Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
File:                     HqsBKTydvRqdatyGGCtSDNF2wAc.mft (raw, json)
Hash identifier:          mdMEuoqlfhhc5IurcAnTE7MAxD213w75m16MuT2RNM0=
Subject key identifier:   09:59:53:00:96:AC:42:6C:55:0E:7A:0F:93:55:DF:4E:34:E1:61:F0
Authority key identifier: 1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
Certificate issuer:       /CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Certificate serial:       01962E993D3AC4AF0B747DA00666AD588D4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
Manifest number:          129C
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: HqsBKTydvRqdatyGGCtSDNF2wAc.crl (hash: paB91uRbLD2mxNrqW7VU4K1wynxMzS7adJir8+5FNiA=)
                          2: ub3jhWL8KmU55QyzLWlOgggBar8.roa (hash: uMoRi+7KkYToPIHx+yE4FpiPieRkes7ACBQfGkW0VCM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3d:3a:c4:af:0b:74:7d:a0:06:66:ad:58:8d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=0959530096ac426c550e7a0f9355df4e34e161f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:a0:4b:f8:d2:94:07:99:84:91:f4:17:8a:
                    2d:96:01:71:d3:cc:24:e6:ee:30:35:e5:ce:e2:ce:
                    04:22:2b:36:27:ec:f3:09:ce:63:a7:00:0e:a5:eb:
                    19:a7:55:ad:ef:d8:5d:bc:68:fb:67:c0:16:47:6c:
                    5b:83:17:3b:de:77:28:bd:54:70:80:a5:c4:e6:ca:
                    f5:09:ac:dd:70:3e:de:33:1a:cf:e1:c1:26:aa:bb:
                    e3:6d:11:a2:15:b4:03:db:d3:83:8f:8e:80:fc:be:
                    1e:9f:7e:6b:cc:7a:13:a7:66:48:cc:16:c2:7c:76:
                    bb:33:97:ac:1a:4f:1f:66:8c:11:fe:75:c5:25:7a:
                    69:39:88:9d:91:61:31:66:93:c9:8f:3b:4d:2d:18:
                    04:85:9b:de:ad:23:49:75:af:8e:c2:8d:03:06:d2:
                    5d:fc:b2:c8:96:95:a5:42:db:b3:81:84:2c:ff:7e:
                    dc:9f:59:a4:50:71:76:71:c2:94:3d:09:08:0d:22:
                    62:ed:c3:bc:e3:e5:a5:67:15:97:c0:b9:18:6f:5a:
                    3d:7d:69:28:96:4c:0b:89:6d:34:e3:ff:a9:34:df:
                    be:0e:24:cf:6d:5e:22:b2:3f:44:02:cf:1b:3f:2d:
                    15:7a:4c:98:45:53:d8:c0:a0:ea:fc:af:06:fe:4c:
                    62:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:59:53:00:96:AC:42:6C:55:0E:7A:0F:93:55:DF:4E:34:E1:61:F0
            X509v3 Authority Key Identifier:
                keyid:1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:43:bd:3a:0d:5f:4e:e9:59:71:e4:c6:f5:fa:b3:33:77:b2:
         46:30:37:99:3f:4d:57:0a:e1:ad:00:2a:6f:94:6c:31:c2:1b:
         6e:de:78:ef:36:90:b1:b0:6a:6c:87:2a:bb:32:b1:12:d4:28:
         9b:43:94:89:53:5f:e0:99:02:b9:a6:ba:0e:ed:86:79:43:34:
         11:ea:87:e6:f4:c2:bb:f0:5c:90:48:e1:7d:a3:21:ac:a3:78:
         ee:da:90:85:a8:b4:e0:6d:1f:3b:4c:57:12:56:97:c5:8c:44:
         70:a8:64:f4:e7:a3:27:be:c4:33:7f:c6:c7:9d:39:d4:f5:73:
         09:5a:4b:3c:d7:50:a2:ec:98:fe:c2:72:06:a4:4c:f6:bf:2a:
         3c:04:f3:30:53:53:90:da:4c:a3:5e:10:38:aa:1f:b0:c8:d4:
         c4:ab:42:1c:0a:3a:e0:15:a7:a0:c4:0b:3e:2e:22:31:f6:e3:
         96:2b:3b:fe:74:14:9b:6e:2d:ce:9f:9b:ba:39:f3:da:ab:e2:
         00:e0:ec:e9:dd:d8:06:26:39:2e:ea:53:33:fe:6e:44:10:f8:
         55:56:9d:2f:37:88:a8:15:5b:ef:25:e6:9d:6d:15:4f:31:53:
         c6:68:93:b8:02:11:c4:54:cb:9c:43:a2:64:1e:c6:ae:42:4e:
         11:5f:01:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----