Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
File:                     HK37nPzahCYhLdfYhztf5ItBLyo.mft (raw, json)
Hash identifier:          5O8lnGLW97/DocnGQh7Egfks5ArUt8blkMTpFHFUzXA=
Subject key identifier:   65:86:97:62:9D:BA:B4:2E:42:53:E9:AE:2A:4A:22:C0:C8:50:82:9D
Authority key identifier: 1C:AD:FB:9C:FC:DA:84:26:21:2D:D7:D8:87:3B:5F:E4:8B:41:2F:2A
Certificate issuer:       /CN=1cadfb9cfcda8426212dd7d8873b5fe48b412f2a
Certificate serial:       01962E61738B46EEE24F6670B11EFE756109
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
Manifest number:          0FE9
Signing time:             Sun 13 Apr 2025 09:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:00 +0000
Files and hashes:         1: HK37nPzahCYhLdfYhztf5ItBLyo.crl (hash: HHDqIzBn5+9oTqGHbFNTQCKWwYaC9XyXLrR7iD5rk88=)
                          2: qlhTst1KI05-IXjT0Jjp1aMzFfc.roa (hash: AXRjUWRMdXCLNCZlSVsLAGGspUQ5o0C4cdNp8OmuROM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:73:8b:46:ee:e2:4f:66:70:b1:1e:fe:75:61:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cadfb9cfcda8426212dd7d8873b5fe48b412f2a
        Validity
            Not Before: Apr 13 09:01:00 2025 GMT
            Not After : Apr 14 09:01:00 2025 GMT
        Subject: CN=658697629dbab42e4253e9ae2a4a22c0c850829d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c3:02:36:85:bb:32:bf:67:e6:bd:16:5f:2a:
                    53:ba:ea:fd:c7:7e:92:d9:65:d2:9f:e9:6e:a6:27:
                    6e:16:0c:07:7b:20:8f:37:1b:52:57:7b:40:3b:31:
                    4a:fe:dd:5e:64:46:07:a8:4c:ab:53:7b:82:6e:bc:
                    d5:5c:97:2c:45:52:e0:33:7e:85:f2:48:b1:69:9b:
                    8d:3b:9e:54:9c:b2:f0:b4:fb:d0:6d:9e:21:01:49:
                    be:fd:5f:8f:e4:41:a5:43:a1:83:1d:31:28:86:15:
                    0c:85:89:0f:97:95:c6:d0:e6:57:9e:80:68:5a:61:
                    f9:93:63:d0:90:cf:0d:96:a4:11:8c:da:9e:b8:4e:
                    86:58:47:13:a7:81:f0:e3:62:ac:f5:1f:d8:c5:76:
                    c2:20:05:4c:41:b0:6d:c6:fe:4e:5b:7a:bd:73:7a:
                    0c:6a:a6:7a:f4:a0:4f:58:d4:5b:83:06:52:b5:c5:
                    1f:ed:55:6c:36:8b:1f:ba:b2:cb:eb:13:ea:81:c4:
                    ed:df:30:3f:3d:7e:b1:71:3c:48:2e:b3:e1:a8:4d:
                    29:8c:2d:c4:09:29:72:4e:eb:ab:3a:6a:c3:b5:1e:
                    d7:16:9b:87:06:bb:bc:4f:05:50:19:f5:1d:3d:ba:
                    6b:4d:1e:e8:cf:f8:73:76:4f:2b:2a:29:1a:6d:ea:
                    31:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:86:97:62:9D:BA:B4:2E:42:53:E9:AE:2A:4A:22:C0:C8:50:82:9D
            X509v3 Authority Key Identifier:
                keyid:1C:AD:FB:9C:FC:DA:84:26:21:2D:D7:D8:87:3B:5F:E4:8B:41:2F:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:37:1b:47:71:45:51:53:af:c7:20:18:17:f6:31:63:4e:33:
         c6:aa:03:f0:f1:75:d6:4b:5c:c4:7d:0c:bb:ce:2d:7f:72:bf:
         e2:c1:1a:29:c1:97:5e:02:fe:f7:66:f7:2c:fd:05:20:4e:22:
         8a:ca:23:11:bb:fa:6e:6d:e1:b0:ec:2a:34:1d:40:e2:c3:14:
         33:c1:37:c3:62:9b:1a:14:21:aa:32:9d:e6:ba:aa:6b:87:df:
         f6:84:69:6d:44:87:9b:ee:57:97:7d:f1:1b:9b:dd:5c:05:37:
         ea:1c:bc:77:f2:97:63:fa:c5:f0:e3:c5:57:15:02:52:37:b7:
         a0:4f:04:37:7c:b0:0a:c1:62:78:4c:ff:2f:c8:4f:95:29:9a:
         9a:5a:83:dd:8a:96:49:05:33:88:7b:60:f7:7c:e6:91:dc:73:
         10:a9:34:97:98:60:49:9e:b2:bc:39:2c:51:ce:0d:84:36:23:
         5d:a1:ca:40:da:4e:dc:86:17:f7:da:77:72:83:07:39:2c:8a:
         bd:4a:90:a6:d2:ac:10:1d:bb:ff:93:14:0e:1e:01:7e:e8:2e:
         64:bb:62:a1:04:45:32:44:da:6f:a2:df:63:62:5d:95:2d:ea:
         ee:cc:53:bc:cf:35:ed:8d:52:05:c0:b6:49:a8:14:ad:79:29:
         24:d4:91:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----