Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
File:                     HRV4JMY4xxige1NeDYJMskr8Bww.mft (raw, json)
Hash identifier:          TcnjzyGgzejEd4vJz1nRWBC0rXVWkdhYgvTD7f6gb8Q=
Subject key identifier:   3D:98:D2:C7:86:0E:91:5A:00:3C:A8:1E:57:09:D4:2E:F7:B5:D2:B0
Authority key identifier: 1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
Certificate issuer:       /CN=1d157824c638c718a07b535e0d824cb24afc070c
Certificate serial:       01962E99437A88394234E08C65AA338B9254
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 10:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:58 +0000
Files and hashes:         1: DQA5wbdLSEm4_F0k0CrcOYfl8nk.roa (hash: nSw+Z2r+tEaSc2AQgef90FTr8oKptJDQ2v6jPAQnhGM=)
                          2: HRV4JMY4xxige1NeDYJMskr8Bww.crl (hash: QoYpUFEuaBNjTU7WwSayktF8fSshg7oj5198iPKO33Q=)
                          3: HuQWl8CvzbCRxNpw5HY0jCj3ToQ.roa (hash: XR9eo2BAwqzrJQjS2GXKNqFXgZew/uNp0g76elzf6UI=)
                          4: q-KsgHc87yurkiTPrGB6_ENn-Sg.roa (hash: cFavBWqarVDA4XfAipmh7/d8krk6AEiGb/atvWyd1pQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:43:7a:88:39:42:34:e0:8c:65:aa:33:8b:92:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d157824c638c718a07b535e0d824cb24afc070c
        Validity
            Not Before: Apr 13 10:01:58 2025 GMT
            Not After : Apr 14 10:01:58 2025 GMT
        Subject: CN=3d98d2c7860e915a003ca81e5709d42ef7b5d2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2a:52:d9:c3:78:80:b8:ca:53:89:53:e8:ad:
                    09:32:72:da:a5:ec:93:56:1e:61:8f:dc:6e:e6:9b:
                    67:39:9b:8e:78:1d:ff:9d:21:58:73:f8:cc:d8:da:
                    88:a0:1f:7e:ad:b5:33:90:54:91:60:df:30:17:b0:
                    6f:fd:29:62:30:9f:c5:0c:45:0a:dd:51:2c:60:2e:
                    d9:86:70:2b:fa:ec:f2:c0:4b:b2:54:21:f5:f5:ec:
                    a6:36:fb:c0:6b:ea:89:ef:89:80:73:df:d1:3d:6a:
                    d0:5f:32:d0:37:e1:98:21:9a:74:db:13:6d:ec:59:
                    cf:b2:41:26:9e:f3:5e:a7:81:41:94:8a:3b:77:75:
                    43:70:a5:50:3c:6b:34:2c:6d:4c:14:a3:1c:ba:90:
                    e6:00:fb:c3:bb:59:e7:87:09:f7:31:3e:bd:fa:39:
                    b3:7b:6f:c9:74:9c:02:77:39:91:c9:61:ed:e7:4e:
                    65:dc:d5:0c:f6:a2:c8:da:5a:cf:f9:a5:d2:c9:ea:
                    af:61:ca:75:23:b0:8b:5e:f1:cd:3d:fa:1c:e5:33:
                    25:b8:d2:3e:d4:cc:6a:99:db:a8:51:82:f6:b0:9f:
                    93:b0:83:29:ac:03:b5:f4:67:5b:5e:e2:10:0d:43:
                    34:2b:43:9a:06:eb:14:9c:42:83:23:3c:e3:7b:c5:
                    0f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:98:D2:C7:86:0E:91:5A:00:3C:A8:1E:57:09:D4:2E:F7:B5:D2:B0
            X509v3 Authority Key Identifier:
                keyid:1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ab:13:60:4a:4d:d6:a5:1a:29:f0:30:63:59:15:12:e6:11:
         67:fd:3d:ac:ea:76:b8:82:a3:8d:42:c6:ed:3a:4d:1c:d5:c4:
         56:d0:7d:80:dd:96:7d:9d:9d:f9:6a:16:6d:b7:90:26:5f:f8:
         b1:4a:c9:0f:20:a9:5c:45:e6:34:1b:2a:a9:d2:fb:3f:3a:cd:
         0b:04:80:68:c4:43:3d:c4:20:98:11:2c:85:38:da:c2:58:80:
         72:f8:66:1d:fc:47:0a:f1:99:dd:01:42:75:1c:91:89:4d:81:
         12:da:07:2b:ea:fd:25:3b:50:48:b2:fb:6e:0e:9e:73:74:ad:
         03:e9:b3:cd:12:f8:e4:ad:e4:06:e7:f8:03:57:d2:c2:ff:08:
         6c:5c:cd:79:50:2d:27:17:04:b1:2b:23:23:53:ea:b9:eb:f4:
         8c:42:80:6e:88:5f:ed:c1:25:e1:df:58:5b:3a:28:23:35:38:
         3d:19:19:71:a2:93:56:d3:39:aa:03:c6:a4:bb:73:12:e4:bf:
         27:39:7e:1b:13:ae:86:8b:19:df:ce:3f:37:96:60:f8:12:68:
         78:69:9f:92:ba:d5:3b:05:86:59:d3:ca:df:d0:47:ba:67:fd:
         45:1d:ed:ef:21:f6:38:ac:6f:da:5b:41:86:45:e8:09:e6:7e:
         fe:72:76:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----