Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
File:                     HSzcucdvXgzgw4XX4O8VVy0VpUw.mft (raw, json)
Hash identifier:          85lNulNIjv7K/dhThr6ZajLhtJcXA1NpBbVI/6qMy70=
Subject key identifier:   1F:2C:BE:F5:71:DA:AB:9E:1A:04:9D:A4:60:E5:47:A2:B8:DC:D5:D5
Authority key identifier: 1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
Certificate issuer:       /CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Certificate serial:       01962E61CAC5F0F237A4182566E272D380EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 09:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:22 +0000
Files and hashes:         1: 3E7aBqsHg6THlsFLCGCu1ykhumg.roa (hash: vdRC30YdnIGNPLtMGa2MkjovoqgS/LCgWDKRJk5Yhko=)
                          2: HSzcucdvXgzgw4XX4O8VVy0VpUw.crl (hash: d0MttBWl+VRUDYFsfTLqdBKkoElzYXvTrLlL9BqBOso=)
                          3: _gYUlUCfN6l5n67P7rXluh_fPlA.roa (hash: U4UZUMI/kaS2KD/9/bzXxhkFvL6NwSNWIwZGPCQg08o=)
                          4: drOxTuSdQFczpcVwXyFaIyEbsdY.roa (hash: flldTjSWU2bObz1CZncUhXjWnhrg2F/Btx8as3R6O7E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ca:c5:f0:f2:37:a4:18:25:66:e2:72:d3:80:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
        Validity
            Not Before: Apr 13 09:01:22 2025 GMT
            Not After : Apr 14 09:01:22 2025 GMT
        Subject: CN=1f2cbef571daab9e1a049da460e547a2b8dcd5d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:80:6f:8f:49:66:ee:9d:78:f3:23:eb:4a:71:
                    6e:31:9a:e9:56:0f:6b:f3:64:f7:29:1d:f8:71:4f:
                    f8:04:c1:ca:60:12:57:6f:01:4b:10:22:27:9b:cd:
                    14:a0:22:33:14:e0:05:60:a9:50:72:e3:30:f1:53:
                    b4:9a:95:52:a7:80:45:c1:f4:e0:a4:a4:80:34:42:
                    52:df:f1:2b:b0:6a:e5:01:51:2a:43:a0:1e:28:59:
                    9a:ee:8b:01:ac:e4:f7:ed:a6:a7:07:54:d0:63:17:
                    90:f8:a2:76:9b:50:d9:67:ac:d2:40:9b:e9:e4:95:
                    b6:d4:78:6f:bb:29:9f:b0:cf:b3:ec:33:13:18:48:
                    18:76:c5:6b:3d:a9:6b:20:db:48:cf:eb:48:11:85:
                    75:58:1e:8c:78:a2:4e:a8:d2:5d:43:d8:5a:65:53:
                    02:04:5c:b6:e4:09:44:24:c9:a3:27:d3:b2:d8:3f:
                    43:2f:0d:b3:eb:28:58:5d:73:75:80:99:62:68:4a:
                    c2:c6:04:04:49:72:e2:90:a7:0a:34:ad:f8:f0:3c:
                    e5:bb:96:82:28:b5:64:f2:7b:cb:d0:41:35:1e:5e:
                    db:d8:44:7e:c8:a9:02:d1:e6:6f:d3:54:05:d5:a1:
                    dc:ae:04:01:be:43:5d:b4:00:64:18:22:d4:42:f7:
                    f2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2C:BE:F5:71:DA:AB:9E:1A:04:9D:A4:60:E5:47:A2:B8:DC:D5:D5
            X509v3 Authority Key Identifier:
                keyid:1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:54:a6:07:0a:ff:6e:e9:56:b2:18:e6:e7:06:0f:09:c2:d0:
         26:34:26:78:11:55:dc:00:4b:c8:a8:45:74:9e:d1:96:c5:1e:
         8d:84:37:6b:8d:b0:04:af:59:e0:5c:2b:f8:d2:53:49:e8:86:
         1b:c8:f5:ea:0b:95:45:a6:4d:86:46:39:76:51:86:21:c3:b3:
         da:83:0f:24:b1:c2:7d:a5:a1:da:36:e6:26:bc:ff:c4:87:3f:
         af:ea:02:5f:0c:cb:df:26:f5:a2:d5:cc:fc:11:db:0a:59:e7:
         f3:73:d0:a8:ff:f2:fe:e2:18:0c:41:16:45:f8:97:15:70:46:
         f8:ca:dd:0f:7a:4c:a2:5c:4f:63:62:80:9d:56:3d:87:27:22:
         fd:96:5c:06:89:da:59:65:c0:5c:db:4f:40:14:9f:8c:d3:93:
         39:47:ad:83:df:37:41:a0:76:e6:f1:f6:90:ce:3f:f2:a6:73:
         9f:2d:61:75:40:19:58:41:6c:ee:30:9e:68:e8:7d:75:87:78:
         40:22:ca:a7:cf:1d:9d:be:e4:94:de:dd:16:18:14:d0:c2:ee:
         23:96:62:9f:71:e3:e4:3c:f5:37:e0:f4:f4:a0:00:9e:2b:87:
         37:fd:aa:a5:6b:e7:d2:b7:8c:4c:61:91:de:43:b6:cd:52:3b:
         5d:26:e8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----