Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
File:                     H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft (raw, json)
Hash identifier:          dxKSIUR9BhjOhU8Q2vkCDOlR+6STskkr1Xzp/60LsLQ=
Subject key identifier:   C5:FB:3C:6A:C5:E6:1F:85:B5:EF:FA:26:88:04:CA:65:C9:6D:EF:CE
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Certificate issuer:       /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial:       01962F066950756EF784C891B9D0B8F64108
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
Manifest number:          1501
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: Co2reX9WjBlmenpbYdQoA_FU6Yg.roa (hash: q2QsExP+FdyReITqdolcGkEpneACU1Mny9QFEjumzVA=)
                          2: Du67LuSR--FTZRs33JDJ1Yh_Yqc.roa (hash: Uq3e+EYwHhZpPWXp5ry3+fcpGqjbo+HY9H6K+cMEsOA=)
                          3: H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl (hash: /UftuSMYAVmvduaJR+54ztwHAa2/CC/8w8VoXjtQ7vg=)
                          4: HkAi_vvBeNnd_ATaCk8zgPjDPzM.roa (hash: sppUPT/FxPKmI4+Ql7+8bIFKrA/CImxSMwiqkFBwpZQ=)
                          5: KKoRgXzLVxX8M0ge-PzEa-7tJn8.roa (hash: ZB5HW8dKxDtda/UB5dE3fN6v3EtscnOQiCRsaguyfYs=)
                          6: vPm_UYg8wre_NolD1hu0Cx9JGzE.roa (hash: Rws+EnLA4ahX/aasRkr6vitQH/K/D1I71mx2gpcNmkI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:69:50:75:6e:f7:84:c8:91:b9:d0:b8:f6:41:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=c5fb3c6ac5e61f85b5effa268804ca65c96defce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d1:2c:e8:ae:fd:ec:d9:4f:c9:42:eb:f2:f7:
                    ad:70:7c:94:96:29:df:c7:ff:fc:f5:ec:b5:e2:c9:
                    3d:ce:ec:c8:bf:e1:9f:6a:4a:43:a2:5c:44:87:c7:
                    ed:1b:8b:5e:16:10:d1:e0:54:20:89:fe:d0:de:27:
                    a0:aa:d6:75:ff:9f:e0:7e:bf:4c:73:2f:67:3e:fd:
                    fb:00:8b:f3:4d:52:e5:05:0b:25:69:36:89:f4:63:
                    f5:69:4a:03:8c:02:76:f4:da:97:a5:aa:9a:58:8b:
                    78:eb:08:fc:f6:79:71:5a:43:73:c6:bf:de:6b:a6:
                    ee:cd:85:26:87:9b:a6:fa:a8:3b:9f:ad:c3:e3:6e:
                    51:13:70:b0:86:19:99:af:92:06:6a:92:2f:f6:25:
                    8c:06:03:4b:e2:95:bd:95:2b:6c:d8:98:84:f2:26:
                    f8:f0:d4:49:e4:bc:d1:fb:fb:1d:a0:78:ae:3f:fc:
                    45:ac:b9:41:5a:15:d3:10:66:ce:64:28:8a:70:3d:
                    5a:f9:cb:e1:e2:2f:f9:4e:82:f9:86:5d:c0:e3:9a:
                    46:6c:31:8b:06:13:3e:db:d5:91:0d:b1:9b:bb:64:
                    e9:e0:f9:2d:b7:a4:15:26:75:a7:d7:81:76:7b:90:
                    db:a3:e3:fc:b8:ab:5d:c9:b5:40:80:1c:ef:50:5e:
                    7b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FB:3C:6A:C5:E6:1F:85:B5:EF:FA:26:88:04:CA:65:C9:6D:EF:CE
            X509v3 Authority Key Identifier:
                keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:66:b5:24:09:cb:d5:1b:36:96:dc:95:5e:60:72:c3:e3:5e:
         dc:71:72:e7:7d:5e:61:99:ad:83:33:92:ba:c1:05:6d:b2:5c:
         fd:16:3e:3f:6d:e5:1a:52:ea:fd:7f:9a:af:41:4f:46:ec:53:
         37:b3:ec:f3:3c:18:30:ed:9f:b7:ea:72:29:74:4f:f5:de:6d:
         e1:c2:69:a3:4f:81:63:ed:4c:0d:da:49:87:cd:7c:07:25:08:
         23:ac:d0:74:dd:52:86:ec:fa:82:ed:12:bf:2a:b9:44:1f:50:
         ca:da:7e:43:0e:70:f4:58:6e:88:74:cd:95:df:4d:e7:ac:80:
         5a:ea:2a:17:a4:f6:be:82:87:18:d3:d8:10:0e:c6:58:4d:94:
         c2:09:88:c2:eb:aa:ef:c0:f2:26:e1:5d:d5:88:e2:6a:6d:be:
         fe:02:d4:2c:fe:60:fe:70:24:ee:ad:45:d5:77:a7:86:82:37:
         c0:23:54:ec:bb:b3:aa:0a:6f:f9:51:29:26:7c:d9:aa:1f:d9:
         3c:a7:98:67:23:82:84:d2:50:27:6c:55:b0:31:b2:0a:42:df:
         4b:ee:2a:43:ba:15:73:64:d0:91:48:7f:57:94:fb:64:82:91:
         38:d8:a5:b5:09:c2:9c:35:65:f9:1d:38:06:d8:84:2e:a9:98:
         ba:d8:6b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----