Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
File:                     Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft (raw, json)
Hash identifier:          3CuCIorP3qm2rgRTkggvss9OsZfwtN3aXHZQ90dqDTo=
Subject key identifier:   5E:ED:9F:18:A5:28:F1:59:B8:92:95:4E:62:53:E8:03:54:9E:A8:F2
Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
Certificate issuer:       /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Certificate serial:       01962F74256771899786383AE7BCBEEA9959
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:02 +0000
Files and hashes:         1: 2eNuQu_p5ginCAZ1GWglFgX2Ois.roa (hash: w05SWnwARvBa6z4mKj9c93WMw5hgy4MoXYoHU2TqLvA=)
                          2: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl (hash: BCMNUlFgybfYaSowFgHZnhK61SFxWYyX3VR+hnuzEY0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:25:67:71:89:97:86:38:3a:e7:bc:be:ea:99:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
        Validity
            Not Before: Apr 13 14:01:02 2025 GMT
            Not After : Apr 14 14:01:02 2025 GMT
        Subject: CN=5eed9f18a528f159b892954e6253e803549ea8f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:27:e7:d0:fa:3e:dd:8c:51:13:e5:c4:ff:0d:
                    be:cf:13:60:46:9a:1e:9d:f9:f3:d9:c8:f3:47:a8:
                    4e:6c:b1:02:e2:70:ee:de:ed:bf:90:9f:dc:33:2b:
                    bd:47:2c:0e:28:92:2d:77:18:42:00:0d:fd:92:99:
                    f6:8a:c0:fb:5f:28:a8:96:70:ad:bb:cc:e6:95:be:
                    d6:b5:85:d8:5f:90:4e:ce:04:39:9f:c3:6e:a0:82:
                    42:90:fd:62:1c:63:03:6f:fc:d4:8e:f7:5c:da:cf:
                    5e:7f:1f:86:d0:35:77:fe:60:82:2c:17:12:ce:74:
                    12:a2:0b:20:16:24:6a:c7:49:6e:25:e5:d8:65:10:
                    e0:e1:dd:a5:86:57:98:de:a0:c6:80:91:84:79:68:
                    4d:15:bb:be:0a:ea:65:b7:44:b3:ac:23:41:08:01:
                    d9:57:41:f6:53:b5:61:ed:85:7b:f6:5c:33:5d:aa:
                    2e:cd:80:fc:9d:8d:10:d4:f4:8c:65:83:3f:d1:46:
                    59:51:00:88:2d:f7:d6:d0:5a:18:bf:2b:fd:da:de:
                    ca:e7:86:88:2f:b8:ed:8c:68:e1:70:09:a4:d0:06:
                    29:ca:e9:01:94:77:e1:55:5a:f3:ca:9a:77:4d:ac:
                    61:7e:59:2f:2b:e8:22:2d:73:da:8a:58:71:fc:43:
                    2a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:ED:9F:18:A5:28:F1:59:B8:92:95:4E:62:53:E8:03:54:9E:A8:F2
            X509v3 Authority Key Identifier:
                keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:32:2d:96:a8:f1:66:a2:58:e9:a3:0b:f4:ea:1b:2e:27:52:
         d8:b4:6c:26:58:28:10:eb:47:6a:47:83:91:90:a6:6d:d1:48:
         c3:91:a0:40:62:49:1b:19:f9:9c:82:b4:b4:00:b5:49:f0:12:
         8e:0e:62:b1:56:f8:66:b0:bd:99:08:6b:4c:84:da:4d:92:74:
         79:a4:51:dc:35:be:69:d6:d0:06:a4:e3:fb:58:82:95:bc:58:
         a4:24:1d:a2:ca:cc:23:54:2d:6c:55:b3:6a:d6:02:ab:fc:61:
         bb:61:ed:1f:f2:ee:79:09:fb:6e:2e:aa:fb:13:96:d3:c6:d9:
         b6:40:8b:22:cd:3b:6b:b4:fc:b8:18:e7:52:00:1d:65:80:ba:
         98:d8:fd:d2:d9:71:d8:d2:de:88:d8:c2:fc:cd:2d:0a:60:05:
         bd:37:1e:38:f8:4f:73:bc:e3:d5:0b:31:17:9d:e0:30:3f:1e:
         35:76:f8:08:28:b1:30:d1:e7:92:f2:28:2e:fd:f8:f6:53:63:
         02:ee:aa:07:14:73:9e:32:58:39:8d:28:8e:c3:6c:ee:b6:60:
         78:cf:35:60:e0:02:57:b9:e0:3d:8b:2f:0c:0d:6d:e9:3a:0b:
         9d:c3:c3:57:8e:f4:fb:56:9b:91:05:26:28:58:9a:72:65:a1:
         1c:db:35:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----