Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
File:                     HlqvPQaD3IoNWMZDgm4WbTwozKk.mft (raw, json)
Hash identifier:          hHto/T21m1ndXn9BOApRI/5A/5QLJBpmi9/i0nM/xD8=
Subject key identifier:   0B:E4:7F:9D:B6:E5:B4:B2:F6:16:3E:A6:E4:1D:EF:4A:D6:72:78:77
Authority key identifier: 1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
Certificate issuer:       /CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Certificate serial:       01962F3D93BB0BA3CFF4F7EDB0E837F56C35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 13:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:26 +0000
Files and hashes:         1: HlqvPQaD3IoNWMZDgm4WbTwozKk.crl (hash: yy6wicOgrp5ZpECWSuFNasWZbO6WZD8NlyBAqtXa90s=)
                          2: MCvxtXhDv-4sOFSG3-70es9IbCc.roa (hash: zG6t5oGWGri6Roj7Zds9875D3+Pp2Gk1iyyfA9Fh0BU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:93:bb:0b:a3:cf:f4:f7:ed:b0:e8:37:f5:6c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
        Validity
            Not Before: Apr 13 13:01:26 2025 GMT
            Not After : Apr 14 13:01:26 2025 GMT
        Subject: CN=0be47f9db6e5b4b2f6163ea6e41def4ad6727877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b2:14:fb:c9:b7:15:b0:ed:13:f7:e1:80:15:
                    56:3a:4a:50:af:ae:13:35:df:ce:15:c9:b5:14:a4:
                    b9:91:4a:0f:5d:ac:93:03:09:f5:1e:8a:29:d2:59:
                    c6:20:37:29:e6:91:24:8e:13:cd:9f:2f:65:f1:9c:
                    62:05:db:f0:6a:54:a9:b8:f8:2c:10:38:b1:82:d2:
                    65:6b:90:0e:b5:79:05:d8:5b:18:3a:f7:38:a4:e0:
                    13:5e:71:00:23:35:a6:47:27:52:94:dc:c8:06:3c:
                    0a:eb:c8:04:97:00:21:97:16:56:5d:3c:65:8a:99:
                    3e:94:dc:a5:87:86:60:b0:10:16:6d:b5:0b:92:f4:
                    e9:43:93:8f:09:11:8d:92:71:ed:d5:22:5a:a4:e5:
                    7b:09:a9:4b:95:6f:81:f1:4d:59:77:da:fe:fa:17:
                    69:90:43:69:46:d0:e2:d8:56:a3:09:e7:39:8e:59:
                    f8:fd:74:85:ab:d1:b8:a4:60:f2:82:7f:88:b1:9d:
                    2c:d9:09:4d:41:0e:8e:06:66:86:36:33:e2:28:5c:
                    18:d4:3c:33:db:57:64:90:1c:2b:53:41:27:52:00:
                    83:55:e3:8b:e1:30:6c:15:6a:9a:a8:0b:d0:12:6a:
                    0b:26:3b:cb:d0:28:bb:da:79:6c:77:13:4a:da:ba:
                    40:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E4:7F:9D:B6:E5:B4:B2:F6:16:3E:A6:E4:1D:EF:4A:D6:72:78:77
            X509v3 Authority Key Identifier:
                keyid:1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:39:21:9c:65:34:cc:a7:00:57:66:c7:68:f3:5a:3c:56:20:
         58:11:8b:85:9b:5f:75:30:bd:31:d8:0d:97:a6:90:2c:19:4c:
         a6:9c:5c:fd:2a:04:b1:72:40:5b:b4:cc:b7:a0:d6:94:05:10:
         ab:9b:56:aa:b0:33:ea:84:24:cd:64:68:8e:06:33:ad:1c:3f:
         8b:fe:dd:d6:3c:da:c1:01:89:76:5c:8e:7f:79:5b:fe:3c:36:
         a3:36:d8:85:d2:18:67:56:80:46:6d:8f:c6:18:d4:b3:7c:f4:
         44:34:7b:c9:94:f6:e2:b4:6c:0f:bd:7b:65:dc:74:ff:0b:87:
         59:16:f8:79:9a:f4:7c:1d:62:07:8e:2d:b2:b6:97:0f:e2:1b:
         c0:32:6f:e8:ed:64:b0:4c:79:16:45:07:70:4e:ec:a6:ff:20:
         ca:b7:fd:a8:92:40:42:95:2d:f9:0c:a4:9c:46:d2:22:5e:1d:
         5a:26:cc:b4:9b:9c:7b:7c:f4:81:64:28:8a:5c:a3:8f:a0:6c:
         5b:1c:05:b2:96:dd:cc:0f:ef:d0:24:94:6f:d8:c7:25:0b:4b:
         e8:eb:f5:fd:fa:a9:c3:8f:b2:b3:15:a2:6c:3a:18:23:08:d0:
         5a:ca:9b:ab:2d:4c:ba:e8:ef:3b:1e:67:01:b0:88:45:66:ac:
         99:3c:cb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----