Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
File:                     HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft (raw, json)
Hash identifier:          G/yXpAKmWezAAkEQ+SEd4bqx52WN3e8bJb09EkMWl0Q=
Subject key identifier:   FF:B9:7B:48:44:C4:D6:EC:70:75:93:61:4F:EF:E4:84:12:4B:B3:EB
Authority key identifier: 1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64
Certificate issuer:       /CN=1e54b80723921cdd51da53325f12b3dbc6782664
Certificate serial:       01962F066836DFBD45F6FBFEE318B5105CEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
Manifest number:          02AF
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl (hash: CWcEKYYGi6rfG67fvvKepWd8PkmegsfVkD5z/CMEUQs=)
                          2: o3Nghoyrq0VU_9LJuoCR7_VhfaU.roa (hash: zzahS3EyrX+jIVg6yGR2kDs1UzlqtPtkB9ukn8PHDT4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:68:36:df:bd:45:f6:fb:fe:e3:18:b5:10:5c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e54b80723921cdd51da53325f12b3dbc6782664
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=ffb97b4844c4d6ec707593614fefe484124bb3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d1:af:1e:63:b4:47:cd:01:9a:11:af:e3:f0:
                    55:7a:a5:25:8a:d4:35:52:7d:61:b6:6e:d5:1c:8f:
                    17:45:68:11:aa:f1:90:97:7e:69:52:6f:01:c5:3c:
                    3f:1a:14:43:e2:ad:7b:2b:e1:b9:c9:50:88:fb:35:
                    35:6a:9e:6f:50:4b:42:c0:c8:89:28:41:0e:bb:f6:
                    c5:8b:e4:23:17:7e:f2:47:6c:97:d1:5d:d0:ff:4d:
                    83:76:1b:fb:fe:da:60:88:46:b3:3d:1d:4c:32:1a:
                    5c:96:ed:5c:ce:4c:39:51:6f:49:10:93:77:ad:88:
                    64:d2:e1:bc:9f:51:0a:9b:ca:09:ae:a9:a4:49:3c:
                    d6:1f:9c:3a:ee:1d:12:77:75:a4:e8:cd:b0:5d:56:
                    75:34:f8:92:3d:ef:3a:20:32:89:b7:29:0d:bc:8e:
                    e2:8b:ce:dd:6d:f1:83:bd:c3:1a:65:21:46:68:64:
                    17:0c:b4:d4:e3:4e:bc:d0:63:cc:c2:50:a7:e7:2b:
                    62:ba:ab:61:3c:73:62:14:18:8f:80:a1:ff:1e:2d:
                    45:8b:0d:a4:cb:01:11:15:8b:f3:67:d3:a3:e8:d9:
                    a6:d4:c4:3f:74:ab:40:77:bf:60:ca:64:f7:17:dd:
                    54:3d:9b:47:01:81:f1:5d:2f:35:82:42:aa:59:29:
                    b3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B9:7B:48:44:C4:D6:EC:70:75:93:61:4F:EF:E4:84:12:4B:B3:EB
            X509v3 Authority Key Identifier:
                keyid:1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:e0:08:74:0a:a8:2c:bc:c4:57:36:7f:f4:c0:08:2e:8b:4c:
         e0:53:53:ff:68:d4:1a:8c:f4:43:77:83:4c:5d:83:39:59:9d:
         9c:73:c0:25:79:f0:b3:a7:42:3d:a0:33:a6:3e:c2:79:96:c6:
         c3:08:35:97:ec:ec:a2:15:8d:4f:ca:6c:d8:b9:a4:82:2c:dc:
         18:26:8d:3b:68:df:6f:38:71:4d:ae:35:7c:b4:50:fa:1f:20:
         6e:c3:92:9e:3c:3a:9e:af:d0:1d:60:bd:3c:f9:3c:5d:5b:af:
         f4:4a:de:8b:51:73:5c:0c:3f:23:27:19:a6:55:37:9a:b5:5b:
         15:bb:75:cc:c6:0f:f6:58:90:34:02:cc:31:8e:c1:99:0f:bf:
         0e:9b:a2:a3:71:42:7d:c6:b8:61:08:5d:b7:25:15:dc:49:03:
         bb:ec:e9:db:07:89:df:96:fb:25:d1:f8:ec:ec:9b:8f:4c:7c:
         2d:be:80:13:ac:25:a0:9d:eb:21:af:f1:ea:9a:d8:65:bb:12:
         48:3c:b3:de:8f:0a:f6:df:91:13:ca:4a:c6:f9:1a:b3:ef:be:
         de:b9:06:73:89:bd:63:18:16:45:d7:c2:88:ac:58:1d:2e:fe:
         28:7c:4f:c4:2b:0f:0b:ab:e6:b1:69:16:03:b7:10:d2:66:08:
         a2:34:0f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----