Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.mft
File:                     HyHFQ4RMQX9hrXk5JE07dZwqQ-0.mft (raw, json)
Hash identifier:          SVE9CjepXe4lpePBglhr8U5oYONhTjVyqM7GzlMpM+8=
Subject key identifier:   4D:2E:8E:5A:C7:C8:50:31:FA:BF:D7:54:60:77:02:F8:9A:F6:D4:58
Authority key identifier: 1F:21:C5:43:84:4C:41:7F:61:AD:79:39:24:4D:3B:75:9C:2A:43:ED
Certificate issuer:       /CN=1f21c543844c417f61ad7939244d3b759c2a43ed
Certificate serial:       01962DF3C379D35C878DCDC41F5E21243279
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.mft
Manifest number:          14F8
Signing time:             Sun 13 Apr 2025 07:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:12 +0000
Files and hashes:         1: DeQFcAAznRKaWbjYYwtHWvAu_JE.roa (hash: GnVFGXqZ+Ydt6iYpHsJ9f6xgYMJ7ccNl+9bHKUUsU+w=)
                          2: HyHFQ4RMQX9hrXk5JE07dZwqQ-0.crl (hash: Pn3MmSZ1OWOoeSyfJ7lVrB87WjH8f8sLC661NOipKDw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c3:79:d3:5c:87:8d:cd:c4:1f:5e:21:24:32:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f21c543844c417f61ad7939244d3b759c2a43ed
        Validity
            Not Before: Apr 13 07:01:12 2025 GMT
            Not After : Apr 14 07:01:12 2025 GMT
        Subject: CN=4d2e8e5ac7c85031fabfd754607702f89af6d458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7f:b5:f3:b8:89:c6:4a:c0:eb:a1:17:58:6b:
                    95:4a:8c:4f:e6:86:28:31:bb:41:24:9c:6c:65:ff:
                    46:b3:69:ae:a9:09:7e:7e:a8:31:2c:61:f6:c6:10:
                    92:71:d1:cf:f6:5d:ba:81:90:8f:08:dc:4a:77:91:
                    33:3d:3d:07:18:93:14:c9:13:d6:fa:ce:02:e9:9f:
                    8a:09:f5:9e:a1:93:ea:08:16:d8:80:13:7a:39:c5:
                    bb:eb:97:2b:0b:af:62:1b:4f:14:b1:44:45:00:21:
                    2b:e8:0a:85:b6:56:7f:d2:0d:1a:ac:6e:3f:2a:26:
                    91:82:e9:c2:58:74:e8:7c:bb:32:c6:1c:f1:78:37:
                    8a:bc:f3:c9:eb:bf:13:88:c5:1c:92:26:d0:f0:b6:
                    49:3d:38:f4:9d:22:31:fb:1c:ea:eb:e2:d0:04:88:
                    da:5d:99:4a:3e:21:91:6f:b4:09:eb:fa:94:bd:25:
                    1e:32:74:28:6c:b8:8a:f7:0d:d9:a6:17:e9:1f:97:
                    a4:f1:91:c0:d1:b3:b4:ee:28:3d:3c:6a:ae:c6:55:
                    1b:3e:b3:6b:cc:67:35:f9:37:82:9a:66:aa:5d:23:
                    6b:37:1f:da:fb:c5:3a:32:e0:5f:9c:7c:16:97:64:
                    f2:e4:62:dd:c6:46:74:0a:8c:8b:fe:23:47:86:f5:
                    66:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2E:8E:5A:C7:C8:50:31:FA:BF:D7:54:60:77:02:F8:9A:F6:D4:58
            X509v3 Authority Key Identifier:
                keyid:1F:21:C5:43:84:4C:41:7F:61:AD:79:39:24:4D:3B:75:9C:2A:43:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f2:3e:f3:8f:34:0d:1f:9f:3e:fa:58:f1:9c:99:bf:a7:aa:
         dd:dd:41:72:5f:97:56:83:5c:e7:72:47:4b:36:a2:56:5f:5c:
         5f:91:af:09:ee:7b:75:fe:2d:fd:bd:b7:10:8c:1e:ad:cb:15:
         25:b3:e7:4f:1d:81:9e:f4:8f:58:e4:aa:77:cd:ef:c9:ba:a6:
         db:50:40:1e:a5:c7:01:5d:76:a6:a4:74:6a:e6:ed:b0:68:95:
         28:a9:3e:46:dc:96:51:77:66:ba:f9:c1:21:c9:e5:6f:91:81:
         db:90:13:b6:7b:4a:d9:9a:13:c4:f9:bf:26:21:70:8a:74:7f:
         66:52:34:17:0e:c6:89:4e:27:48:13:46:69:fb:81:52:6c:f3:
         46:54:5f:df:f0:de:9a:1c:e2:f7:47:5d:1f:0d:df:a3:51:ce:
         6c:c6:54:06:36:16:61:3d:15:c9:e0:f6:09:b1:fc:8f:9e:7b:
         35:7f:84:b2:f9:b2:d3:68:3f:54:df:7b:77:66:28:dd:aa:6b:
         d7:87:d5:c0:5a:20:98:92:92:af:f2:7d:91:2a:cb:bb:d4:1f:
         88:cf:22:87:22:37:b2:77:79:ca:24:e3:e5:4c:45:fb:73:c0:
         bb:fa:0c:f6:57:0f:43:9c:de:de:a1:23:48:5d:a5:86:37:dd:
         c7:ec:d8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----