Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
File:                     hPLOccb_zodWDVZe5czaMeAbnBU.mft (raw, json)
Hash identifier:          mgItXP+zHEfGeZvXToA2CTEmwY4WGHAWldcaNpShvh4=
Subject key identifier:   BC:29:75:92:40:97:F5:4E:DE:B5:16:24:FB:AB:D3:AA:F3:E4:4E:EA
Authority key identifier: 84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
Certificate issuer:       /CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Certificate serial:       01962F74B4DAA52CAEAF55E41FC75937D32E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
Manifest number:          1016
Signing time:             Sun 13 Apr 2025 14:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:39 +0000
Files and hashes:         1: IDSoal-WPRQg2kggJnZlgyY7mtI.roa (hash: juWvqJns3UfT6SO2SE3jBpIvpwCfu+sMyWgDyL3Cs3I=)
                          2: hPLOccb_zodWDVZe5czaMeAbnBU.crl (hash: HhfKieI9tCL3b3xYU24M8N2fmkHld8StirHwcSQi0H4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b4:da:a5:2c:ae:af:55:e4:1f:c7:59:37:d3:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
        Validity
            Not Before: Apr 13 14:01:39 2025 GMT
            Not After : Apr 14 14:01:39 2025 GMT
        Subject: CN=bc2975924097f54edeb51624fbabd3aaf3e44eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:06:ca:86:d7:46:54:0d:e2:1e:91:6c:25:
                    0b:38:36:64:b1:73:3b:d1:c3:af:e6:2b:39:e1:28:
                    46:af:23:68:2d:73:80:8e:0b:40:34:d0:bc:8a:91:
                    73:16:51:23:71:6c:ea:0f:50:eb:e2:b7:c9:be:d4:
                    4d:d2:2d:3f:d9:1e:46:90:cd:7a:33:e4:54:c6:cb:
                    e3:81:91:f3:ce:75:fe:c9:e1:ae:fb:ce:0b:46:0f:
                    76:b5:e5:1d:aa:40:1b:16:b8:b6:1c:96:3c:46:c7:
                    8e:72:2f:7e:39:f4:4c:f1:10:ae:24:aa:f8:a6:44:
                    f4:25:0a:db:a0:56:2f:13:40:52:83:51:ce:b3:20:
                    d6:96:70:3b:84:5a:fe:e0:9e:a5:a4:08:c6:5e:ab:
                    18:87:cd:5b:b6:c1:55:cc:51:1c:28:2d:d1:24:db:
                    a3:bd:81:44:70:8f:0e:e1:52:b2:f2:35:fe:d4:f6:
                    28:73:c9:ca:f0:68:ae:71:68:bb:71:77:3a:f7:ca:
                    d1:f6:91:d5:f2:a7:8c:6f:db:a2:ca:2d:e3:cd:b8:
                    83:29:ba:71:1d:a6:90:4a:9f:86:60:3d:cc:19:de:
                    a4:e9:8a:99:bd:8d:88:9e:e1:ae:f9:47:56:e2:53:
                    c9:62:d9:50:22:43:55:6c:33:b5:23:a5:e7:46:6b:
                    48:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:29:75:92:40:97:F5:4E:DE:B5:16:24:FB:AB:D3:AA:F3:E4:4E:EA
            X509v3 Authority Key Identifier:
                keyid:84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:13:9c:ab:8d:9b:8e:dc:e6:04:3b:c3:4b:be:c6:5b:83:d7:
         90:d5:e7:a8:51:d9:4e:20:d5:5a:4d:0e:79:21:83:52:cc:dd:
         dc:c4:54:8b:23:49:1c:6f:83:bd:58:98:37:97:ad:a8:2d:21:
         99:64:35:3d:19:8d:12:15:79:ea:42:84:4a:af:8a:27:71:ec:
         43:9a:ce:d4:cb:09:52:ac:8e:f9:77:d7:91:db:63:87:b5:0b:
         1d:c3:fe:83:b0:e3:40:76:fa:0a:ca:d4:2b:66:09:0e:59:4f:
         0d:3a:7b:0c:53:da:70:fc:3d:67:19:66:3e:86:ac:03:5f:85:
         5a:71:36:55:1d:18:2d:be:5c:8b:8f:d5:c1:b8:6b:88:83:00:
         2b:4d:d6:c4:66:b9:a0:a5:24:ea:e0:10:1c:47:dd:0b:2e:07:
         06:bb:7a:d8:7f:3f:be:a9:f0:6c:b0:5b:90:1a:93:f1:98:98:
         47:b9:71:a8:9f:5a:82:66:40:6e:18:d5:12:e0:48:65:7f:21:
         2b:68:7c:d8:88:b1:83:1e:ab:dd:4d:09:2e:c0:41:5b:62:bb:
         a2:f5:02:b2:bd:5f:b1:32:a0:5b:46:85:c0:65:d5:b5:41:f3:
         2f:98:d9:aa:0d:4f:c6:a3:2b:f0:25:34:9c:14:16:07:59:f0:
         50:29:74:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----