Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
File:                     HiNCQpV7sb4SloFyH5ws0I3we6o.mft (raw, json)
Hash identifier:          22Pnss8IHIPPrwPp26vSI+EpBrazddRLCjb/X01dvuY=
Subject key identifier:   41:71:D2:32:20:0F:79:63:DF:14:DD:2D:C0:F5:CD:5B:DA:68:12:FE
Authority key identifier: 1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
Certificate issuer:       /CN=1e234242957bb1be129681721f9c2cd08df07baa
Certificate serial:       01962F3D6C4B6DC8E7E768C1B0B0FAA90F5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: HiNCQpV7sb4SloFyH5ws0I3we6o.crl (hash: bOXrR6ukaeOFqMkx5dVlMbNByBYv25w98I5aq1MbW4Y=)
                          2: LrQvGSWjZ1_u3gVVuPLp2WxRk1k.roa (hash: ZcyQD8WEBHUW25dO4BlMcUXBz86xnVBSf9fbKGrRMB8=)
                          3: _reFuWE8F3Q1MCsGcykhYwVBWKM.roa (hash: O++vwJ85mD5AXwmEuMpGVw7mWSimyoQ3mta9DBkVsW4=)
                          4: dbWbArxAw26iNluKXUrcW4Vg-TI.roa (hash: btYEfLq8/9yx4IhA4v1IAzOkYKFAL79qzcrLbl8TnGs=)
                          5: t3uSAegbFXAgvcMRKArmSOOjc88.roa (hash: 4JXslF6DFYbC7wM1C83bbrfYplmPiSougkSoNLfd1xU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6c:4b:6d:c8:e7:e7:68:c1:b0:b0:fa:a9:0f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e234242957bb1be129681721f9c2cd08df07baa
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=4171d232200f7963df14dd2dc0f5cd5bda6812fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ba:38:50:a6:a2:af:f3:93:fd:33:8b:b8:30:
                    33:62:2a:d8:ca:ff:04:50:b0:d6:91:fd:ce:4b:2a:
                    f1:41:54:06:4c:40:42:d3:be:55:a1:92:05:ac:05:
                    07:99:1d:42:36:ea:aa:9e:be:58:a5:ca:a7:77:0f:
                    54:7f:2f:12:b7:6e:a0:f3:20:bf:29:1e:46:df:4b:
                    f7:25:37:7f:48:de:f2:59:a2:86:9a:25:6f:04:a5:
                    7a:6e:32:6e:c4:0d:89:1e:93:85:13:73:3a:14:34:
                    32:b2:8d:65:45:76:1d:76:2d:3d:b2:f9:c8:06:bd:
                    00:78:92:51:59:a2:e7:3c:7d:72:7a:9e:84:71:c7:
                    b3:4b:60:27:39:61:c2:dd:52:42:11:0f:d2:7d:b5:
                    1e:d1:ec:05:09:00:a0:30:cf:04:6e:c4:fe:7e:75:
                    d8:e3:99:0e:38:dd:e0:34:db:b8:67:31:2e:ef:9d:
                    45:d6:ea:85:89:b1:e9:fe:62:a1:9c:f1:e8:45:4f:
                    fa:c5:a4:fd:97:53:7d:eb:f3:38:dc:b9:4e:c2:32:
                    d5:6d:09:80:b1:4e:6f:e6:07:8d:2e:7e:39:2a:a8:
                    f1:ec:22:c5:5d:8a:bf:b6:bc:31:72:a6:6c:cb:31:
                    be:cc:e2:3e:6b:50:13:50:4d:0e:79:ff:5a:47:ad:
                    6e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:71:D2:32:20:0F:79:63:DF:14:DD:2D:C0:F5:CD:5B:DA:68:12:FE
            X509v3 Authority Key Identifier:
                keyid:1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d8:a6:c0:9d:e9:5f:81:04:f8:9c:1a:71:18:24:a1:65:ab:
         67:e0:23:79:92:9b:1a:20:7c:79:8e:0f:99:2a:2c:44:0f:2a:
         cc:fc:64:97:0c:61:ce:6b:8e:97:8b:06:c0:2b:9e:b7:a9:be:
         97:33:ae:b0:0f:d7:7b:b1:18:42:df:fb:e3:21:9d:96:53:3a:
         13:63:dd:e1:21:1a:15:2a:1f:1d:43:d6:f9:0d:4f:90:ff:ad:
         48:bc:10:51:34:de:a8:83:90:d7:54:c3:17:ce:8e:51:f1:63:
         72:47:2c:59:2d:7c:75:8f:4e:81:13:11:0a:52:e3:aa:30:2d:
         ce:1c:d9:d2:81:ad:e3:e5:98:64:a0:4c:de:af:3f:51:83:32:
         b6:52:e3:ee:ba:b3:b3:c2:35:9a:dd:b0:27:c6:46:d9:96:5e:
         47:b2:90:5b:38:6d:93:31:2f:33:73:80:67:d0:2d:9e:32:eb:
         97:f7:f2:89:5a:94:78:f9:9c:a4:a8:5d:81:e7:40:5a:50:3d:
         ae:df:ea:ba:4f:2d:9f:77:5a:3b:7c:2e:04:d8:09:6c:47:e6:
         a7:cc:30:f5:ef:c7:ad:c4:73:e3:7c:b0:b2:18:3d:c4:99:a4:
         47:f2:e9:a8:af:f5:4f:49:f0:4f:f4:4c:94:6d:08:72:7e:32:
         d4:1a:b7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----