Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
File:                     humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json)
Hash identifier:          SRN1yFQbHM4InKZhRnAvTM4IIQutEOaZv/itZLFXQug=
Subject key identifier:   85:88:C2:8F:70:33:7D:A1:3B:5F:DC:F4:21:2C:D9:0F:A8:BB:F5:D7
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Certificate issuer:       /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial:       01962F06672FD2A8A389CDEF801629AAFEA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
Manifest number:          0362
Signing time:             Sun 13 Apr 2025 12:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:10 +0000
Files and hashes:         1: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: vODZmmhEnZTqT+MbcaI2pyppHHZV0i1JloFKfU6FuLU=)
                          2: kufXPEBBY4F3GtWTn9BkPD8wSxE.roa (hash: UarHb2gOFhZ20RNJlK0SIL7Fko6NvrD899Ffsd5s1AU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:67:2f:d2:a8:a3:89:cd:ef:80:16:29:aa:fe:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
        Validity
            Not Before: Apr 13 12:01:10 2025 GMT
            Not After : Apr 14 12:01:10 2025 GMT
        Subject: CN=8588c28f70337da13b5fdcf4212cd90fa8bbf5d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7a:22:90:d5:ea:56:51:06:23:5d:b4:35:3e:
                    b2:c8:d3:3e:6b:83:3d:70:98:75:40:3a:e4:11:f8:
                    38:03:b2:a5:5c:4b:94:f7:e4:13:bc:2f:2e:19:4f:
                    22:8a:7b:16:2a:d5:30:1b:69:0a:68:f2:e8:30:98:
                    93:d6:33:b1:5c:94:81:8c:22:61:55:62:e9:8e:3f:
                    62:f2:06:41:9b:5b:ae:6c:58:42:65:ea:ae:ec:23:
                    f9:f0:21:c1:d6:d7:87:a9:d6:c6:30:05:82:29:12:
                    f4:c4:8b:62:e8:fa:34:39:c7:eb:59:9a:67:73:c1:
                    3e:83:2e:e6:5a:88:65:c7:69:59:69:6b:a8:95:74:
                    cb:37:65:24:ae:49:72:d8:18:f3:de:ef:95:c8:1f:
                    f1:92:1b:a8:96:da:02:0d:c0:46:b8:24:b1:02:04:
                    f4:27:8a:b3:b0:a1:e6:2d:01:b8:2d:64:ad:7c:d5:
                    80:81:e8:b3:46:9b:35:58:1b:9a:ae:a8:cd:a3:e8:
                    9d:7b:86:0c:01:b9:c4:e3:1e:13:bb:2c:4f:7d:59:
                    84:35:ec:dc:4a:f8:a6:60:f7:be:6a:08:a5:ac:03:
                    a4:52:59:c2:e0:ce:35:6c:1c:37:92:e5:6d:b7:2b:
                    00:b5:0b:d0:58:65:00:28:a3:68:c8:a5:5f:a8:10:
                    f4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:88:C2:8F:70:33:7D:A1:3B:5F:DC:F4:21:2C:D9:0F:A8:BB:F5:D7
            X509v3 Authority Key Identifier:
                keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:26:3e:a6:3a:46:a0:48:0b:4c:5b:75:f9:2a:16:c3:55:ba:
         de:1e:8f:71:e7:87:89:04:a6:3a:14:a1:a5:f0:2e:1d:26:0f:
         4f:b3:21:54:35:1e:f1:c0:33:25:be:90:09:59:32:03:e4:4a:
         fe:03:cc:ca:f8:a1:fd:8d:49:9e:36:f1:b4:a3:0f:bd:84:2c:
         54:c7:48:d3:16:e6:77:9c:76:e8:f3:36:98:dc:33:9c:8e:47:
         d0:b9:c9:7e:41:c0:1c:e0:0d:8e:9e:f8:e4:4b:f0:7b:3d:83:
         d4:fa:de:f9:21:84:75:cf:60:f2:2f:10:ea:ad:96:32:c0:8c:
         54:58:1e:f8:f8:ab:aa:51:68:bc:5a:bf:29:92:99:3a:93:03:
         ca:08:c4:71:17:4a:fb:95:f7:71:ee:6f:ea:0d:c0:21:9d:a2:
         cb:3a:0f:dd:cf:93:b8:d3:e4:06:0c:34:40:82:b2:e9:b0:d0:
         3d:d8:5a:ed:38:ac:a6:2e:86:d7:db:22:47:dc:c3:b3:2f:65:
         d2:69:08:85:f1:02:d8:6b:4d:42:7d:e1:24:ee:9b:dc:4a:05:
         9e:e5:1e:df:17:9d:66:ec:65:06:66:c3:6c:52:6c:c0:49:23:
         d4:41:fd:5e:f7:bf:66:69:3b:53:02:d6:de:b6:01:66:8c:21:
         57:14:2e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----