Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
File:                     HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft (raw, json)
Hash identifier:          KOZHqtN3rB2ToeOqvAa+52qK4uMUgJTbsI8IApQXOW0=
Subject key identifier:   DA:3C:3F:F2:03:0F:0A:E6:0C:83:9B:3D:54:D1:2A:5A:F6:82:00:79
Authority key identifier: 1C:20:53:AA:D6:DC:5D:61:15:7E:67:3F:D1:A7:8E:EA:65:69:E5:39
Certificate issuer:       /CN=1c2053aad6dc5d61157e673fd1a78eea6569e539
Certificate serial:       01962E99AE53A9D8A1340A0FAA032DE9508F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
Manifest number:          0821
Signing time:             Sun 13 Apr 2025 10:02:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:25 +0000
Files and hashes:         1: HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl (hash: K3z+z7lij1HCFD7nhk3MFoSu9WyTCK56hVq5Exctnqk=)
                          2: f0JNWqb0_sxkiR-fghzvzpbVYUw.roa (hash: RhuCzYejuWMbfNGSM6on7Cw2OZveLgiaD9vSRL8ll5s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ae:53:a9:d8:a1:34:0a:0f:aa:03:2d:e9:50:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c2053aad6dc5d61157e673fd1a78eea6569e539
        Validity
            Not Before: Apr 13 10:02:25 2025 GMT
            Not After : Apr 14 10:02:25 2025 GMT
        Subject: CN=da3c3ff2030f0ae60c839b3d54d12a5af6820079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ae:75:91:19:9e:a1:e5:d4:6e:ca:db:9e:c6:
                    ec:4d:75:df:9c:75:b1:c7:6b:73:39:8f:87:5d:72:
                    27:51:48:4c:20:fe:6a:80:30:be:ba:cb:45:c8:ab:
                    f4:18:e2:bd:85:f3:60:9c:11:41:b5:f6:83:73:db:
                    ce:7e:03:94:36:2c:30:34:62:45:21:39:4c:54:4f:
                    b2:6a:10:70:de:b5:79:9a:23:7f:b9:7e:f1:50:8f:
                    19:64:bc:34:c3:41:b7:53:bd:58:94:43:af:ad:5b:
                    07:56:b5:4a:09:30:2d:85:0f:fd:9d:85:ff:6d:7a:
                    dc:30:29:66:86:cc:ec:c5:b8:ae:5b:eb:92:58:fd:
                    af:d3:ac:de:bb:6a:c6:36:4a:a1:2a:3c:f2:cb:8d:
                    52:a8:31:47:0a:63:92:5a:d5:f3:58:59:eb:36:82:
                    f2:ba:a3:16:c6:59:e0:9f:72:81:28:31:97:40:a2:
                    39:a9:ae:0f:c1:7b:40:18:cf:69:be:61:ae:7a:3b:
                    b1:f7:4a:fe:6c:2c:e8:d2:96:fd:6c:81:b5:96:05:
                    6c:38:05:ce:d0:1a:28:5e:c4:e1:b8:4e:09:83:73:
                    21:15:67:51:3f:8f:13:47:05:19:90:b4:d5:7f:53:
                    75:80:7b:a8:01:69:6d:ef:5e:e8:8b:76:d4:5f:da:
                    cd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3C:3F:F2:03:0F:0A:E6:0C:83:9B:3D:54:D1:2A:5A:F6:82:00:79
            X509v3 Authority Key Identifier:
                keyid:1C:20:53:AA:D6:DC:5D:61:15:7E:67:3F:D1:A7:8E:EA:65:69:E5:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:50:17:67:41:3d:aa:39:ec:fd:40:92:27:05:a3:b3:c3:8b:
         92:d9:be:da:e4:e2:43:ef:94:8e:05:8b:42:ec:4e:aa:41:8e:
         e3:ce:ab:d1:51:fd:8e:79:36:99:08:37:d4:17:52:40:be:ac:
         ca:05:5e:6b:f1:5b:83:14:b9:71:ca:10:c2:12:ce:86:c5:aa:
         68:27:53:b6:37:48:af:d0:78:a1:53:2b:1d:51:e3:c5:c2:21:
         f3:af:16:83:cd:33:0b:a1:e0:7a:8c:3a:0e:31:e7:0a:62:b6:
         07:14:0b:26:b5:66:ea:bc:29:5a:20:41:23:8e:76:04:70:fe:
         53:a3:d0:c4:8a:54:69:d7:c3:ce:ff:30:2c:70:c4:37:05:31:
         7d:6a:c5:4e:52:57:64:b4:fd:2d:59:ba:43:eb:cb:b8:54:21:
         5f:f6:16:92:4b:69:1d:73:53:11:e4:aa:28:bd:25:97:e6:f6:
         9f:ca:06:5c:e5:28:a2:79:fd:e6:b1:70:14:9f:1f:4e:fc:67:
         c8:64:54:38:07:2f:13:55:ec:6f:fd:5b:92:07:dc:d6:c1:c6:
         fc:d3:56:af:2c:db:bf:15:38:8b:1c:fc:2a:97:18:0b:00:74:
         f1:d9:e9:fb:fb:5f:92:b2:42:f6:a7:45:b8:20:ed:19:83:1e:
         f7:ca:92:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----