Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
File:                     HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft (raw, json)
Hash identifier:          cQu8MfVqmWl5O57oOXGw8zCqpeLQR7FH3PhsbXiPLlQ=
Subject key identifier:   A9:14:83:C0:40:A8:35:EF:9C:B4:C6:D6:C2:C4:F9:0A:DC:13:5C:43
Authority key identifier: 1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
Certificate issuer:       /CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Certificate serial:       01962E98E40C4A823C3ECBC45650A3A409EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
Manifest number:          1444
Signing time:             Sun 13 Apr 2025 10:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:33 +0000
Files and hashes:         1: HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl (hash: NhvTMXhmHMdIO2a0+Ik9u8I+imYLVL5X2iXAodkg5V4=)
                          2: bDOy4M4R57nj8_Sff5gfBKz-LP0.roa (hash: vm1SQ0etoIa7LbOonRtmj5Ah0LoPLSlL7NdxQSQ76i0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e4:0c:4a:82:3c:3e:cb:c4:56:50:a3:a4:09:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
        Validity
            Not Before: Apr 13 10:01:33 2025 GMT
            Not After : Apr 14 10:01:33 2025 GMT
        Subject: CN=a91483c040a835ef9cb4c6d6c2c4f90adc135c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ce:22:fc:9e:53:e4:4a:31:0a:1b:a5:34:be:
                    19:cb:b6:88:a0:08:cb:b3:ee:74:ce:24:c4:b3:a8:
                    80:08:ff:bc:20:45:bf:c4:09:1e:5c:c1:a4:17:62:
                    5e:b5:0f:36:58:f4:f1:1e:7b:cd:20:ad:d7:53:d7:
                    4c:56:50:c6:36:70:2d:9b:5d:68:d5:ed:ed:83:ac:
                    f8:68:f9:b5:73:2d:8b:cd:58:53:44:20:5d:8c:47:
                    76:ad:1e:30:e1:fb:92:52:0d:a6:c8:19:38:e0:d8:
                    ab:f2:1b:f7:d3:98:18:b6:b0:da:79:cf:16:a3:3d:
                    39:66:f7:ad:6b:58:7a:d3:93:6c:d3:54:ee:20:37:
                    e5:d0:bb:c6:37:46:d3:e1:5a:76:a0:3e:8d:3a:45:
                    7f:f5:7b:d5:bc:ef:50:56:dd:04:43:24:35:a8:56:
                    16:91:bd:f6:9e:ce:2c:21:01:7b:f0:c4:0b:cc:74:
                    f3:06:8d:d9:8b:d3:70:f1:70:23:f8:97:9e:55:73:
                    35:a0:2d:00:69:90:18:d5:ec:84:d5:02:c2:68:16:
                    48:5a:a3:dd:4b:c4:c0:54:ef:b8:87:b5:9d:39:d3:
                    19:54:4c:32:1f:cb:96:b2:39:3b:5f:3d:ff:ec:59:
                    df:ce:47:1d:d3:8d:8b:70:a3:e3:93:1b:a4:d2:54:
                    2e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:14:83:C0:40:A8:35:EF:9C:B4:C6:D6:C2:C4:F9:0A:DC:13:5C:43
            X509v3 Authority Key Identifier:
                keyid:1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:70:4f:a3:5b:dd:c4:43:72:6a:97:8b:45:5e:52:e7:8c:eb:
         39:4a:65:0b:18:e3:cc:4c:54:a9:b3:9a:14:d0:ae:3f:e5:7a:
         04:d7:6e:8f:59:18:c4:9e:10:51:7a:e0:c8:fa:ee:cc:7b:99:
         be:3e:22:57:52:02:dc:19:5c:c3:48:86:c3:6a:0c:d1:97:13:
         05:a7:0c:87:3f:ff:cd:7f:d2:79:68:4d:bc:dd:ea:96:dd:d0:
         06:32:c7:17:62:59:2a:aa:9d:db:1d:b9:ad:e9:7b:ac:05:a4:
         6d:9c:2c:99:c3:06:22:b1:3f:4b:38:42:b5:d6:d4:2e:aa:e2:
         ec:10:73:0c:b9:8a:d3:98:3c:df:29:7c:c0:90:66:1b:e9:c5:
         e9:24:9c:af:31:77:ee:6c:0d:9f:1c:cd:2a:13:fd:b6:7b:fe:
         cf:de:03:58:2f:28:23:8f:3c:b8:df:ba:65:15:09:f5:61:cb:
         d0:f2:2a:e7:19:98:ec:2b:70:d5:19:bf:cd:6d:dc:b7:3a:c8:
         34:a0:35:ad:03:73:6a:73:cb:ec:9a:45:d6:8f:f2:67:63:72:
         c7:f8:68:5a:f7:9f:b3:e1:48:a3:67:f0:8e:ea:a4:1a:8d:2f:
         3a:8a:0d:90:81:c6:76:99:39:70:4c:9d:a5:5b:0b:ed:5a:84:
         4b:06:07:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----