Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
File:                     HYKLeBsHn7Q92wynXcAm511_JeQ.mft (raw, json)
Hash identifier:          6bgWiCBpWelGWUFaMCdjGyudSWH7GAkM4fL/ipoey80=
Subject key identifier:   79:06:26:8E:44:14:DB:8E:2F:EB:4E:A1:D1:20:E8:8A:10:C4:D9:DF
Authority key identifier: 1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
Certificate issuer:       /CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Certificate serial:       01962E98CFE2CB81BE5CA6870CF638E54E18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:28 +0000
Files and hashes:         1: HYKLeBsHn7Q92wynXcAm511_JeQ.crl (hash: 0c3xpY1wIUjcpcBNCfO6jVMNoDfCOA1cTRIsR1vR0PM=)
                          2: avKWbxlz__x39cDhO2Y69LSUiG0.roa (hash: zHguv0slI/PQ12Wd3BSPrR9a4DZWJkflBQ3L6OL1wFI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:cf:e2:cb:81:be:5c:a6:87:0c:f6:38:e5:4e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
        Validity
            Not Before: Apr 13 10:01:28 2025 GMT
            Not After : Apr 14 10:01:28 2025 GMT
        Subject: CN=7906268e4414db8e2feb4ea1d120e88a10c4d9df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3e:e0:47:93:2a:51:c1:1a:ff:60:2d:f4:73:
                    26:15:18:56:16:be:bc:f5:7a:af:3f:df:0a:78:9b:
                    92:83:68:e0:9c:ea:85:92:8e:ff:57:00:48:72:41:
                    2b:2c:e6:3d:6b:f3:80:b4:25:88:2f:35:5b:cb:99:
                    e2:10:7c:1d:5d:56:f7:7d:a1:bd:c0:fc:b7:e4:0d:
                    21:97:1a:c7:76:17:b7:8a:34:1c:30:e4:ec:79:e0:
                    be:b9:4d:4f:a7:21:ef:06:4d:bd:a4:fd:ff:cb:b6:
                    ca:a1:af:00:c1:1f:79:b1:c4:1b:c2:37:fe:17:d4:
                    a3:6b:a2:d2:c0:04:38:c7:f9:96:56:f9:51:bc:c7:
                    58:e5:cb:3a:81:fc:93:3e:1b:68:46:29:91:a6:52:
                    64:3c:ef:53:82:fd:52:be:ad:ab:9c:be:b0:eb:fa:
                    6a:26:6b:da:0d:0b:dc:69:0d:79:e4:c4:a9:02:e6:
                    4a:67:ec:03:eb:73:ff:31:28:dd:e1:47:c3:63:cc:
                    20:5f:26:1f:c4:53:51:fc:d4:e5:21:83:ce:db:7e:
                    f1:be:e6:60:52:09:36:e6:4d:2e:33:b0:e6:0a:6b:
                    02:ff:51:d8:bb:ae:bd:0e:94:68:df:9d:2c:d7:84:
                    8e:f3:e8:66:6b:a5:ef:94:ea:d0:09:e4:6a:7b:93:
                    57:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:06:26:8E:44:14:DB:8E:2F:EB:4E:A1:D1:20:E8:8A:10:C4:D9:DF
            X509v3 Authority Key Identifier:
                keyid:1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b7:ca:53:f1:a2:38:5b:42:5e:4d:18:20:77:f9:c2:67:bb:
         9a:bb:4a:22:fc:88:9a:7d:d9:40:09:18:9f:82:9f:4c:19:2a:
         0a:a4:df:ec:e5:c8:3e:51:7d:cf:81:59:4e:3d:79:cc:69:13:
         2f:e1:1f:1a:60:03:16:38:0b:81:11:7e:d2:29:8e:c0:2d:89:
         cd:f0:c2:65:43:4a:62:8e:2f:32:50:0d:d9:c5:d0:0c:e5:6a:
         7d:98:89:18:cc:8f:33:b6:19:48:4a:ca:1f:cf:c5:31:6a:bc:
         37:76:33:05:95:07:e2:a9:c9:8a:1f:bd:0f:0b:56:5d:32:9b:
         59:fd:e7:7b:1e:6b:00:ef:0c:6e:7c:1e:b2:30:6a:fc:db:ea:
         83:6e:00:92:b7:b4:6d:75:cd:4b:8a:e6:61:4b:87:7f:09:d3:
         a6:93:18:c8:e4:6d:e5:03:ee:38:e4:b7:ac:26:4a:bc:56:0a:
         2f:13:00:80:a2:3a:d5:5d:d8:43:96:11:42:ff:e1:88:8a:25:
         18:4d:1f:0d:7e:cc:07:9d:7f:8d:f1:f2:d6:f0:f0:25:9a:27:
         f6:79:52:d2:39:3d:50:a8:cc:0b:50:7f:cb:f7:85:1c:98:62:
         9e:e0:a8:ee:a2:5d:d5:49:00:c6:97:6e:ac:6a:c8:f8:95:39:
         7e:e3:3c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----