Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
File:                     H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft (raw, json)
Hash identifier:          CSK0vFIlJwLDScjxwGgwFZ/BI0DhLubcE6OKIUKpU8s=
Subject key identifier:   59:1F:7C:C2:C2:0E:F3:F2:DE:7C:0A:F7:30:B3:48:1F:3E:42:53:43
Authority key identifier: 1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E
Certificate issuer:       /CN=1f4439c757b6b646df16844f5a529ee27520736e
Certificate serial:       01962F74D8E2BBE5530BADFF6C2936AFB886
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
Manifest number:          03B1
Signing time:             Sun 13 Apr 2025 14:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:48 +0000
Files and hashes:         1: H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl (hash: DCiPk1idcHCF8k+SZGElYbFaeE02JHGxQ16WNZvielY=)
                          2: y-Jj6DyqKWn6BYWapkymjYaL5QU.roa (hash: gn98KweekT80SkX3KfiuOUzbXsngJC/J9zd5eWO66No=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d8:e2:bb:e5:53:0b:ad:ff:6c:29:36:af:b8:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4439c757b6b646df16844f5a529ee27520736e
        Validity
            Not Before: Apr 13 14:01:48 2025 GMT
            Not After : Apr 14 14:01:48 2025 GMT
        Subject: CN=591f7cc2c20ef3f2de7c0af730b3481f3e425343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:07:d9:4b:84:ab:e3:a2:3d:0b:59:81:7a:b1:
                    a6:a4:11:ca:59:3f:c7:32:2f:60:fc:41:87:96:8c:
                    33:0a:65:68:49:7e:cb:e3:ed:9a:d0:20:ac:08:c8:
                    6c:4b:16:d0:07:31:d4:db:0c:f8:40:6f:66:d0:a4:
                    70:86:ff:27:62:54:27:ee:07:79:3e:e3:21:f0:f8:
                    d3:ca:60:f3:fc:2c:62:25:7a:96:ee:63:27:13:58:
                    29:97:8a:8e:d5:6f:f5:d6:48:a0:f5:42:72:c9:76:
                    d3:b6:b2:37:d7:fb:1d:f9:26:22:08:dd:20:45:67:
                    78:f9:1d:a8:cc:04:ad:90:28:a3:76:98:10:39:ca:
                    32:66:af:9f:9b:c9:99:43:2b:dd:57:06:23:27:97:
                    3e:c4:95:11:29:e4:6e:46:68:f4:8a:22:47:ea:20:
                    7e:8d:6e:8c:1d:3d:00:5a:75:79:40:46:30:b2:b3:
                    05:06:af:1e:47:12:57:13:c0:15:20:2f:ae:ca:d4:
                    04:07:74:3f:f5:f8:5d:bc:c5:d1:28:c7:9c:77:ce:
                    4f:93:2c:e6:dc:13:79:03:09:62:67:29:43:4a:41:
                    af:86:46:6a:1c:b8:fd:a3:93:89:32:7b:76:48:e4:
                    5c:7d:dc:ea:14:da:e3:1d:be:89:22:72:d9:fa:84:
                    e1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1F:7C:C2:C2:0E:F3:F2:DE:7C:0A:F7:30:B3:48:1F:3E:42:53:43
            X509v3 Authority Key Identifier:
                keyid:1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:cb:ec:48:62:d1:df:4e:98:bb:bc:57:e6:c4:cf:00:14:23:
         b6:c2:99:92:43:3e:13:cc:01:ee:84:79:cf:d2:f0:36:38:be:
         18:63:fa:4d:37:26:89:ae:8b:23:dc:64:1e:c0:bd:eb:ed:3f:
         03:07:1f:ce:f2:89:85:3b:87:00:15:f6:e3:f8:d1:ce:23:3e:
         bc:1a:2e:a6:ba:18:8b:91:5e:cb:91:18:84:c7:d7:f3:c8:7c:
         00:33:2c:e7:ec:21:77:6c:2b:5e:68:d0:6e:01:6b:45:23:fd:
         16:01:95:d9:7c:6e:48:5b:0f:98:8e:58:be:f4:55:2a:1e:89:
         cd:49:00:b6:dd:2a:0b:02:1a:94:79:81:8f:3c:6d:a5:4e:0c:
         dc:f5:ec:5b:9e:12:dc:70:d2:14:37:5e:6b:13:2c:c3:d5:e0:
         60:95:8c:91:cc:44:af:fe:63:46:95:01:3a:cd:e4:5f:bd:14:
         71:a1:8e:4c:3f:1f:04:61:66:57:1e:c5:42:e9:a0:87:5d:2d:
         e8:b2:9f:4f:49:d1:71:39:98:b1:aa:b4:d7:13:ab:d4:17:c1:
         d0:d2:94:6f:b6:03:f3:a2:6c:ef:b8:67:b7:b6:54:63:67:73:
         7f:07:96:f9:16:ce:04:5e:d0:07:53:0f:30:1a:e0:28:19:0e:
         72:5b:2e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----