Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
File:                     HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft (raw, json)
Hash identifier:          SrwwZdHRbGIrffYr1yFqv2WtHSF8sLOENBitrQceR50=
Subject key identifier:   33:86:EF:38:E9:72:E6:94:EB:7F:35:BD:BB:5B:CF:A3:A7:3E:8B:7C
Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
Certificate issuer:       /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Certificate serial:       01962F065E77ADA2DC117EA0E0A8FEA60984
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
Manifest number:          1057
Signing time:             Sun 13 Apr 2025 12:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:08 +0000
Files and hashes:         1: 572na8_zoYemqPBejFGMRRPd8ps.roa (hash: vVsm+nWWBvjJ+3tIYusnSlDq71JJ2TZXjTfrysKXq88=)
                          2: HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl (hash: BUL0JEAuTb8y7pWDfCoN1ZCfdOizijA1z1KPtcxySrY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5e:77:ad:a2:dc:11:7e:a0:e0:a8:fe:a6:09:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
        Validity
            Not Before: Apr 13 12:01:08 2025 GMT
            Not After : Apr 14 12:01:08 2025 GMT
        Subject: CN=3386ef38e972e694eb7f35bdbb5bcfa3a73e8b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cd:50:72:5b:1b:63:01:6c:93:25:0f:7f:9f:
                    2d:38:70:4e:ed:16:9d:bb:72:1f:e5:35:31:89:01:
                    24:67:58:42:3b:7d:c2:6c:3c:08:5e:e6:c5:50:76:
                    99:57:fd:3d:76:c4:da:67:79:a7:6f:2a:7d:f5:23:
                    43:58:b0:9b:2c:74:6f:4c:cd:ad:9c:d1:04:9d:15:
                    67:b2:71:b5:a2:0a:77:95:6e:d2:9e:d4:b3:3b:33:
                    a8:e1:56:c7:1f:1c:a2:90:e7:4b:91:09:0f:de:71:
                    8a:ef:93:d5:f9:a0:75:e1:ab:e5:b6:42:e5:79:6b:
                    a5:89:40:ec:a7:ab:38:35:ab:67:45:6a:ef:d4:b3:
                    be:4a:b1:d3:f6:88:50:22:b7:a5:a7:9d:c0:d6:80:
                    c5:aa:93:dc:9a:95:50:72:38:52:52:62:91:e5:e5:
                    0b:1b:ab:53:38:df:62:4e:3d:ae:84:d9:16:84:c5:
                    fb:d0:f9:d0:0b:55:2f:d4:b6:5d:73:46:9b:ab:c1:
                    8d:0d:4b:0a:f5:8c:02:7c:fc:b3:ca:2b:31:df:ea:
                    64:38:d6:ad:78:dc:80:3b:07:b2:4e:cf:70:d7:4c:
                    19:72:76:df:1c:26:1c:74:40:f5:b7:d4:cd:14:37:
                    48:6e:fc:c6:c3:93:25:8c:8e:73:e5:63:b3:b4:d4:
                    76:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:86:EF:38:E9:72:E6:94:EB:7F:35:BD:BB:5B:CF:A3:A7:3E:8B:7C
            X509v3 Authority Key Identifier:
                keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f2:45:25:48:3b:ff:dc:3b:05:cb:74:7c:65:12:e0:6f:0b:
         4d:80:a4:9b:26:11:d0:25:cf:21:86:fd:33:be:3e:20:75:ef:
         bf:3e:97:0f:bd:c5:53:57:e5:38:56:16:8b:3e:59:f2:58:7f:
         5f:25:ec:b3:af:e9:42:e8:97:07:e8:f6:d0:c1:88:2c:39:16:
         a6:bf:eb:b5:42:dd:d6:f9:31:ce:0d:67:8f:6d:ef:24:ed:d8:
         25:e4:de:db:56:f9:b1:a9:b4:ef:97:0d:bc:ce:4e:69:7d:64:
         80:45:4b:32:43:e1:2d:0d:22:9a:75:10:1c:35:72:9f:8e:85:
         ff:a4:80:62:f2:04:02:16:fa:d8:1e:fd:0c:e5:1d:b9:a1:7f:
         3a:ad:df:f7:4e:1d:07:bc:9a:55:9a:7b:2b:fc:9d:22:14:b6:
         38:9e:62:40:83:54:ab:8b:5e:e0:69:24:d3:72:69:d5:18:dc:
         8c:20:09:86:4c:e6:81:4d:ca:3f:ee:26:bd:47:0b:b8:bc:d2:
         d8:bd:e8:a7:40:50:a6:82:85:2b:8b:b8:28:af:a6:e3:2b:a9:
         8a:81:41:2e:10:f3:b2:5e:58:d0:22:be:e4:c8:27:d4:8c:4b:
         7b:60:3e:db:c6:89:0d:51:58:63:91:0f:1a:1f:26:7b:0b:3d:
         14:aa:56:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----