58:16:e2:79:e1:56:4b:6d:1c:0a:
                    37:d3:a9:53:17:14:b8:e8:da:29:f6:7e:37:f4:86:
                    56:86:52:4a:e4:05:f5:c6:11:49:b2:3b:8d:65:a0:
                    4e:2e:69:cd:cc:78:aa:e3:7f:1c:86:16:5d:96:4a:
                    5b:1e:77:05:84:7b:be:d8:4b:ee:3a:2a:0b:7a:6a:
                    2c:00:58:f3:31:54:8e:36:c7:32:58:8b:36:fd:b3:
                    65:e1:cc:60:1a:5a:01:cd:66:82:92:19:92:d3:81:
                    d2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:37:11:A3:EC:BE:AF:EF:B4:76:EC:0D:0C:13:CC:87:74:00:82:20
            X509v3 Authority Key Identifier:
                keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:31:30:2b:d1:68:65:71:5a:46:e6:9b:1f:e3:b3:db:04:76:
         e2:1f:79:03:b1:6c:d8:47:a2:b1:75:7a:35:03:19:c9:3e:6b:
         ce:ad:dc:b8:91:ba:78:54:f2:87:b4:86:46:d1:7a:2c:ad:f1:
         4d:05:a8:02:e9:bb:fb:e7:b9:60:4b:69:fd:77:05:19:b2:e9:
         22:8d:bf:50:35:ad:ff:6b:d9:6a:06:7a:d3:69:38:bb:a8:66:
         bf:ce:c8:7a:be:8b:84:2a:8a:c9:8c:7b:b0:71:0c:06:40:87:
         c3:f6:ce:ad:c2:82:9e:44:dd:81:58:25:10:7a:58:a3:c4:80:
         8a:7f:99:7f:0e:b1:12:a1:a8:04:65:da:d9:b8:a9:b7:9e:aa:
         c8:37:3e:22:10:ca:f3:26:bc:2b:7f:65:d9:99:0a:4a:88:a3:
         f4:9c:c0:54:b6:25:0d:6b:5a:97:24:49:93:f7:e8:1b:ac:bd:
         90:f2:08:6b:09:1c:64:95:92:35:77:3c:02:f3:97:ff:a5:1d:
         48:75:0b:62:e4:4a:56:0e:8c:42:00:0c:d7:d9:33:6b:28:ec:
         4c:b5:9c:3f:5e:90:a9:cb:f1:9d:23:34:45:0f:f2:02:5e:6f:
         61:85:8d:ca:4a:b7:c1:10:7e:b9:8d:ef:45:29:6f:ea:76:c4:
         3b:8c:c9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----