Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
File:                     HyyzW4dHgMuT3EQhC5151u2U_l4.mft (raw, json)
Hash identifier:          Oz57uQinY6YA8xN/P3U+M9K23wLKjkJ3ixj4BUHlMk0=
Subject key identifier:   E1:DB:65:96:4A:6B:1F:4C:D8:87:3D:0A:55:76:21:61:5F:47:E6:A4
Authority key identifier: 1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
Certificate issuer:       /CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Certificate serial:       01962F74C5E32DCB86FC8235AF46C31D7707
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: HyyzW4dHgMuT3EQhC5151u2U_l4.crl (hash: pmpOK8tIfZXyKWJLFp3yz0Tr+1wTPNpLyyjAHtBYzCE=)
                          2: UyByoYW1eGUazMnJ8I-2ncOK0hs.roa (hash: 2RQW6HeC6UJWl0PyhVUJ1Au2Gjg5MsY0s3xBfwIHAaw=)
                          3: vRyA1sBnGbBdfcd9RnV3r6TFptk.roa (hash: +l9+gT14Y8WjAyCtiqhfE/NWwkGANddHeME8IP4u0y0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c5:e3:2d:cb:86:fc:82:35:af:46:c3:1d:77:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=e1db65964a6b1f4cd8873d0a557621615f47e6a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d3:a7:e9:c1:4f:9c:9d:b6:de:ff:9a:0c:8c:
                    b8:fd:5b:c8:21:4a:1c:bc:c1:ed:52:3c:19:77:1f:
                    44:61:31:ce:2b:5b:47:0d:1b:3d:d2:9d:29:31:ad:
                    0f:ef:dc:1a:0f:22:c6:17:31:05:56:af:ca:60:ba:
                    94:ea:a0:85:5f:6f:ce:0f:7a:8c:1d:c2:c3:9f:d5:
                    b3:fd:32:5a:b3:dd:91:89:84:e1:a6:5f:ff:71:b1:
                    21:84:e1:06:1f:62:39:76:0f:d3:a9:ba:30:76:a8:
                    c9:6b:1c:b8:2a:c2:37:e8:e4:53:a1:d2:2c:c0:9a:
                    fb:e8:18:d1:dd:77:fe:ed:90:7e:7b:cb:a6:3e:6d:
                    7c:7c:70:65:e2:ae:8e:27:4f:53:8b:03:bc:1d:17:
                    3d:6e:b2:95:30:f9:6e:70:ec:f7:ec:e6:d2:a3:72:
                    77:fe:34:1c:d8:2c:d1:a6:35:50:55:80:74:16:3f:
                    7f:79:b4:3d:aa:1b:1d:f4:9d:60:01:8d:a8:7c:20:
                    79:77:5c:a9:7f:e1:50:18:d4:f3:a0:e8:98:b0:3d:
                    61:42:e0:a3:e4:c5:5b:61:9e:23:39:2b:fa:19:5f:
                    d9:af:64:ce:33:75:96:6a:f8:99:2e:37:79:fa:ea:
                    04:ad:87:ce:53:f5:56:64:22:d8:a7:b3:7a:27:cd:
                    a6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DB:65:96:4A:6B:1F:4C:D8:87:3D:0A:55:76:21:61:5F:47:E6:A4
            X509v3 Authority Key Identifier:
                keyid:1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ac:ac:86:88:f3:08:c1:d8:71:de:ca:d8:96:5a:90:54:5f:
         bc:1e:e6:16:e7:e5:4a:37:ae:19:ff:19:48:a8:d8:91:73:24:
         fa:26:81:16:fe:84:88:49:a1:58:1f:b4:96:04:0c:9c:4e:3d:
         31:ef:24:79:9c:62:bc:45:05:0b:38:b6:ed:10:8b:c3:5a:2c:
         e1:2f:71:15:06:1f:48:c0:a4:da:05:9c:6b:7b:ff:cb:92:79:
         e4:6d:9d:9c:d7:2e:b3:fb:63:e9:87:1a:6e:6b:a0:91:0c:f5:
         05:3b:30:ed:50:c4:7a:86:c3:63:c2:db:91:af:5b:40:3c:fa:
         82:a8:97:b3:0d:2d:53:df:93:0f:ec:c1:f5:e1:45:19:59:6e:
         3d:20:19:91:52:77:43:28:08:ed:1e:39:b0:86:2c:aa:cd:7b:
         30:1c:c8:18:8a:f9:7c:75:b9:7e:07:46:a6:d3:9b:39:1f:19:
         76:63:c7:1b:dd:65:6c:df:b1:39:43:9a:7a:40:b9:66:4d:27:
         87:57:ac:cc:9b:5e:10:21:1b:30:ba:53:cc:98:7f:14:67:b5:
         96:e8:59:93:f1:ba:38:2d:96:0b:dc:7d:68:44:f7:e4:ff:78:
         8b:9a:04:60:de:ce:93:b2:62:ee:dc:42:28:40:3b:0e:e4:7e:
         f5:25:8f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----