Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.mft
File:                     HQ2zVo5FXz2isidKnVJcrAkxx9U.mft (raw, json)
Hash identifier:          L2dsX5vTyaR4F0CAmVT08d6XpKNdrhqV/KFHROLOv+Y=
Subject key identifier:   9B:59:42:BD:26:19:2A:B6:3E:4E:58:3D:B4:B4:95:73:B5:23:5A:22
Authority key identifier: 1D:0D:B3:56:8E:45:5F:3D:A2:B2:27:4A:9D:52:5C:AC:09:31:C7:D5
Certificate issuer:       /CN=1d0db3568e455f3da2b2274a9d525cac0931c7d5
Certificate serial:       01962FAB403AEC85840393AE9EB0333EB43A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQ2zVo5FXz2isidKnVJcrAkxx9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.mft
Manifest number:          0325
Signing time:             Sun 13 Apr 2025 15:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:14 +0000
Files and hashes:         1: HQ2zVo5FXz2isidKnVJcrAkxx9U.crl (hash: 0QkBo3BXu5lfOb6U5oFS/u/J3fgfASpCx/oXZvhV9T8=)
                          2: yht62Ehavo3uZINByDHEHOjVZVw.roa (hash: mqAvN4VPlszrLeatuKNPPUoNf7NdmTA8jofCmdZ20jg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:40:3a:ec:85:84:03:93:ae:9e:b0:33:3e:b4:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d0db3568e455f3da2b2274a9d525cac0931c7d5
        Validity
            Not Before: Apr 13 15:01:14 2025 GMT
            Not After : Apr 14 15:01:14 2025 GMT
        Subject: CN=9b5942bd26192ab63e4e583db4b49573b5235a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e9:6f:49:d2:b6:1c:89:ef:e0:20:01:7d:1c:
                    73:b3:a5:75:58:24:c7:30:da:23:98:e7:86:47:57:
                    ff:27:ce:f1:49:67:e5:e1:b8:0b:b4:44:b0:4b:ba:
                    be:d1:80:e8:d8:b4:d6:82:d6:db:09:94:81:2c:6b:
                    ab:29:f2:87:49:d0:55:8a:b2:9d:11:c9:47:69:4c:
                    b1:ed:00:98:62:93:ae:35:17:96:75:7c:24:02:29:
                    53:af:14:26:d9:5f:39:ce:53:69:6a:35:94:7f:19:
                    63:b5:28:8c:d0:c7:08:62:48:38:20:9c:1d:02:e3:
                    cf:43:b7:47:fe:6d:a4:d9:e6:4c:b1:f5:c7:19:a6:
                    3d:36:32:e5:1f:79:2a:49:87:44:5e:b8:6b:ef:1b:
                    2b:9d:2c:ab:2d:7d:64:fc:45:cb:f7:96:08:77:bd:
                    dd:24:52:54:b1:d9:bb:63:eb:2e:eb:fb:63:a6:d8:
                    21:f1:0d:ce:69:ea:c6:7f:aa:c5:63:99:46:6d:73:
                    8f:74:49:47:65:39:c6:71:0a:14:db:ba:2c:5d:f5:
                    88:0f:40:e1:12:44:5e:1a:c8:5f:f6:e7:4c:09:43:
                    28:67:7b:f7:f9:14:17:8d:7b:2b:6d:7e:3e:ac:6f:
                    fa:11:4b:ff:1e:2f:2c:71:37:7c:79:19:cd:78:c9:
                    2a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:59:42:BD:26:19:2A:B6:3E:4E:58:3D:B4:B4:95:73:B5:23:5A:22
            X509v3 Authority Key Identifier:
                keyid:1D:0D:B3:56:8E:45:5F:3D:A2:B2:27:4A:9D:52:5C:AC:09:31:C7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQ2zVo5FXz2isidKnVJcrAkxx9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:29:94:9f:3d:89:b3:38:5f:2e:14:98:30:f0:84:06:9c:d9:
         41:42:e4:4e:50:31:f0:a3:1e:54:56:9c:47:48:12:8a:14:4c:
         3d:a5:85:83:cb:79:e0:79:a6:8d:22:79:57:5f:10:65:a2:16:
         50:07:6f:dd:68:b5:53:e9:93:7b:1b:bb:f9:83:7f:a2:00:33:
         9a:4a:54:30:e1:62:24:98:06:e2:fa:9a:d4:62:16:85:c3:f6:
         58:72:2b:3f:9d:cf:4b:d7:6d:a1:b8:02:a8:a0:af:db:22:25:
         90:e6:64:65:3f:48:1f:b5:d0:bb:17:21:18:bc:16:c4:80:b4:
         a4:18:8a:a4:80:b9:30:29:d2:12:cb:12:33:c1:b0:86:cc:d6:
         42:4d:78:a5:5c:23:a0:9c:18:e1:55:ae:2a:4f:32:06:a5:e7:
         c0:6e:c7:2d:ca:f9:fb:e4:1d:e3:0b:31:19:d4:76:d2:58:57:
         ca:98:8b:70:b6:fc:73:7f:12:f0:ab:42:73:ed:7b:a2:bd:86:
         c3:4c:0b:67:5b:83:b6:58:6d:08:8b:66:4c:bc:9a:6b:e3:af:
         9f:14:6e:f8:25:82:ac:20:39:d4:29:6b:ec:96:1e:74:06:bd:
         02:4d:24:e2:69:b4:3f:90:9c:89:8d:3b:3a:22:47:7a:f2:b2:
         54:65:b0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----