Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
File:                     HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft (raw, json)
Hash identifier:          NqTuAkidDBO94evd0o5bg8nlpXD74n6c/MTe4rpmwgA=
Subject key identifier:   15:C4:24:6C:EC:99:F6:7E:1F:40:26:58:60:21:A9:2D:0A:57:E8:40
Authority key identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
Certificate issuer:       /CN=1c766b058c096753a34ad625d53275cd2dba5b33
Certificate serial:       01962E6185CC19FE6348ADC217C274BEFF90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
Manifest number:          122E
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: 3xjGI42bQNLx70HTJ7kXgEwsSsw.roa (hash: GpJV9iaqS5V9Mqcyg97TbadTb1FKNWn4xyXU6QZ9kGs=)
                          2: 8NRfsUTuURGgy6LvURHgXAUYZ-g.roa (hash: 1qJKisnCOTNkYdR9Qi95p8WJ2QZapPEQJWApMHtlHz0=)
                          3: HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl (hash: RpqcF4PjUZCGbacxN7wWkLZpBJs0KPwW2WBDU0JOM+A=)
                          4: NP32WyfLeYLas1Z4fKTZriuHjvY.roa (hash: 4h/Yftv2raMAxvFI+CPfL3bUOHVTko1YvlzTzC+9xKU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:85:cc:19:fe:63:48:ad:c2:17:c2:74:be:ff:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c766b058c096753a34ad625d53275cd2dba5b33
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=15c4246cec99f67e1f4026586021a92d0a57e840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ff:65:24:73:79:0b:c0:25:c7:f4:19:9b:45:
                    cd:19:40:d6:0f:85:44:4f:ce:10:ba:b5:47:f5:81:
                    f9:b0:cd:35:17:d1:71:a8:e7:3e:7d:dd:4e:96:37:
                    79:18:0f:0e:ea:79:a3:77:84:b0:70:e8:fa:74:c5:
                    f5:7f:a5:0b:ac:f7:9b:1c:17:fc:06:fd:f7:eb:f8:
                    d8:4b:92:c4:53:00:0e:27:59:5f:aa:2e:dc:a4:2f:
                    14:31:71:e8:23:48:90:e4:d0:8f:58:4c:be:1f:f8:
                    60:44:94:b8:30:9c:fd:f9:c6:cc:c7:2f:c8:23:40:
                    86:38:82:12:b9:9f:ba:69:7a:8d:c0:be:83:b9:0c:
                    36:65:22:91:9a:34:86:79:f7:3e:2c:bd:c4:56:c5:
                    04:f1:93:d7:9e:d5:d3:24:cb:64:61:3c:6e:71:2d:
                    da:d9:70:af:15:bb:91:33:92:a7:f3:74:3e:ab:24:
                    24:dd:b3:f4:19:f9:4a:7c:bd:27:96:12:65:27:33:
                    56:cb:b1:85:51:62:8e:f6:17:bb:ba:bd:51:a6:ab:
                    46:d8:05:46:2d:c2:ff:fe:18:20:a0:5a:06:c6:36:
                    05:f7:f5:34:f7:ca:38:7f:38:b3:fc:0a:db:04:d8:
                    8b:c8:7f:35:fd:00:af:8d:ec:c8:b5:f6:21:44:28:
                    d4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C4:24:6C:EC:99:F6:7E:1F:40:26:58:60:21:A9:2D:0A:57:E8:40
            X509v3 Authority Key Identifier:
                keyid:1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:f1:f5:9e:e9:53:52:ff:bc:83:59:bd:3d:86:06:e1:22:65:
         a4:ca:df:94:d9:a7:bc:9d:a4:31:77:06:22:f4:f1:a1:ee:75:
         a0:90:ee:21:3c:52:d8:7e:66:09:b0:d2:f2:b5:1d:97:65:de:
         3b:da:db:90:55:1f:ad:7a:4d:f0:5b:7a:6e:ba:a1:3b:be:26:
         16:4a:72:c6:76:b5:a0:9e:54:ae:f2:50:d0:cf:be:1f:ce:14:
         e4:16:cf:b4:2c:5f:83:70:e7:f2:54:6d:58:d0:cd:59:b2:9c:
         82:5f:93:86:c9:e2:71:9a:7b:63:81:63:53:fd:7a:b9:ca:18:
         14:90:33:9d:81:c8:8d:7c:98:90:51:ca:58:b3:ce:da:13:5b:
         a6:0a:16:9d:da:85:08:df:5e:9f:c1:24:f5:ea:aa:55:2c:f8:
         ec:5a:2b:23:7c:f3:94:18:e3:1c:87:f9:e2:8d:fa:a3:ea:10:
         bd:53:f8:43:c7:d2:0d:48:07:5c:d6:ad:d4:83:1d:8b:0f:79:
         be:92:10:41:b6:89:d3:3f:fb:87:2a:68:b4:56:5c:33:43:88:
         d3:a5:f0:48:6f:e4:99:e7:5a:61:7a:3d:13:5b:39:27:6f:7c:
         d7:8b:27:f6:a5:a8:ef:cb:ab:83:39:9f:0d:09:11:14:25:ed:
         52:19:ac:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----