Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
File:                     HGnHYzivyQhbj71mm4t0vXqS1DE.mft (raw, json)
Hash identifier:          V7mPycQS5h8Uu3gqKCj/wmR7M3XsCMjwpSpm6AvP0q4=
Subject key identifier:   31:49:8F:D9:2B:FE:42:48:CD:F8:88:93:52:4A:6B:99:81:12:40:DF
Authority key identifier: 1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
Certificate issuer:       /CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Certificate serial:       01962F06C654101E530EC646A02A334F1683
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
Manifest number:          11D7
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: Biv2qTrQNJJYQlmIhX2GXCsPh8k.roa (hash: qgzc+HC1Pbq5Sym5wnfMxLGpd7cCm/TouNcPCVsFEcM=)
                          2: HGnHYzivyQhbj71mm4t0vXqS1DE.crl (hash: aqh7ZrdxwvIUV5o8hKPv505LLiZEAsuUXQjWFJJlUg8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c6:54:10:1e:53:0e:c6:46:a0:2a:33:4f:16:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=31498fd92bfe4248cdf88893524a6b99811240df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:de:b5:55:75:66:53:56:98:b5:da:e5:28:96:
                    af:22:c3:cd:d9:ff:9d:8a:92:3b:91:0f:81:10:59:
                    af:3b:31:f7:d4:b3:2d:2e:37:fb:2e:32:71:fe:1b:
                    d6:f2:b0:ab:7a:4f:ee:0c:4d:e7:65:2b:b9:ec:46:
                    fd:51:df:8a:72:1e:e7:11:13:e3:5a:cd:e0:d8:88:
                    98:96:37:f3:57:c7:0d:f7:e7:7f:06:9a:32:d0:ae:
                    d6:6b:b0:a0:f0:a3:f9:40:25:85:8d:a1:da:d3:91:
                    26:b6:2d:d4:49:b3:9b:df:67:ba:7b:fc:76:ef:9f:
                    e2:e0:1b:c0:ab:5a:a2:03:e7:05:40:19:f7:39:35:
                    0d:46:91:05:06:29:52:6e:60:4e:ff:13:d0:9b:fd:
                    3e:b3:2d:30:65:67:14:ad:7b:47:af:04:48:5d:e4:
                    7b:3b:93:e0:01:5b:37:56:90:01:43:de:d8:62:61:
                    ee:ec:a3:14:5a:a4:15:a4:bf:90:27:fd:16:f3:95:
                    36:ba:70:62:64:b6:82:37:00:72:52:d5:dd:21:bf:
                    41:72:02:b7:c3:2b:03:79:40:97:43:ef:48:6d:d6:
                    3c:61:d0:68:48:f3:e2:f3:86:ee:8a:e7:84:14:0b:
                    e7:49:45:13:a1:ee:75:66:60:64:c7:0e:3b:a7:e5:
                    cd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:49:8F:D9:2B:FE:42:48:CD:F8:88:93:52:4A:6B:99:81:12:40:DF
            X509v3 Authority Key Identifier:
                keyid:1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:b7:91:d1:3a:68:9e:aa:0a:a7:9d:f2:a1:50:f1:ac:d4:71:
         f1:6f:e7:55:35:60:fd:63:bf:72:4f:47:0e:1a:1f:49:c9:b2:
         b3:9a:80:4a:bc:e1:9e:66:c5:23:b2:88:b7:0d:0d:cc:51:9b:
         51:dd:a9:10:72:7e:73:dc:c8:e6:e7:6c:5f:a4:e9:65:6d:26:
         42:92:92:11:8f:40:18:02:07:fb:de:c0:83:5a:ba:17:ae:ba:
         f1:f9:8f:e2:e7:74:3c:89:ad:43:40:ce:13:5e:84:63:d6:91:
         ee:3e:2c:d5:92:df:c3:ba:91:a7:c0:6a:50:f5:83:2d:99:91:
         d0:92:53:61:a4:da:bd:83:33:88:92:4a:45:fe:9b:0f:1d:8c:
         47:80:c5:37:49:7d:74:63:95:b3:05:de:7c:3b:e9:7c:4d:cd:
         73:4c:2a:15:f1:20:33:0b:2d:0c:84:fe:80:8f:85:38:b4:6c:
         54:6a:e4:aa:62:2e:57:e2:86:cc:02:da:cb:72:16:3c:59:75:
         67:f9:e7:39:d6:d5:de:6a:d8:28:d6:ea:2d:64:e0:7f:16:d2:
         92:4f:0b:bf:4a:6f:1a:69:f1:78:6d:80:85:37:04:a2:f1:7b:
         4d:be:7a:f9:30:a1:84:55:03:d4:aa:e5:17:32:80:aa:8d:07:
         2a:b3:8f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----