Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
File:                     HpWgaWae1adm7ujr3DLjn7FIQQs.mft (raw, json)
Hash identifier:          8e8C54ZGL1gdiEVPzJVjD/NazY3d/KDBYci3b9J269M=
Subject key identifier:   5C:6A:B8:E4:D7:7A:C6:3D:85:57:2B:B6:E5:DB:A4:84:AB:64:8C:06
Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
Certificate issuer:       /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Certificate serial:       01962F3D5EB5111A5DFD4D8B8CC39884D73F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
Manifest number:          11F5
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: DaVvwNhmLZ7YvB4G_4EErsgVRto.roa (hash: 9N2XrCoRGQ94Srik137EIdOpwG9c0HxGyO4AFS+YxkQ=)
                          2: HpWgaWae1adm7ujr3DLjn7FIQQs.crl (hash: RFNjELPNqa8hI5o6Q6JLtn9Oe+H9cnd1oDWJT1soeys=)
                          3: cewoho2AOnulAKHkgJPfFfaGNTs.roa (hash: h6GQ0NWMY4P5SejGL0LHJGgldSFcjeMqktSbinLYCko=)
                          4: jLBduNxxNKgDba3-1WYMWVteGi0.roa (hash: KUpNfjWxt4P+0oOd2LgpPhKotB+fQLPJrlsXaH2uueQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5e:b5:11:1a:5d:fd:4d:8b:8c:c3:98:84:d7:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=5c6ab8e4d77ac63d85572bb6e5dba484ab648c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e8:76:f0:c4:86:61:5c:79:81:67:e6:c0:81:
                    a1:53:4a:d2:74:c0:44:9d:7d:bf:c1:39:3e:cd:e4:
                    53:fd:58:a1:e1:7e:2f:45:f4:5e:0a:88:9b:db:ad:
                    ce:47:4d:9a:b0:d3:e2:a1:9b:b7:ad:e1:82:e2:9a:
                    91:38:03:31:14:bb:a2:a7:e6:b9:0b:2b:98:a4:a6:
                    e7:cc:1f:e8:cc:d0:ec:5d:e4:c7:a3:ee:a0:e8:65:
                    90:2d:0a:b6:db:2d:98:2c:18:34:07:60:70:c6:e7:
                    f2:75:91:ef:b8:51:95:67:c0:86:d4:9a:07:c6:6e:
                    89:d6:7c:3c:a7:b5:cf:eb:b8:b8:ce:ea:a2:b1:6b:
                    77:30:79:98:5f:7c:43:fb:6c:79:bf:6c:31:c5:56:
                    49:04:6d:1c:74:32:43:fe:e7:ea:1c:c0:7b:e8:be:
                    d9:ba:18:14:d6:3f:ce:54:42:39:af:71:b4:53:49:
                    7c:11:9e:87:f7:d6:80:12:c4:ad:b4:59:2c:84:07:
                    fc:08:e0:42:c0:e8:06:e2:02:9f:83:19:38:7a:4c:
                    ce:3b:f7:e7:ce:e8:43:86:f9:2d:4f:49:02:9a:64:
                    dd:1d:21:da:b9:e5:d7:ae:f7:2a:e1:ee:fc:54:aa:
                    ee:d2:9f:81:89:92:78:55:c5:31:b7:5e:23:18:af:
                    aa:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6A:B8:E4:D7:7A:C6:3D:85:57:2B:B6:E5:DB:A4:84:AB:64:8C:06
            X509v3 Authority Key Identifier:
                keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:16:b8:4c:67:05:36:61:d4:22:0a:75:ba:fd:b8:4c:28:4f:
         87:17:54:50:52:3a:93:75:69:d3:69:ef:c9:f9:a1:83:96:c8:
         92:45:8a:b1:63:98:33:2d:7d:ef:16:15:4d:9b:6f:c1:cc:01:
         bc:1f:d6:9b:1c:fb:38:ef:bb:0b:a7:1e:9e:6f:01:54:7e:7e:
         ab:1a:bb:83:19:b0:1f:0b:67:ac:5a:94:fc:e1:45:29:52:15:
         42:c2:60:ad:2e:da:bc:08:54:3a:49:67:0a:ce:e3:ea:6a:3c:
         ae:ea:8a:64:3f:e1:fd:e9:aa:95:2a:14:3d:35:dc:f3:6c:fa:
         ee:9f:06:35:8f:bc:8f:64:26:e1:3e:aa:38:21:de:3e:f8:85:
         03:53:f1:fa:f4:2c:60:f3:9e:fd:9c:c3:05:59:1a:4f:eb:f0:
         0c:92:80:78:c9:53:12:24:d5:87:ce:3f:61:61:e7:76:a4:0e:
         0b:37:bd:a7:7f:30:e9:06:1a:47:0e:21:ba:4a:b5:3c:7b:59:
         8a:5d:86:df:1c:a5:ca:b6:61:41:13:63:98:ea:a9:f2:73:47:
         67:ad:40:2f:49:4e:f9:be:f3:a1:b0:93:9a:1e:3b:91:7d:fc:
         48:89:16:ca:e5:03:08:c9:ca:82:a9:9e:38:8f:62:98:bf:43:
         78:fe:3d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----