Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
File:                     HxKTy74vaSVA08xaboI2YElMQGM.mft (raw, json)
Hash identifier:          WK9ZY2aTuPBlzLzUJKMWnWDsxsPJf1whKyB9CZR0OTI=
Subject key identifier:   64:94:93:F0:21:2B:77:CE:71:91:02:E2:4F:6B:2E:BC:EF:9D:A1:C1
Authority key identifier: 1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
Certificate issuer:       /CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Certificate serial:       01962F3DDA6B6F4F9FEDFABA184D9A3DF49D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
Manifest number:          0C6D
Signing time:             Sun 13 Apr 2025 13:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:44 +0000
Files and hashes:         1: HxKTy74vaSVA08xaboI2YElMQGM.crl (hash: U0WXdW8n7Y0AatOpIzL1cTJaN/wY5I0UvBO6L2OXa0I=)
                          2: qBbXPlomssD9zrP_xFljqdR0LbI.roa (hash: Gow+NF8w68xqHQfvdIHVUtAvsOi+ZzLSZN8/SeU/9ok=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:da:6b:6f:4f:9f:ed:fa:ba:18:4d:9a:3d:f4:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
        Validity
            Not Before: Apr 13 13:01:44 2025 GMT
            Not After : Apr 14 13:01:44 2025 GMT
        Subject: CN=649493f0212b77ce719102e24f6b2ebcef9da1c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9e:ae:79:83:25:0f:f1:f9:fe:c9:2b:42:32:
                    01:68:5d:b2:9b:05:64:85:32:40:77:b3:bb:8c:b8:
                    40:c5:c7:67:39:73:09:49:f5:58:9b:09:19:d2:48:
                    f5:b0:dd:74:d1:36:86:19:3b:ab:dd:67:81:0a:bd:
                    db:b0:b3:9c:26:7f:f8:e2:c2:20:30:7b:9f:82:d0:
                    8d:d9:ba:9a:24:47:ef:f7:ea:1d:63:f4:32:8c:f8:
                    93:a7:be:6c:34:d7:1a:ad:4d:a0:d8:ec:13:16:1f:
                    1b:0c:1f:a0:5a:34:68:f1:4f:01:23:22:e6:1d:b4:
                    24:b3:da:a2:b5:af:6d:ac:50:76:bc:5d:7b:d9:de:
                    c4:45:eb:8f:0e:0b:98:d4:7f:2d:f4:57:3a:da:e5:
                    83:b2:45:f9:f6:9c:b7:a6:84:d0:da:de:c7:65:71:
                    eb:1e:65:f0:9b:24:71:a8:e8:70:13:c5:87:b4:33:
                    cc:76:ac:fc:e4:35:65:f5:3a:8b:a6:5c:e6:0f:ca:
                    7c:68:0a:79:4b:f0:d1:37:b1:38:3e:4d:f6:a8:38:
                    ad:45:e2:ec:58:96:09:85:50:00:a4:94:a2:07:b5:
                    e8:de:7c:07:14:6c:74:3b:d1:da:c8:88:26:40:d1:
                    7e:44:e4:d4:7f:14:50:06:f6:aa:4f:8a:02:2f:30:
                    0d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:94:93:F0:21:2B:77:CE:71:91:02:E2:4F:6B:2E:BC:EF:9D:A1:C1
            X509v3 Authority Key Identifier:
                keyid:1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:75:77:00:4b:80:67:c6:6a:ad:a0:83:17:81:24:7c:f1:ac:
         df:c9:28:52:84:61:9e:e0:72:6b:c2:7e:b7:98:f4:bc:92:60:
         a4:fd:f9:f5:40:fd:bf:72:c9:8a:38:12:df:e1:7d:c2:f6:e9:
         57:d3:a5:2b:3c:12:be:71:3f:3a:fa:b6:73:35:6b:f2:98:e1:
         f6:f2:00:28:09:18:06:f6:54:4e:f0:84:6b:2e:c1:e1:30:f8:
         b8:8d:3a:c0:e5:21:4f:75:d8:84:d3:60:c9:e7:e4:04:9f:49:
         dc:87:39:7b:97:f3:93:4b:cc:eb:9e:69:1a:6b:9b:8a:78:a7:
         32:5f:c0:38:2d:77:0a:41:76:4f:50:4f:02:cd:04:58:2a:b8:
         6a:07:f3:73:dc:56:4f:c5:cd:ad:cd:52:4c:58:bb:84:29:49:
         6a:67:60:16:08:a2:26:5f:5e:c8:06:53:7a:da:7c:8a:cf:c5:
         1e:34:e1:5a:e6:ef:c1:02:0b:9b:05:f6:e6:9a:61:0e:67:d4:
         c1:d0:eb:32:62:c1:b1:4d:18:51:c7:9f:ca:c8:86:e1:ff:8f:
         20:3a:d0:a0:ea:4c:31:2d:bd:af:07:e3:bc:a2:1a:97:61:68:
         34:d0:2b:01:2c:da:af:4f:83:0f:34:df:5b:9b:c8:ca:ca:c9:
         09:9f:3e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----