Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
File:                     HCQvLpRcanLuKPjIDoDUiEM-N6M.mft (raw, json)
Hash identifier:          rWG8YbkmG4AMTs4gvY9PdwvcLTtu5Kditq/cYL0JXFg=
Subject key identifier:   FA:C9:AD:A4:BF:E0:50:55:D7:3A:D2:06:80:73:7E:B8:D7:F1:6C:97
Authority key identifier: 1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
Certificate issuer:       /CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Certificate serial:       01962FAB9305C6A564558C6F207AE2342FBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
Manifest number:          082E
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: HCQvLpRcanLuKPjIDoDUiEM-N6M.crl (hash: f2iclPN/bSj+5vCmmITVEKHAlDnzAbbLTijewscem8Y=)
                          2: lyeOPA3Hi3kUGDVfoF3VE8weizo.roa (hash: SK0Hu8MdGQh3m28Nprb3+ZaMXzQS8vnNx8UerT7YIyM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:93:05:c6:a5:64:55:8c:6f:20:7a:e2:34:2f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=fac9ada4bfe05055d73ad20680737eb8d7f16c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d2:3f:72:20:ec:f8:ef:5e:27:94:12:be:d8:
                    e2:08:d5:cf:63:b9:7a:3a:c0:a7:e5:4e:ed:9a:91:
                    2a:e9:79:fb:9e:38:14:0d:46:d5:11:00:ea:63:b8:
                    56:38:a8:d2:b1:1f:fe:92:45:75:31:27:27:b1:87:
                    82:45:96:fa:bc:dc:01:ff:f2:69:e3:9a:b0:99:0b:
                    b9:4b:78:bf:23:63:13:03:95:76:69:14:40:aa:23:
                    ac:48:a9:3b:34:c6:e7:1c:cd:46:14:99:a8:f6:ea:
                    48:8e:a6:65:35:55:5b:a4:7a:26:a8:df:8b:aa:46:
                    8b:d3:92:54:ca:cd:49:3a:dc:72:30:13:31:21:78:
                    10:b8:08:00:6c:51:e2:f2:2f:fe:a2:25:e1:5f:88:
                    12:2e:bf:37:df:75:a8:f3:6a:bf:13:a3:df:97:f5:
                    5e:6b:f9:b5:20:66:04:cc:82:53:27:12:6f:4c:cc:
                    9d:f7:16:4c:dd:72:09:63:03:89:91:7a:98:b1:0e:
                    69:f6:38:33:af:29:90:8a:d0:0c:51:c3:0b:51:d8:
                    e8:aa:ec:a8:5f:41:db:fb:a2:aa:91:5e:5d:fb:47:
                    42:d5:f9:c2:82:9a:46:a1:af:8c:5d:be:ad:d7:6c:
                    a7:6d:76:48:dc:99:12:07:ac:8f:4b:99:a2:90:33:
                    c7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C9:AD:A4:BF:E0:50:55:D7:3A:D2:06:80:73:7E:B8:D7:F1:6C:97
            X509v3 Authority Key Identifier:
                keyid:1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:8c:88:22:7c:42:8e:f0:69:13:c0:c4:fc:d7:01:6b:1a:51:
         b1:64:71:d4:87:df:c4:e9:12:d8:5c:2a:e6:10:c1:20:17:18:
         43:0e:29:f8:7e:06:55:7d:93:cd:17:69:9e:36:07:6d:03:f6:
         ec:a4:31:7a:a1:16:26:02:65:c6:f7:d4:54:b2:03:f1:7f:0c:
         aa:0b:08:5a:bc:d1:e8:a2:d1:f0:9e:f8:0c:5d:b5:86:f7:9d:
         10:08:27:c7:6a:46:59:75:07:16:8d:2a:6d:ef:c4:bc:86:95:
         5f:af:00:36:1e:90:2a:f5:90:6d:2a:43:03:93:17:b4:7a:f4:
         37:c6:92:0b:a0:82:5d:3a:4f:51:19:22:2c:79:c6:cf:f9:9b:
         d6:08:d1:25:37:f2:fc:8c:dc:2a:c7:7e:78:fc:ac:54:d8:d4:
         47:42:aa:64:7c:16:69:72:5b:23:a9:6f:df:b6:f4:4d:66:6d:
         c6:69:8e:60:e7:ef:16:f6:e3:84:ce:4f:49:b2:d9:d4:5f:04:
         b5:dd:c0:5d:29:c3:4c:36:ce:25:c4:a0:3e:e4:ff:e3:fe:04:
         65:78:0c:61:35:7e:ce:1c:13:38:5d:9b:f4:ba:40:cb:a8:0d:
         4d:de:73:2d:54:49:21:3b:55:34:cc:59:79:d0:ed:c2:b5:4c:
         27:80:fa:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----