Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.mft
File:                     HTHgIH7TynaEoD6I-aHeKSLdRd4.mft (raw, json)
Hash identifier:          Hu13CPnYCCUhEwOIrQHLtVXwhc8hIc3Voo7oF3J7qbY=
Subject key identifier:   52:2B:14:FB:EB:97:CC:5E:BF:0A:C5:A8:EC:8A:1D:95:11:8C:C9:76
Authority key identifier: 1D:31:E0:20:7E:D3:CA:76:84:A0:3E:88:F9:A1:DE:29:22:DD:45:DE
Certificate issuer:       /CN=1d31e0207ed3ca7684a03e88f9a1de2922dd45de
Certificate serial:       01962E61AAA1E50A3157ABB742297E20B6F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HTHgIH7TynaEoD6I-aHeKSLdRd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.mft
Manifest number:          92
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: HTHgIH7TynaEoD6I-aHeKSLdRd4.crl (hash: 4+VXYWffQu95pMAe/JdU6+HWJ0WI4/7l3Nfaz2hVvgk=)
                          2: ZwHdEqulD1m_3ODalRm8KKpV4D8.roa (hash: AgKObURVZ2No/6B5xbYFDC7jFhFUnrv7+FottsPk3vg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:aa:a1:e5:0a:31:57:ab:b7:42:29:7e:20:b6:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d31e0207ed3ca7684a03e88f9a1de2922dd45de
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=522b14fbeb97cc5ebf0ac5a8ec8a1d95118cc976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:16:44:6b:4e:79:72:79:06:b5:69:f2:8f:c1:
                    0f:b7:a4:3e:92:6e:c1:31:e7:65:d6:ae:f0:44:92:
                    6a:19:2f:de:12:dd:32:37:c8:ec:d5:41:24:66:e8:
                    c8:3b:03:e8:f3:60:af:52:ee:ab:5d:77:5a:d2:b2:
                    a5:a0:6f:81:ff:19:35:75:9e:62:1a:e5:4d:3c:06:
                    0c:a3:d2:26:82:d0:d3:85:43:f5:9c:1d:65:4e:7c:
                    a9:1d:fb:49:4e:b8:45:22:f9:e4:e9:f3:04:cc:8b:
                    6a:bb:ff:2e:64:8c:25:2a:04:7e:21:fe:71:44:87:
                    aa:f3:55:71:c5:3d:53:07:27:a5:f7:ef:49:39:c1:
                    3c:93:23:52:3d:a3:68:06:76:08:d9:e2:9c:bb:4c:
                    57:cb:76:77:7e:76:b0:23:07:88:57:a2:24:af:61:
                    bd:af:61:0e:b8:71:4a:8f:08:5b:13:47:39:cd:86:
                    48:48:b2:2e:0f:f2:a9:df:cb:94:e7:f6:80:c9:82:
                    bb:8a:e6:20:02:20:ef:ed:36:03:08:f2:66:00:26:
                    c5:cd:61:45:4b:4b:f9:7f:84:46:11:a7:15:b5:11:
                    89:6c:f6:03:8b:6b:2e:15:d6:72:2f:06:6d:c8:62:
                    08:53:b8:c7:1e:cf:5d:1c:e2:1b:be:b4:f9:66:83:
                    42:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:2B:14:FB:EB:97:CC:5E:BF:0A:C5:A8:EC:8A:1D:95:11:8C:C9:76
            X509v3 Authority Key Identifier:
                keyid:1D:31:E0:20:7E:D3:CA:76:84:A0:3E:88:F9:A1:DE:29:22:DD:45:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTHgIH7TynaEoD6I-aHeKSLdRd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:92:5e:4d:aa:50:8b:71:9a:ac:02:76:f4:87:d8:e0:9e:54:
         82:31:1d:9e:7a:94:7d:3f:dd:77:4c:d1:6d:63:07:09:88:43:
         69:34:02:d3:4a:be:b9:57:51:7a:00:a1:c0:4b:df:12:94:f0:
         88:1c:bd:e2:b8:19:17:71:79:0a:7b:19:45:c3:74:75:7a:99:
         e5:58:a3:07:e1:2d:78:3c:90:69:3e:10:2a:16:b1:bb:5e:05:
         99:2e:78:bf:21:56:f1:d0:4d:bc:0e:94:2f:37:dd:a8:7d:da:
         2a:f8:57:1c:c0:52:a8:5e:57:9f:73:7a:66:a5:71:6e:24:7d:
         12:d0:a8:e7:aa:5e:80:11:00:a1:a9:93:a7:83:c6:df:88:01:
         b6:45:43:a7:d0:8b:5c:f8:59:81:27:0c:dd:35:ce:b6:ee:f1:
         a3:0a:50:f2:52:f4:5b:e9:33:ee:39:08:e2:02:55:63:83:78:
         cf:6e:44:89:ad:fb:79:61:23:e5:21:2c:2f:40:d1:6c:e3:0b:
         5d:d2:2c:28:1a:2a:7e:e8:0b:15:13:d2:21:8f:ff:f6:f8:01:
         d1:63:27:65:80:ce:1f:c3:96:d2:66:40:45:d1:e6:76:ee:e6:
         99:43:71:b7:de:12:81:c5:68:c3:4a:b3:9e:ef:26:04:63:2e:
         80:0b:b6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----