Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
File:                     hWklE5rMSv4L6e8JhOPnvVtE6eY.mft (raw, json)
Hash identifier:          4OZrflgFR05csRcK5CBQI7zPrhYEPHJOOrFMwJQ4NyQ=
Subject key identifier:   E4:4D:72:7C:20:EA:3A:1E:CD:81:B3:1C:BB:E5:5F:B8:6F:EE:93:45
Authority key identifier: 85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
Certificate issuer:       /CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Certificate serial:       01962E2B0D5424EDC901CEF796A496A91BC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
Manifest number:          127A
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: hWklE5rMSv4L6e8JhOPnvVtE6eY.crl (hash: rKHDgViXF3ef05iWbNmxV2hPehWLCwMBuAdGZDfUdjU=)
                          2: siSVK589afKFmNB4xui803eAFA8.roa (hash: pIfAtolx6StiwhL02gSeSu2zm+FTXp7cgi/yqREz08c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0d:54:24:ed:c9:01:ce:f7:96:a4:96:a9:1b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=e44d727c20ea3a1ecd81b31cbbe55fb86fee9345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dc:99:32:1b:22:bd:11:90:56:71:0e:b1:98:
                    66:b9:34:22:43:31:1b:d4:c1:15:05:95:1b:44:d7:
                    12:bc:59:96:d5:8d:af:bb:b8:78:3a:28:e1:b4:86:
                    84:f3:f2:01:db:67:db:a7:70:02:aa:80:83:a5:cf:
                    2c:fe:32:fe:ce:bc:3c:ac:51:a3:7d:3a:b9:b1:fa:
                    63:cc:82:1b:c0:3d:b5:53:9b:44:e5:4b:8b:b7:5a:
                    f4:ce:a5:4a:1b:fb:78:eb:e3:70:f8:8e:f3:63:d6:
                    af:06:3d:4e:0c:28:22:c6:81:6d:da:80:a4:57:da:
                    3c:7a:d8:e0:1d:ea:a9:7c:3b:84:4f:a3:4f:9c:cc:
                    c0:bf:95:49:d2:ca:b6:d1:8a:15:d4:bd:e2:e8:a0:
                    51:aa:48:f7:37:97:a8:e5:54:ee:15:b2:bc:d9:4d:
                    51:34:61:59:85:7c:1f:5e:8b:f6:53:69:91:48:d9:
                    a8:da:45:1c:e9:a2:23:23:af:54:48:a1:37:5e:e9:
                    4d:5b:83:97:43:54:c1:57:9c:08:e4:87:18:80:ca:
                    83:ad:a3:d6:e0:dc:18:28:82:f4:2c:24:9d:80:1f:
                    97:3d:13:cf:84:f1:97:f6:62:eb:ce:a3:64:a8:ba:
                    54:9f:7a:7a:44:6c:cb:e2:9d:5e:9f:22:a9:b2:e9:
                    87:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4D:72:7C:20:EA:3A:1E:CD:81:B3:1C:BB:E5:5F:B8:6F:EE:93:45
            X509v3 Authority Key Identifier:
                keyid:85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c0:2e:3f:7d:66:be:3b:45:c4:6e:16:6e:c1:c8:be:6e:d8:
         63:06:31:d2:84:33:dd:4d:23:c8:55:08:82:98:c3:39:b2:88:
         c9:08:fe:50:35:c9:02:69:8e:0d:3e:01:01:2a:f4:7d:d6:1f:
         34:08:b4:60:19:8d:d6:2a:3a:38:ac:c6:be:5a:16:e7:94:ec:
         4a:15:9c:f2:0f:0f:be:fe:f4:e2:ca:d0:82:a7:01:c2:50:6d:
         78:f9:1d:29:45:ca:f3:01:97:65:4e:5c:78:0c:66:82:8a:62:
         95:08:6f:39:66:b9:63:e5:2f:3c:a4:86:94:86:04:a2:bc:ff:
         6d:e2:4e:fd:e2:60:85:5e:68:fd:f5:be:50:84:1a:b9:ef:ef:
         21:82:6e:63:38:91:f3:78:82:5d:22:d7:26:47:1f:02:67:4d:
         35:e0:da:83:6e:3e:48:96:ee:04:26:b1:79:d6:1e:95:71:42:
         5a:4c:5b:b6:7f:bc:30:d4:5f:66:29:7d:99:0d:08:83:01:d3:
         18:49:64:b8:fa:41:a4:32:11:60:09:b4:3e:40:42:18:38:b5:
         f3:1b:d2:d2:f6:96:93:13:fe:1d:bd:4a:06:1e:90:97:f9:71:
         10:5e:98:5a:3c:03:7b:00:65:2e:15:d4:60:3e:8a:cb:c6:8e:
         e2:66:4c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----