Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
File:                     H1BLG7cWjmgLGVQvj3MDhhRMil8.mft (raw, json)
Hash identifier:          5nU6+ZslQTUGsI1a6Aol6IaOYx/7e25W4RSVQIPdNwc=
Subject key identifier:   B6:8E:F1:A3:80:66:0B:4F:E8:C6:36:8B:F8:BD:DB:4E:4B:4E:CF:E1
Authority key identifier: 1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
Certificate issuer:       /CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Certificate serial:       01962F06E95537A31AEC3DD8126802859ED2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:44 +0000
Files and hashes:         1: 1YHm_89mdmO3B6rQNuElV51RHnc.roa (hash: MnfHwqRrOYbX1ON7yZ7M8gI0u2brRrZRizU4+uQlZVo=)
                          2: H1BLG7cWjmgLGVQvj3MDhhRMil8.crl (hash: +q7fkTifVbAaPYOOUUp5g4Q5nORozbg8RT3wg1KDfr8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e9:55:37:a3:1a:ec:3d:d8:12:68:02:85:9e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f504b1bb7168e680b19542f8f730386144c8a5f
        Validity
            Not Before: Apr 13 12:01:44 2025 GMT
            Not After : Apr 14 12:01:44 2025 GMT
        Subject: CN=b68ef1a380660b4fe8c6368bf8bddb4e4b4ecfe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:75:fe:48:2b:4b:b5:c1:be:f8:e4:df:a1:3b:
                    25:46:da:b1:03:eb:2a:91:ae:de:bf:17:b2:bd:9b:
                    78:5d:17:18:06:66:79:92:9d:a1:67:bf:a0:12:54:
                    9c:a5:90:43:c8:55:ee:9e:95:d5:e0:37:9f:d9:7a:
                    ae:f0:10:15:c0:c6:cc:23:5e:8c:67:15:52:29:15:
                    13:4d:00:93:fb:e3:ce:6e:20:84:86:d2:93:a6:c4:
                    05:8e:e8:f5:41:2c:08:28:f8:dd:13:97:be:f0:be:
                    fa:bd:43:f9:dc:e6:c0:33:c0:0d:f1:42:c4:65:91:
                    87:e7:df:59:95:20:38:c2:66:6b:29:4c:27:55:0d:
                    d8:4f:06:98:14:29:eb:23:06:7d:04:fd:e1:dc:eb:
                    99:59:d6:1c:ac:ee:78:25:f9:ef:5a:15:24:0c:99:
                    56:79:ab:ec:0f:db:57:fe:49:ed:58:84:86:b5:c2:
                    a5:50:ee:b2:80:71:21:1a:db:6e:a6:ae:bd:fc:66:
                    a1:e6:2a:1d:9b:55:b7:12:af:fb:65:3f:63:62:25:
                    35:1f:57:29:1a:be:d4:62:0c:f8:d5:5e:c7:c2:7a:
                    ab:7f:11:8e:62:5a:5e:41:ee:12:fa:a6:ae:4a:53:
                    a7:16:b9:06:ea:e1:12:f5:65:ba:26:1b:5e:b5:3d:
                    6a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8E:F1:A3:80:66:0B:4F:E8:C6:36:8B:F8:BD:DB:4E:4B:4E:CF:E1
            X509v3 Authority Key Identifier:
                keyid:1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:75:b0:8e:0b:b0:4a:47:e2:07:32:59:77:8b:69:73:f0:38:
         e2:cc:fc:61:b1:6c:df:59:a9:57:16:78:a4:c2:a7:ec:cd:12:
         a5:cc:a1:2e:88:bb:55:87:4d:c3:67:55:3e:17:52:7d:78:d0:
         71:a2:89:ca:90:6a:f1:f7:b2:13:a1:2f:3b:90:d2:ac:7f:fb:
         c6:c4:cf:29:72:3e:28:9a:01:4f:de:fc:31:63:a3:cb:3d:b9:
         b3:03:37:f4:a5:af:1e:9d:bc:16:cf:3e:9c:4b:a6:db:43:cc:
         d5:63:f6:4e:18:a6:70:d8:d0:7a:0f:90:3b:92:50:df:24:b4:
         25:69:51:e6:e0:36:4f:77:31:b2:20:95:f3:e6:f9:d6:92:43:
         02:b1:a6:68:c4:ef:7b:c0:44:da:4b:ff:ba:d3:1c:16:4c:40:
         41:75:a7:5b:ea:d1:64:59:eb:4b:c3:d1:86:e9:8c:9a:77:a9:
         57:de:75:b8:bb:f2:5b:26:18:b7:42:6c:90:06:dc:3f:99:67:
         4b:40:32:5a:a9:a8:2b:4f:1e:25:1d:19:17:2f:b8:e0:4e:d6:
         de:67:0b:cb:f8:0d:53:17:8a:84:96:80:25:b0:93:a4:83:e4:
         3f:58:8a:5e:dc:01:d7:aa:82:7e:76:34:0a:15:c6:ac:4b:c5:
         13:9c:7b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----